Privacy notice.

Information we handle

When you use the contact or start-a-project form, we receive:

• your name and email address; and
• the message you choose to send.

When you submit a job application, we receive:

• the position, your name, email address and mobile number; and
• any optional experience, portfolio link or note you provide.

Please do not submit sensitive personal information or information about another person. The website temporarily processes limited request information, such as an IP address, to rate-limit abuse. Hosting and database providers may also create operational and security logs as part of running the service; those request details are not added to the lead record shown in Comart's dashboard.

Why we use it

Comart uses this information to:

• read and respond to business enquiries;
• review applications and contact candidates about suitable roles;
• operate, secure and troubleshoot the website and its forms; and
• maintain reasonable business records relating to those interactions.

We do not sell form submissions or use them for behavioural advertising. This website does not use visitor analytics, advertising trackers or marketing profiling.

How a submission moves

A form is sent over HTTPS to the Comart website on AWS Amplify. The submission is saved in an Amazon Aurora PostgreSQL database through the encrypted AWS RDS Data API and made available in Comart's password-protected lead dashboard. The database uses ordinary PostgreSQL tables rather than a proprietary data format. A separate notification copy is then sent through Google's Gmail mail service to the designated recipients.

The current recipients are the designated Comart team members Fred, Joseph, Stephen and Rehan, plus Armand, the authorised Atlancer website administrator. This applies to contact enquiries, project requests and job applications. An authorised delivery test is routed only to the Atlancer administrator.

Who can access it

Access is limited to authorised Comart personnel responsible for enquiries or recruitment and the authorised Atlancer website administrator where access is needed to administer, support or troubleshoot the service. An authorised dashboard user can view, search, update the working status of and export lead records. Any exported copy must be protected and deleted when it is no longer needed.

AWS hosts the website and operates the Amazon Aurora PostgreSQL service used for the lead database. Google provides the mail service used for notifications and recipient mailboxes. Those service providers process information needed to provide their services under their respective infrastructure, security and service terms.

Where it may be processed

The website and the Amazon Aurora PostgreSQL database use AWS infrastructure in the US East (N. Virginia) region (us-east-1), United States. AWS and Google may also use infrastructure or authorised support personnel outside India. A submission can therefore travel through the website's AWS services and Google mail infrastructure to recipient mailboxes, with processing or storage outside India, including in the United States. Authorised Comart and Atlancer personnel may access it from their operating locations.

Retention and deletion

Each normal submission is assigned a lead-database expiry date 365 days after it is received; each authorised QA test submission is assigned an expiry date after 7 days. Once expired, a record is excluded from the dashboard and CSV export. A scheduled database-maintenance job permanently deletes expired lead rows. If that job is delayed, an expired row remains excluded until the next successful run. Encrypted automated database backups are retained for the configured AWS recovery window, currently 7 days. Manual or final recovery snapshots may be retained separately and do not expire automatically; authorised operators must review and securely delete them when they are no longer reasonably needed. A deleted record may therefore remain in an access-controlled backup or snapshot until that recovery copy expires or is deleted.

The deletion job acts only on the PostgreSQL database. It does not remove the separate notification copies in authorised recipients' mailboxes or any CSV files previously exported from the dashboard. Authorised recipients and administrators must handle and delete those copies separately when they are no longer reasonably needed. Comart may retain a particular record longer where reasonably necessary to maintain business records, resolve a dispute or meet an applicable obligation.

You may ask Comart to access, correct or delete information you submitted by using the contact form and writing “privacy request” in your message. Comart will assess each request against applicable requirements and any legitimate need to retain a record. To help locate your submission, write from the email address you originally provided.

Security

The website uses encrypted HTTPS connections, form validation, rate limiting and access controls intended to reduce unauthorised access or misuse. Admin passwords are stored as salted hashes, and the admin area uses a strictly necessary secure session cookie after login. Ordinary visitors are not given analytics or advertising cookies. No internet, database or email system is completely secure, so please share only information needed for your enquiry or application.

Your choices and questions

You can choose not to use the forms. The application note is optional, and you can omit any portfolio link. For a privacy question or request, use the contact form.

Comart may update this notice when its website practices or service providers change. A revised notice should show a new effective date.