Privacy & Cookie Policy

Last updated: May 2026

Privacy Policy

In short: we collect what you submit via our contact form, plus basic traffic stats from PostHog and Vercel Analytics. We never sell your data. Contact submissions are kept 24 months (longer for active clients); analytics data 12 months. You can ask us to show, fix, or delete your data anytime via the contact form.

1. Who We Are

TheSecureLancer is an independent cybersecurity consultancy run by Tanveer Singh, based in Punjab, India (Udyam Registration: available on request). "We" means Tanveer Singh.

2. What We Collect

Contact form: name, email, optional phone, and your message.
Analytics: PostHog and Vercel Analytics collect device type, browser, approximate region, pages viewed, and referrer. PostHog uses a random ID to recognise repeat visits; Vercel Analytics sets no persistent ID.
Theme preference: saved locally in your browser only, we never see it.

3. How We Use It

Respond to your enquiry and discuss engagements.
Deliver contracted work under a signed NDA.
Improve the site using traffic patterns.
Remember your display preference.

4. Legal Basis

EEA / UK (GDPR): contact-form data is processed to perform a contract (Art. 6(1)(b)); analytics runs on legitimate interest (Art. 6(1)(f)), weighed against your privacy.

India (DPDP Act 2023): contact-form data is processed on the consent you give by submitting it, and, once engaged, to deliver the service.

5. Who We Share Data With

We never sell, rent, or trade your data, and we don't use ad networks or data brokers. Only these sub-processors, each essential to running the site:

Sub-processor	Purpose	Location
PostHog Inc.	Analytics	EU / US
Vercel Inc.	Hosting	EU / US
SMTP provider	Emailing you back	Varies

6. Cross-Border Transfers

We serve clients worldwide, so data may be processed outside your country, including the US and EU. Transfers from the EEA are covered by the European Commission's Standard Contractual Clauses.

7. Retention

Contact submissions: 24 months (or engagement length + 24 months for clients).
PostHog analytics: 12 months.
Vercel Analytics: aggregated, follows Vercel's own retention.
Theme preference: until you clear your browser storage.

8. Your Rights

Depending on where you're located:

Access: get a copy of your data.
Rectification: fix inaccurate data.
Erasure: delete your data, subject to legal retention.
Portability: get your data in a machine-readable format.
Restriction: pause processing during a dispute.
Objection: object to processing based on legitimate interest.
Withdraw consent: anytime, where consent is the basis.
Nomination (DPDP), name someone to act for you if you die or become incapacitated.

9. Security

TLS 1.2+ encryption in transit; HTTPS enforced via Vercel and Cloudflare.
Secrets and API keys stored as encrypted environment variables.
Engagement deliverables shared only over encrypted channels, under NDA.
Only Tanveer Singh can access contact submissions.

No system is fully secure. Contact us right away if you suspect a breach.

10. Children

This site is for businesses and professionals only, not for anyone under 18. We don't knowingly collect data from minors, contact us to have it removed.

11. Grievance Officer (India DPDP Act 2023)

Tanveer Singh, TheSecureLancer, Punjab, India, via /#contact. Complaints acknowledged within 48 hours, resolved within 30 days.

This policy may be updated periodically; the date above shows the last material change. Continued use of the site means you accept the current version.