Privacy Notice
How we handle personal data.
In short
- This website sets no cookies and uses no analytics, advertising or tracking.
- There are no accounts and no forms. We only receive personal data if you choose to email us, plus the technical logs any web server keeps.
- We do not sell, rent or share personal data for marketing, and we do not build profiles of visitors.
- The research and data shown on this site are drawn from official, aggregated public records. It contains no data about identifiable individual voters.
1. Who we are
This website is operated by Polity Lab ([full registered legal name and entity type], [registered address]). For the purposes of data protection law, Polity Lab is the data controller (in India, the Data Fiduciary) for the personal data described in this notice.
Contact for all privacy matters: hello@politylab.org (subject line "Privacy").
Grievance contact for India (Digital Personal Data Protection Act, 2023): [name or designation of the grievance officer], reachable at the same address.
2. What we collect and why
| Data | Why we use it | Legal basis | How long |
|---|---|---|---|
| Technical server logs: IP address, date and time, page requested, browser and device type, referring page | To deliver the website, keep it secure, and detect and prevent abuse | Our legitimate interest in operating a secure website (EU/UK GDPR Art. 6(1)(f)); processing reasonably necessary to provide the site you have chosen to visit, where other laws apply | Kept by our hosting provider for up to [30] days, then deleted, unless needed to investigate a specific security incident |
| Emails you send us: your name, email address, organisation and anything you choose to include | To read and reply to your enquiry, and to keep a record of our correspondence | Information you voluntarily provide for that purpose (India DPDP Act s. 7(a)); our legitimate interest in responding, or steps you ask us to take before a possible engagement (GDPR Art. 6(1)(f) and (b)) | For as long as needed to deal with your enquiry and up to 24 months afterwards, unless a longer period is required by law or for an ongoing engagement |
Please do not send us sensitive personal data (for example about health, religion, caste or political opinions) unless it is genuinely necessary for your enquiry.
3. Cookies and similar technologies
This website does not set cookies and does not use browser storage, analytics, advertising pixels, session recording or fingerprinting. Because nothing is stored on your device, no cookie banner is needed. If this ever changes, we will update this notice first and, where the law requires, ask for your consent before anything non-essential is used.
All fonts, scripts and map data used by the site are served from our own server, so your visit is not disclosed to third-party font or script providers.
4. What we do not do
- We do not sell or rent personal data, and we do not "share" it for cross-context behavioural advertising as defined in Californian and other US state laws.
- We do not use personal data for automated decision-making or profiling that has legal or similarly significant effects.
- We do not knowingly collect personal data from children. The site is intended for professional and adult audiences. If you believe a child has sent us personal data, contact us and we will delete it.
5. Who we share it with
- Hosting provider: [Hostinger International Ltd.], which stores the website and its server logs on our behalf as a processor, under a data processing agreement.
- Email provider: GoDaddy (GoDaddy's own email service), which stores our email on our behalf.
- Authorities: only where we are legally required to, or to protect our rights or the safety of others.
We do not share personal data with any other third party.
6. International transfers
Our website is hosted in a data centre in the Netherlands, inside the European Union, so the server logs described above are stored in the EU under the protection of the GDPR. Email is stored by our email provider, which may hold it in other countries. Where personal data is transferred from the European Economic Area, the United Kingdom or another country with transfer rules, we rely on an adequacy decision or on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK Addendum), as offered by our providers. Transfers from India are made in line with any restrictions notified under the DPDP Act.
7. How we protect it
The site is served only over encrypted connections (HTTPS). Access to server logs and email is limited to the people who need it, protected by strong authentication. We keep the minimum data necessary and delete it on the schedule above. If a personal data breach occurs, we will notify the affected people and the relevant authorities where the law requires.
8. Your rights
Depending on where you live, you have rights over your personal data. You can exercise any of them, free of charge, by emailing hello@politylab.org. We may need to confirm your identity first. We aim to respond within one month, or sooner where the law that applies to you requires.
Everyone
- To know whether we hold personal data about you, to get a copy, and to have it corrected or deleted.
- To object to our use of it, and to withdraw any consent you have given.
India: Digital Personal Data Protection Act, 2023
- To obtain a summary of your personal data and how it is processed; to correction, completion, updating and erasure; to grievance redressal; and to nominate another person to exercise your rights in the event of death or incapacity.
- If you are not satisfied with our response to a grievance, you may complain to the Data Protection Board of India.
European Union and United Kingdom: GDPR and UK GDPR
- Access, rectification, erasure, restriction, data portability, and objection to processing based on legitimate interests.
- To lodge a complaint with your local data protection supervisory authority, or in the UK with the Information Commissioner's Office.
Africa
- Uganda (Data Protection and Privacy Act, 2019): you may complain to the Personal Data Protection Office.
- Kenya (Data Protection Act, 2019): you may complain to the Office of the Data Protection Commissioner.
- Nigeria (Nigeria Data Protection Act, 2023): you may complain to the Nigeria Data Protection Commission.
- Residents of other countries may contact their national data protection authority.
United States
- Residents of California and other states with consumer privacy laws may request access to, correction or deletion of their personal data. We do not sell or share personal data, so there is nothing to opt out of. We will not discriminate against you for exercising your rights.
9. Links to other websites
This site links to other websites, including our LinkedIn, Facebook and X pages and the official sources we cite. Those sites have their own privacy policies; we are not responsible for how they handle personal data. Our social media links are plain links: nothing is loaded from those platforms until you click.
10. Changes to this notice
We will update this notice when our practices change, and change the "last updated" date above. Significant changes will be highlighted on this page.