1. Overview & Data Controller
This website (www.sudhirchavan.com, accessible online at https://www.sudhirchavan.com) is the personal professional portfolio and engineering practice website operated by Sudhir Chavan, based in Sangli, Maharashtra, India.
For questions or requests regarding your personal data or this Privacy Policy, you can reach out directly via email at sudhirchavan99@gmail.com or through the Contact page.
2. Information Collected
Information is collected solely when you choose to interact with this website:
- Direct Contact Form Inquiries: When submitting an inquiry through the contact form, you provide your full name, email address, contact telephone/mobile number, project inquiry type (e.g. freelance consulting, contract, or full-time engagement), subject line, and project message details.
- Technical & Security Logs: For system reliability, spam prevention, and abuse mitigation, requests may temporarily log technical metadata including your browser user agent, timestamp, request URI, and a pseudonymized/hashed IP address used for rate limiting (maximum 5 submissions per hour per user).
3. How Your Information Is Used
Your data is processed based on legitimate professional interests and direct consent:
- To evaluate your technical requirements and respond to your direct inquiries within 24 business hours.
- To prepare Statements of Work (SOW), Non-Disclosure Agreements (NDAs), project architectures, or freelance milestone estimates.
- To safeguard www.sudhirchavan.com against distributed denial-of-service, automated form spam (via honeypot and rate-limiting protections), and unauthorized access.
Zero Third-Party Advertising: Your contact details and communication history are never sold, rented, leased, or traded to third-party data brokers, marketers, or advertisers under any circumstances.
4. Data Storage, Confidentiality & Security
I take information security seriously and maintain industry-standard technical safeguards:
- Secure Transport: All data transmitted between your browser and www.sudhirchavan.com is encrypted in transit using Transport Layer Security (TLS / HTTPS).
- Injection & Scripting Prevention: Strict Content Security Policy (CSP), HTML output sanitization, input parameterization (PDO prepared statements), and CSRF (Cross-Site Request Forgery) protection tokens defend all submission pathways.
- Access Controls: Messages received via the website are stored in a protected internal relational database accessible only via a secure, password-authenticated admin control panel with rate-limiting and brute-force lockout defenses.
5. Cookies & Tracking Technologies
When you browse www.sudhirchavan.com, this website operates with minimal technical cookies:
- Essential Session Cookies: A standard first-party PHP session cookie (
PHPSESSID) is utilized for maintaining administrative authentication sessions and managing CSRF protection tokens during form submissions. - No Tracking / Ad Cookies: There are no third-party marketing pixels, advertising beacons, or invasive analytics trackers that profile you across the web.
6. Third-Party Links & Embedded Content
The website www.sudhirchavan.com may provide links to external websites and developer profiles, including LinkedIn, GitHub, Facebook, and Instagram. Furthermore, select interactive case studies may provide options to view interactive Power BI reports hosted securely on Microsoft cloud infrastructure (app.powerbi.com).
Once you navigate away from www.sudhirchavan.com to external platforms, their respective privacy policies and terms of service govern your interaction. I encourage you to review their policies directly.
7. Data Retention & Your Rights
Inquiry records are retained only as long as necessary to facilitate ongoing business communications or fulfill legal and accounting requirements related to consulting engagements.
Depending on your jurisdiction, you have the following rights regarding your personal information:
- Right to Access: Request a copy of the personal contact records held in relation to your inquiries.
- Right to Rectification: Request correction of inaccurate or outdated contact information.
- Right to Erasure: Request that your contact message records be permanently deleted from the database.
To exercise any of these rights, send an email to sudhirchavan99@gmail.com with your request, and it will be processed promptly.
8. Changes to This Privacy Policy
This Privacy Policy may be updated periodically to reflect changes in site functionality, security protocols, or legal requirements. The "Last updated" date at the top of this document indicates when changes were made.