This page explains what happens to information you give Spy Eye through spyeyeindia.com, and what happens to the little that the website records on its own. It is written to be read, not to be got past: if something here is unclear, ask us and we will explain it in plain words.
In this policy “Spy Eye”, “we”, “us” and “our” mean Spy Eye, Kolkata. “You” means anyone visiting the website or sending us an enquiry through it.
What we collect
There is one form on this website. It is the enquiry form, it appears on several pages, and it asks for:
- Your name — so we know who we are replying to.
- Your phone number — how we usually reply.
- Your email address — optional. Leave it blank and the form still works.
- What the enquiry is about — one of four choices.
- Your message — whatever you choose to write.
When you send that form, our server also records which page you sent it from, the date and time, your IP address and your browser's user-agent string. Those four are not asked of you; they arrive with any request a browser makes. We keep them because they tell us which page prompted an enquiry, and because they are what a limit of six enquiries per hour from one address is counted against — without which the form would be filled by scripts within a week.
We do not ask for and have no use for your payment card details, bank details, Aadhaar or any other government identifier, date of birth, health information, or any password. No form here has a field for any of them. If you write something of that kind into the message box, please do not.
What the website does not do
- No cookies. This site sets none, and stores nothing in your browser. That is why you have not been shown a cookie banner: there is nothing to consent to.
- No analytics and no tracking. There is no Google Analytics, no advertising pixel, no session recording and no profiling of any kind. We cannot see what you looked at, and we do not want to.
- No accounts. There is nothing to register for, so there is no password of yours for us to hold or lose.
- Nothing is sold. We do not sell, rent or trade enquiry details to anyone, for any purpose, ever.
Where an enquiry goes
When you press send, one enquiry goes to three places, and nowhere else:
- A file on this website's server, kept outside the part of the server the web can reach and readable only by the account that runs the site. This is the record of last resort: it means an enquiry is never lost because email or the system below was unavailable for a minute.
- Our email inbox, so somebody sees it the same day. Our mail is hosted by Google, so a copy sits with them for as long as the message is in the mailbox.
- Our own customer system, so that whoever answers you can see the enquiry, note what was discussed and turn it into a job without anything being retyped. That system runs on Google Cloud infrastructure in Google's Mumbai region, so your details stay in India. The connection to it is encrypted and authenticated, website enquiries are held in a section of it that only an administrator can open, and nobody outside Spy Eye has access to it.
That is the whole list. We do not pass enquiries to other installers, resellers, marketing firms or lead brokers.
Spam checks. Every enquiry is checked automatically for signs that a program sent it rather than a person: how the form was filled in, how fast, and whether the message reads like advertising. Nothing is sent to any outside service to do this, and no cookie is set. A message that is clearly automated is not delivered; it is kept in a separate file on the same server, only so we can check the filter is not catching real people, and it is overwritten as newer ones arrive. A message that only looks doubtful is delivered as normal, marked for a person to read before replying.
The one thing that would change this is the law: if a court, the police or a government authority lawfully requires us to produce information, we have to comply. We would tell you if we were permitted to.
Other people's services on these pages
Three parts of this website involve Google, and it is only fair that you know which and when.
Typefaces. The fonts these pages are set in are served by Google Fonts. Your browser fetches them when a page loads, which means Google's servers see your IP address and which page requested them. This happens on every page, and we have not found a way around it that keeps the site looking as it should. Nothing you type is involved.
The map on the contact page. An embedded Google map normally loads the moment the page does, and hands Google your IP address and a cookie whether or not you cared about the map. Ours does not. Until you press “Show the map”, nothing is fetched from Google and the panel simply shows our address. Press it and you are choosing to load Google Maps, with everything Google's own privacy policy then applies to that.
The reviews on the home page. These are public Google reviews of our business. Our server asks Google for them once a day and stores the answer; your browser never contacts Google to show them, so reading the reviews tells Google nothing about you — not your IP address, not that you were on the page. That includes the small round photograph beside each review: it is the reviewer's own Google profile picture, but our server fetches it and serves it from this website, precisely so that displaying it does not turn into a request to Google from your computer. Reviews and photographs are deleted from our server thirty days after Google last returned them, which is as long as Google's terms allow us to keep them. The two links beside the reviews go to Google, and only if you click.
If you are the author of one of those reviews: we display what Google publishes — your name, your profile picture, your rating and your words, unedited — and nothing else. We hold no other information about you. Edit or delete the review on Google and this page follows within a day. If something is wrong in the meantime, write to the address at the end of this page and we will take it down.
The WhatsApp button is an ordinary link. Nothing loads from WhatsApp unless you tap it, and if you do, that conversation is between you, us and WhatsApp.
How long we keep it
We keep an enquiry for as long as it is live — while we are quoting, building, installing or supporting — and afterwards for as long as we may reasonably need it: to honour a warranty, to answer a question about work we did, or because the law requires a record to be kept for a period.
The file on the web server is not a second customer database. It is archived and cleared quarterly, once its contents are safely in the customer system.
The numbers counted for the six-per-hour limit are not kept as a list of visitors: each is stored as a one-way hash, and deleted automatically a couple of hours later.
If you want your details removed sooner, ask. See below.
How it is protected
The website is served over HTTPS, so what you type reaches us encrypted. The enquiry file sits outside the web root with permissions that stop it being served even by accident, and the web server is configured to refuse it twice over. The link to our customer system is encrypted, and every message to it is signed with a shared secret, so nothing can post an enquiry in your name. Access to the system itself is limited to people at Spy Eye who need it, and website enquiries are visible only to an administrator.
We take this seriously, and we are not going to claim more than that. No system is proof against everything, and anyone who tells you otherwise is selling something.
Children
This website is for people arranging security equipment for a home or a business. It is not directed at children, and we do not knowingly collect information from anyone under eighteen. If you believe a child has sent us an enquiry, tell us and we will delete it.
Your rights, and how to use them
Under India's Digital Personal Data Protection Act, 2023, and the rules made under the Information Technology Act, 2000, you may ask us to:
- tell you what information about you we hold, and what we have done with it;
- correct anything that is wrong or out of date;
- delete what we hold, where we are not required to keep it;
- withdraw a consent you gave us, which stops us using your details for anything further.
Write to us and say which. We will answer, and we will do it — there is no form to fill in and no fee. Where the law requires us to keep something, we will say so and say why. You may also nominate another person to exercise these rights on your behalf if you are unable to.
If we have not dealt with something properly, please take it up with us first — it is a short walk from complaint to fix here. If you are still not satisfied, you may complain to the Data Protection Board of India.
Who to write to
Questions about this policy, requests about your information, and complaints all go to the same place:
- Grievance Officer: Afnan Aslam, Spy Eye
- Email: spyeyebusiness@gmail.com
- Phone: +91 70036 98401
- Post: Workshop B-6, Narkelbagan Road, Narikelbagan, Kamdahari, Kolkata 700084, West Bengal
Changes to this policy
If what we do with information changes, this page changes with it, and the date below changes too. We will not quietly widen what we collect or who we give it to.
Last updated: 28 September 2026.