Privacy Policy
Scope and controller
This notice explains how LEKHI Studio processes information through this website and related business correspondence. Where the EU General Data Protection Regulation or similar law applies, the controller is Abhimanyu Lekhi, trading personally as LEKHI Studio.
119, Matidass Nagar, Mahesh Nagar, Ambala Cantt, Haryana 133001, India
Email: hello@lekhi.studio
Last reviewed: 30 August 2026.
Website delivery, security and server logs
Purpose: to deliver the website, maintain availability, diagnose errors and protect the website and infrastructure against misuse.
Data categories: IP address, request date and time, requested URL, response and network information, referrer and browser, operating-system or device information supplied with the request. Vercel may derive approximate location information from an IP address.
Legal basis where GDPR applies: LEKHI’s legitimate interests in providing a secure, reliable website (Article 6(1)(f) GDPR).
Recipient/processor: Vercel Inc. as the website hosting and delivery provider. Vercel’s privacy notice is available at https://vercel.com/legal/privacy-notice.
Retention: LEKHI retains technical data only for as long as needed for operational troubleshooting, security, abuse prevention and applicable legal interests, subject to provider controls and retention. Vercel may process data in the United States and other locations described in its documentation.
Vercel Web Analytics
Purpose: to understand aggregated visits, page use, referrers and technical performance so that the website can be maintained and improved.
Data categories: a request-derived visitor identifier, session information, page URL and path, filtered query parameters, referrer, approximate location, browser, operating system and device category. This site removes query strings and URL fragments before an analytics event is sent.
The website does not deliberately send names, email addresses, form contents or other form values to analytics. After Web3Forms confirms a successful submission, the only custom event is the generic name “Enquiry submitted”, without custom event data.
Legal basis where GDPR applies: LEKHI relies on its legitimate interest in understanding and improving its business website (Article 6(1)(f) GDPR), subject to the visitor’s rights and any stricter local requirement. This statement does not claim that analytics is universally exempt from consent requirements.
Recipient/processor: Vercel Inc. Vercel states that Web Analytics uses no third-party cookies and that its request-derived visitor hash is discarded after 24 hours. Aggregated analytics records are retained according to the account configuration and provider service. Details: https://vercel.com/docs/analytics/privacy-policy.
Project and audit enquiry forms
Purpose: to receive, assess and respond to a requested project or audit enquiry, establish the requested business context and prevent spam.
Data categories actually submitted: name, email address, optional company or brand, optional website, project type, budget, timeline, message or description, submitting page URL, generated subject, reply-to address and a hidden anti-spam field. The form does not request special-category data; please do not include it.
Legal basis where GDPR applies: steps requested before a possible contract (Article 6(1)(b) GDPR) and, depending on the enquiry, LEKHI’s legitimate interest in handling relevant business communications (Article 6(1)(f) GDPR).
Recipient/processor: Web3Forms / Web3Creative processes the web submission and delivers it to LEKHI. The form endpoint uses HTTPS. Web3Forms describes its processing, infrastructure and subprocessors at https://web3forms.com/privacy.
Retention: LEKHI keeps enquiry data only as long as necessary to handle the request, establish or perform a business relationship, meet applicable legal obligations or protect legitimate legal interests. Web3Forms currently states that submission data is retained for no more than three years unless a shorter plan or earlier deletion applies.
If the form provider cannot confirm delivery, the site offers a pre-addressed email fallback. Data is sent by email only if the visitor chooses to use that fallback.
Email and business correspondence
Purpose: to deliver enquiries, reply, discuss requested work, document agreed scope and maintain necessary business records.
Data categories: sender and recipient details, message content, attachments, timestamps and technical email metadata.
Legal basis where GDPR applies: requested pre-contractual steps or performance of a contract (Article 6(1)(b) GDPR), compliance with applicable obligations (Article 6(1)(c) GDPR) and legitimate interests in orderly business communication and legal protection (Article 6(1)(f) GDPR), as applicable.
Recipient/processor: Google Workspace is used for business email. Retention follows the same necessity criteria described for enquiries, together with any applicable accounting, contractual or legal record-keeping duty. Google may process data internationally as described in its privacy and Workspace documentation.
Cookies, fonts and embedded media
This website does not set document cookies, use advertising tags, load fonts from an external font provider or embed third-party video/social players. Vercel Web Analytics is the only analytics integration. Public website images and the LEKHI-owned social cards are served as local site assets.
International processing
LEKHI’s operator is based in India. Vercel, Web3Forms and Google may process data in countries outside the visitor’s country, including the United States and other locations described in their current provider documentation.
The providers publish contractual and transfer information, but the safeguards applying to a particular transfer can depend on the service, account plan, customer configuration and destination. LEKHI does not represent on this page that a particular adequacy decision, certification or contractual module applies unless it has been verified for the relevant account and transfer.
Applicable data-protection rights
Where GDPR applies, rights can include access, correction, deletion, restriction, objection and data portability where applicable. A person may withdraw consent at any time for processing that actually relies on consent; this does not affect earlier processing. Rights are not absolute and depend on the processing and applicable law.
To make a request or ask a privacy question, email hello@lekhi.studio. LEKHI may need enough information to verify the requester and identify the relevant data.
Supervisory complaint
Where GDPR applies, a person may also have the right to lodge a complaint with the competent data-protection supervisory authority, particularly in the country of habitual residence, place of work or the place of an alleged infringement.