● eighthspace
Privacy Policy

Your information stays yours.

This policy explains what personal data EIGHTHSPACE collects, why we use it, who may process it for us and the choices available to you.

Effective 1 August 2026 · Last updated 1 August 2026

1. Who we are

EIGHTHSPACE is a creative web studio operating from India and serving clients in India and internationally. In this policy, “EIGHTHSPACE”, “we”, “our” and “us” refer to the studio operating this website and providing the services described on it.

For privacy questions, requests or grievances, contact our privacy and grievance contact at info@eighthspace.in.

2. Information we collect

Depending on how you use the website and our services, we may collect:

  • Enquiry details: name, email address, telephone number, business name, business type, goals, budget, timeline and preferred contact method.
  • Onboarding and project information: audience, services, content, competitors, design preferences, launch plans, integrations, notes, approvals and feedback.
  • Account information: the name and email address supplied by the sign-in provider when you enter a client or agency workspace. We do not receive or store your ChatGPT password.
  • Files and communications: documents, images and other materials you upload or send, together with project messages.
  • Technical and analytics information: device, browser, approximate location, pages viewed, referral source and interaction data when optional analytics is enabled and you have allowed it.

3. Why we use it

We process personal data only for clear, lawful purposes, including to:

  • reply to enquiries and recommend an appropriate project scope;
  • prepare proposals, agreements, invoices and project plans;
  • design, develop, launch and support client websites;
  • operate the client portal, agency dashboard and file workspace;
  • protect accounts, prevent misuse and maintain service security;
  • meet tax, accounting, contractual and legal obligations; and
  • understand website performance and enquiries through analytics only when you have chosen to allow analytics.

Where consent is required, it will be requested through a clear affirmative action and may be withdrawn. We may also process data to provide a service you requested, perform a contract, comply with law or pursue legitimate business interests where applicable law permits.

4. When information is shared

We do not sell personal data. We share only what is reasonably needed with service providers that help us operate, such as:

  • website hosting, storage, security and database providers;
  • the authentication provider used for secure sign-in;
  • email, scheduling, communication and payment providers you use;
  • Google Analytics, only after analytics consent is given; and
  • professional advisers, regulators or authorities where disclosure is required by law or necessary to protect legal rights.

Providers may process data in India or other countries. We use reasonable contractual and technical safeguards for cross-border processing and follow applicable transfer restrictions.

5. Retention

We keep information only for as long as reasonably necessary:

  • unsuccessful or inactive enquiries are normally kept for up to 24 months;
  • project, contract, invoice and payment records may be kept for the project term and up to seven years afterwards where needed for tax, accounting, dispute or legal purposes;
  • project files are normally removed within 90 days after the project and included support period end, unless a care plan or written agreement requires longer storage; and
  • analytics data follows the retention setting of the analytics service and is collected only after consent.

We may anonymise information so it no longer identifies an individual and retain that anonymous information for business analysis.

6. Your choices and rights

Subject to applicable law, you may ask for a summary of your personal data, request access, correction, completion, updating or erasure, withdraw consent, nominate another individual to exercise rights in the event of death or incapacity, or raise a grievance about how your data is handled.

Email info@eighthspace.in from the address connected with your record. We may need to verify your identity. Some information may be retained where the law or an active legal claim requires it. If your grievance is not resolved, you may approach the competent data-protection authority available under applicable law.

7. Security

We use access controls, restricted admin permissions, encrypted connections, managed infrastructure and reasonable operational safeguards. No online service can guarantee absolute security, so please avoid uploading unnecessary sensitive information and contact us immediately if you suspect unauthorised access.

8. Children

Our website and services are intended for business owners and people aged 18 or over. We do not knowingly seek personal data from children. If you believe a child has submitted information, contact us so we can review and delete it where appropriate.

9. Changes to this policy

We may update this policy when our services, providers or legal obligations change. The latest version will remain on this page with its updated date. Material changes may also be communicated through the website, client portal or email where appropriate.