Your data and choices
Privacy Policy
How SinghBuildsTech.com processes personal data, which services are involved, and the choices and rights available to visitors.
Application Privacy Notices
If you use one of our mobile or desktop applications, dedicated privacy notices apply to their specific features and data storage model:
Controller and contact
The controller responsible for this website is Sukhdeep Singh, Germany.
This notice applies to https://singhbuildstech.com and its redirected www hostname.
Privacy enquiries can be sent to singhbuildstech@gmail.com or through the contact form.
Hosting and server logs
The website is hosted by Vercel. When a page is requested, technical connection data such as the IP address, date and time, requested resource, browser information, and response status may be processed in server and security logs. This is necessary to deliver, secure, and diagnose the website. The legal basis is the legitimate interest in reliable and secure operation under Article 6(1)(f) GDPR.
Details about Vercel’s processing are available in the Vercel Privacy Policy.
Contact enquiries
The contact form collects first name, last name, email address, and message content. These details are used to evaluate and respond to the enquiry. The legal basis is Article 6(1)(b) GDPR where the request concerns a possible engagement or other pre-contractual steps, and Article 6(1)(f) GDPR for other correspondence.
Successful submissions are stored in a private Notion database. Contact records are reviewed at least quarterly and deleted no later than 12 months after the last substantive communication, unless they are needed for an ongoing engagement or a statutory retention obligation.
Learn more in the Notion Privacy Policy.
Spam protection with Google reCAPTCHA
The contact form uses Google reCAPTCHA v3 to distinguish legitimate submissions from automated abuse. The service evaluates technical and behavioural signals and returns a risk score. That score is used only to accept or reject a form submission; it does not produce a decision with legal or similarly significant effects. reCAPTCHA loads only on pages where the contact form is rendered.
This processing supports the legitimate interest in protecting the form and website under Article 6(1)(f) GDPR. Google’s Privacy Policy and Terms apply.
Optional Google Analytics
If Google Analytics is configured, it remains disabled until the visitor selects “Accept analytics.” The service may then process page views, device and browser information, approximate location, and interaction data. IP anonymisation is requested in the site configuration. The legal basis is consent under Article 6(1)(a) GDPR. Analytics event data is retained for no longer than two months.
Consent can be refused without losing access to the website and can be changed later through “Privacy settings” in the footer. Withdrawal does not affect processing that occurred before withdrawal.
Fonts and local browser storage
Website fonts are delivered from the same origin as the portfolio. The visitor’s browser does not contact Google Fonts to render them.
The site stores the theme preference and privacy choice in local storage. These values are necessary to honour the visitor’s requested appearance and consent status. They remain until removed through browser settings; they are not used to follow visitors across websites.
Embedded media and social posts
Articles may contain YouTube videos or posts from LinkedIn and X/Twitter. Social posts are not requested from those platforms until the visitor selects the corresponding load button. Once activated, the provider receives connection data such as the IP address, browser information, referring page, and potentially account or cookie information under its own privacy terms. Activation is voluntary and is based on consent under Article 6(1)(a) GDPR.
Recipients and international transfers
Vercel, Notion, and—when the relevant feature is used—Google, LinkedIn, and X may process data. Some processing may take place outside the European Economic Area. Where required, transfers rely on the provider’s applicable adequacy mechanism or contractual safeguards. Current provider terms and transfer information should be reviewed whenever these services or their configurations change.
Your rights
Subject to the GDPR’s conditions, individuals may request access, correction, erasure, restriction, data portability, or object to processing based on legitimate interests. Consent may be withdrawn at any time. Requests can be sent to the email address above.
A complaint may also be made to the competent German state data-protection authority. The BfDI contact finder helps identify the responsible authority.
Updates
Effective date: 2 August 2026. This notice will be updated when data flows, providers, or legal requirements change.