Privacy Policy

1. Who we are

We are 19 LAT (“we”, “us”, “our”), a digital agency providing web development, WooCommerce/WordPress/Shopify stores, custom PHP, and digital performance marketing services. Contact: contact@19lat.com based at Navi Mumbai, MH, India.

2. What we collect

We collect data you (or your customers) provide or that we collect automatically while delivering services:

• Client / Prospect data: name, business name, email, phone, billing info, company address, identity documents when required for verification.
• End-customer data (sites we build / maintain): depending on the project — names, emails, order details, shipping addresses (for e-commerce), IP addresses. We do not use this data except to deliver agreed services.
• Technical & usage data: IPs, device info, browser, cookies, server logs, analytics data (e.g., Google Analytics).
• Payment data: Razorpay/other payment processors handle card/payment credentials including UPI payments. We receive only transaction metadata (amount, payment ID, status) and will not store raw card data.

3. How we collect data

Via contact forms, proposals, invoicing, CMS admin accounts, email, phone, and automatically via cookies and analytics. For e-commerce stores we build, data can also come through customers’ purchases.

4. Why we process data (legal bases)

• Performance of contract (delivery of services).
• Legitimate interests (analytics, security, fraud prevention, improving services).
• Consent where required (e.g., marketing emails—you may opt-out anytime).
• Legal obligations (tax, KYC).

5. Third-party processors

We use third-party services (e.g., Razorpay for payments, Google Analytics, hosting/CDN, email services). These processors process data under contract and only as needed to provide the service. Examples: Razorpay (payment processor), [your hosting provider], Google Analytics. (Replace bracketed services with yours.)

6. Data retention

We retain client & project data for as long as necessary to provide services, for legal/tax obligations (typical retention: 7 years for accounting — replace as applicable), and as otherwise required by law. For site visitor data, retention depends on the client’s setup; as the agency we can configure retention per client request.

7. Security

We use reasonable technical and organizational measures (access controls, encrypted backups, HTTPS, secure servers). No system is 100% secure; if a breach occurs we’ll notify affected parties and authorities as required by law.

8. Your rights

You can request access, correction, deletion, portability, restriction of processing, or object to processing. For marketing, you may unsubscribe anytime. To exercise rights: contact contact@19lat.com.

9. Special note — agency & client responsibilities

When we build or host a site on your behalf, you (the client) are responsible for the content you publish and for ensuring you have lawful bases to collect your customers’ data. We will treat any credentials and data provided to us as confidential and use them only to deliver the contracted services.

10. Cookies

We use cookies for essential site functionality and optional analytics/marketing cookies. Your site should show a cookie banner (we can implement).

11. International transfers

Data may be transferred to service providers located in other countries. We use standard contractual measures where required.

12. Changes to this policy

We may update this policy. We’ll post the new policy with an updated effective date.

---

Contact:
Company Legal Name: 19 LAT
Address: Raghunath Vihar, Kharghar, Navi Mumbai, MH, India - 410210
Email: contact@19lat.com