Privacy policy

Who we are

PutThrough is a production engineering studio operating from India. For the purposes of the UK and EU General Data Protection Regulation, PutThrough is the data controller for the information described on this page.

You can reach us about anything on this page at contact@putthrough.com.

What this website collects

This website is a set of static pages. It has no accounts and no newsletter sign-up. The contact form asks for your name, your email address and what you need; that is described under “When you use the contact form” below. The booking page and the checkout are operated by third parties, and those collect what they need, including cookies of their own. They are named under “Who processes data for us” below.

If you allow it, this site uses Microsoft Clarity to understand how visitors use it. If you do not, no analytics run and the site sets no cookies of its own. See “Analytics” below.

Our host, Vercel, processes the technical request data any web server receives — including your IP address — to serve the page and to protect against abuse. Vercel keeps this under its own retention schedule; we do not extract or store it ourselves.

When you contact us

If you email us, we hold your email and whatever you put in it, for as long as we need it to answer you and to keep a record of our dealings. If you become a client, that correspondence is retained as a business record.

If you book a call, the booking is handled by Cal.com, which collects your name, email address, time zone and anything you write in the booking form, and which operates under its own privacy policy. We receive the booking details.

If you buy an audit, payment is processed by our payment provider, which is the party that handles your card or bank details. We do not receive, see or store your payment credentials. We receive confirmation of payment and the billing details needed to issue an invoice.

When you use the contact form

If you send us a message through the contact form, we receive your name, your email address, your company or website if you give it, what you need, your budget range if you give one, when you would like to start, your message, and the page you sent it from. We also record how you arrived: the first page you visited on this site in that session, the site that referred you, and any campaign tags in the link you followed.

Our host, Vercel, tells us the country your connection comes from. We do not store your IP address; we keep a one-way hash of it, used only to limit how many messages one connection can send.

Your message is stored in a database run for us by Supabase, and emailed to us through Resend. We keep it for 24 months, or for longer if you become a client, when it becomes part of our business records.

We use it to reply to you and to discuss the work you described. We do not add you to a mailing list. Our basis is your consent, given with the checkbox on the form; you can withdraw it and ask us to delete your message at any time by writing to contact@putthrough.com.

Analytics

When you first visit, a bar asks whether we may use Microsoft Clarity. Nothing loads unless you choose “Allow”. Your choice is kept in your browser, and you can change it at any time with “Analytics settings” at the foot of every page.

If you allow it, Clarity records how you use the site — pages visited, clicks, scrolling and mouse movement — together with technical details such as your device, browser and approximate location from your IP address. Anything typed into a form is masked and never recorded. Clarity sets cookies to recognise a returning browser.

Clarity is provided by Microsoft, which processes this data on our behalf and under its own privacy statement. We use it only to understand which parts of the site work and to improve them. We do not use it to identify you, and we do not sell or share it for advertising.

We rely on your consent. Withdrawing it stops Clarity loading from that moment; to have past recordings deleted, write to contact@putthrough.com.

When we work on your application

An engagement is different from browsing this site. When we audit or repair an application, we may be given access to systems that contain your customers’ personal data. In that relationship we act as a data processor and you remain the controller.

We ask for read-only access for an audit, and we do not extract, copy or retain customer data. Where a finding requires evidence from live data, we record the minimum needed to demonstrate the finding and we redact identifiers. Write access, where a sprint requires it, is revoked at the end of the engagement.

A data processing agreement setting this out formally is available on request and is signed before access is granted. If your customers are in the EU or UK, this is the document your own records will need.

Google user data

PutThrough runs a small internal tool that uses the Google Ads API. Only PutThrough’s own Google account uses it; it never asks visitors or clients to sign in with Google.

The tool reads keyword planning data — search volumes, competition and bid estimates — through PutThrough’s own Google Ads account, to decide what to write about and which searches to advertise on. It keeps those keyword statistics on our own computer. It does not read anyone else’s Google data, and it does not sell or share any of it.

PutThrough’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Who processes data for us

These are the only third parties involved in running this site and our client intake.

• Vercel — website hosting and content delivery
• Cal.com — call booking
• Supabase — storing contact-form messages
• Resend — delivering contact-form messages to our inbox
• Microsoft — Clarity analytics, only if you allow it
• Our payment provider — payment processing for audits, named on the checkout page at the point of payment
• Our email provider — business correspondence

International transfers

We operate from India. If you are in the EU, the UK or elsewhere, correspondence and engagement data will be accessed from India. Where we act as your processor, the data processing agreement includes the standard contractual clauses covering that transfer.

How long we keep things

Correspondence that does not lead to an engagement is kept for up to two years and then deleted. Client records, including invoices and engagement documentation, are kept for as long as Indian tax and company law requires. If you allowed analytics, Microsoft Clarity keeps session recordings for 30 days, except recordings we mark as favorites and a random sample, which it keeps for up to 9 months; heatmaps are also kept for up to 9 months.

Your rights

Depending on where you live, you may have the right to ask what personal data we hold about you, to have it corrected or deleted, to object to or restrict how we use it, and to receive a copy in a portable form. Write to contact@putthrough.com and we will answer within 30 days.

If you are in the EU or UK and you think we have handled your data badly, you may also complain to your national supervisory authority. We would rather you told us first.