Privacy Policy
We handle your information with the same care we apply to our engineering work — thoughtfully, transparently, and with a clear sense of responsibility.
01 — Introduction
Your privacy matters to us.
7Unit (“we,” “our,” or “us”) is a senior-led product engineering firm headquartered in India, serving clients globally. This Privacy Policy explains how we collect, use, store, and protect personal information when you interact with us — through our website, contact forms, Meta lead generation ads, or direct communications.
We take data protection seriously. Our practices are designed to comply with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), India’s Digital Personal Data Protection (DPDP) Act 2023, and the IT Act 2000.
By using our website or submitting information through any of our channels, you agree to the practices described in this policy.
Data Controller — GDPR Art. 13
Organisation
7Unit
Website
https://7unit.techPrivacy / DPO Contact
hello@7unit.techJurisdiction
India (delivery centre) · Global clients
We do not sell, rent, or trade your personal data. Ever. Full stop.
02 — Information We Collect
What we collect, and why.
We only collect information that helps us respond to your inquiry, deliver our services, or improve our website experience. Here’s a breakdown by source:
Contact Form Data
When you reach out through our website contact form, we collect:
- Full name
- Work email address
- Company name
- Your message or project brief
- Country (if provided)
Meta Lead Ads Data
If you engage with our Facebook or Instagram lead ads, we may receive:
- Full name
- Email address
- Company name
- Phone number (if provided)
- Engineering challenge selection
- Any additional info from the ad form
Website Analytics
When you browse our website, we automatically collect:
- IP address (anonymized where possible)
- Browser type and version
- Device type and operating system
- Pages visited and time spent
- Referral source (how you found us)
- Cookie identifiers (see Cookies section)
Project & Engagement Data
For active and prospective clients, we may collect:
- Email correspondence
- Project requirements and specifications
- Meeting notes and call transcripts (with consent)
- Technical documentation shared with us
- Billing and contract information
03 — How We Use Your Information
Purpose-driven, never excessive.
We use your information only for specific, legitimate purposes. We do not use your data for automated profiling, third-party advertising, or purposes unrelated to our engineering services.
Respond to your inquiry
To reply to your contact form submission, Meta lead ad submission, or email. We aim to respond within 1–2 business days.
Send relevant content
With your consent, we may share relevant case studies, engineering insights, or service updates that match your indicated interests. You can opt out at any time.
Deliver and manage services
To scope, plan, and execute engineering engagements. This includes project coordination, invoicing, and onboarding for active clients.
Improve our website
Analytics data helps us understand how visitors interact with our site so we can improve content, navigation, and overall experience.
Legal and compliance
To comply with applicable law, court orders, or regulatory requirements, and to protect the rights and safety of 7Unit and our clients.
04 — Legal Basis (GDPR)
Why we’re allowed to process your data.
If you are located in the European Economic Area (EEA) or United Kingdom, GDPR requires us to identify a lawful basis for each processing activity. We rely on the following bases:
Legitimate Interests
Art. 6(1)(f) GDPR. We have a legitimate business interest in following up on inquiries you initiate, and in maintaining the security and improvement of our website. We balance this against your rights and will stop processing on request.
Consent
Art. 6(1)(a) GDPR. For marketing communications, analytics cookies, and optional data collection, we rely on your explicit, freely-given consent — which you can withdraw at any time without affecting prior lawful processing.
Contractual Necessity
Art. 6(1)(b) GDPR. For active clients, processing your data is necessary to fulfill our contractual obligations — including project delivery, invoicing, and communications.
Processing Activity Register — GDPR Art. 30
05 — Data Sharing & Disclosure
We don’t sell your data. Here’s who may access it.
We do not sell, rent, lease, or trade your personal data to third parties. Data is only shared in the limited circumstances described below.
Service Providers
We use a small set of trusted tools and platforms to operate our business. These providers process data on our behalf and are contractually required to protect it:
- Email platforms — for sending and receiving business communications
- Website hosting — Vercel (infrastructure and serverless functions)
- Analytics — Vercel Analytics and Google Analytics (anonymized, aggregated)
- CRM / Sales tools — for managing lead and client relationships
- Meta Platforms — for receiving data submitted via our lead generation ads
Legal Requirements
We may disclose your information if required to do so by law, court order, or regulation — or where necessary to protect the rights, property, or safety of 7Unit, our clients, or others. We will notify you of any such request where legally permitted to do so.
Business Transfers
In the event of a merger, acquisition, or sale of all or part of our business, your personal data may be transferred to the acquiring entity. We will notify you in advance and ensure the same protections continue to apply.
06 — Meta Lead Ads
Meta Lead Generation Ads
When you submit information through our advertisements on Meta platforms (Facebook, Instagram), the following applies:
We collect the information you provide in the lead form, which may include your name, email address, company name, phone number, and your selected business challenge.
Your information is transferred from Meta to 7Unit through Meta's Lead Ads API.
By submitting the lead form, you consent to 7Unit contacting you regarding your inquiry.
We use this information solely to respond to your inquiry, provide relevant information about our services, and assess potential project fit.
We retain lead form data for 24 months or until you request deletion.
You may request access to, correction of, or deletion of your data at any time by contacting hello@7unit.tech
How data flows from Meta to 7Unit
When you submit a lead form attached to one of our Meta ads, Meta collects your information through their platform and makes it available to us via the Meta Lead Ads API. The data is then transferred securely to our CRM for follow-up. Legal basis: Art. 6(1)(a) GDPR — Consent.
What Meta collects on their end is governed by Meta’s Privacy Policy. We encourage you to review it independently.
Additional rights for Meta Lead Ad data
- Request a copy of all data we received from Meta about you
- Ask us to delete your data from our systems at any time
- Opt out of any follow-up communications by replying “unsubscribe” or emailing us
- Contact Meta directly to manage your privacy preferences on their platform
07 — International Data Transfers
A global team, with local protections.
7Unit operates with a delivery center in India and serves clients across Europe, North America, the Middle East, and Southeast Asia. Your personal data may be transferred to and processed in countries other than your own.
For transfers involving personal data from the EEA, UK, or Switzerland, we rely on appropriate safeguards, including Standard Contractual Clauses (SCCs) approved by the European Commission, or adequacy decisions where applicable.
For transfers involving Indian residents’ data, we comply with the requirements of the DPDP Act 2023, including cross-border transfer restrictions where applicable.
All service providers we work with are required to maintain appropriate data protection measures regardless of where they operate.
08 — Data Retention
We keep data only as long as needed.
We retain personal data for the shortest period necessary to fulfill the purposes outlined in this policy, or as required by law.
You may request early deletion of your data at any time (see Your Rights below). We will honor deletion requests within 30 days unless we are required by law to retain the data.
09 — Your Rights
You’re in control of your data.
Depending on your location, you have specific legal rights regarding your personal data. We honor these rights for all individuals, regardless of jurisdiction.
Access
GDPR Art. 15 · CCPA · DPDPRequest a copy of the personal data we hold about you, in a portable, machine-readable format.
Correction
GDPR Art. 16 · DPDPAsk us to correct inaccurate or incomplete personal data we hold about you.
Deletion
GDPR Art. 17 · CCPA · DPDPRequest that we delete your personal data ("right to be forgotten"), subject to legal retention requirements.
Restrict Processing
GDPR Art. 18Ask us to pause processing of your data in certain circumstances, such as while you contest its accuracy.
Portability
GDPR Art. 20Receive your data in a structured, commonly-used format and request it be transferred to another controller.
Object
GDPR Art. 21 · CCPAObject to processing based on legitimate interests, including for direct marketing purposes.
Withdraw Consent
GDPR Art. 7 · DPDPWhere processing is based on consent, withdraw it at any time without affecting prior lawful processing.
Opt Out (CCPA)
CCPA/CPRACalifornia residents may opt out of any sale or sharing of personal information. We do not sell data, but this right is honored.
To exercise any of these rights, email hello@7unit.tech with the subject line “Data Privacy Request”. We will acknowledge your request within 72 hours and respond within 30 days (or as required by applicable law).
EEA/UK residents: If you believe we have handled your data unlawfully, you have the right to lodge a complaint with your local Data Protection Authority (DPA). For EU residents, visit edpb.europa.eu to find your national DPA.
11 — Third-Party Links
Links to other websites.
Our website may contain links to external websites — such as case study clients, industry resources, or partner tools. These links are provided for your convenience and do not constitute an endorsement.
We have no control over the privacy practices or content of third-party websites. We encourage you to read their privacy policies before submitting any personal information.
This Privacy Policy applies solely to information collected by 7Unit through our own website and channels.
12 — Changes to This Policy
We’ll tell you when things change.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations.
When we make material changes, we will update the “Last updated” date at the top of this page. For significant changes that affect how we process your data, we will notify active contacts by email at least 30 days in advance.
We encourage you to review this policy periodically. Continued use of our website after changes are posted constitutes acceptance of the updated policy.
Previous versions of this policy are available on request by emailing hello@7unit.tech.
13 — Contact Us
Questions? We’re here to help.
If you have any questions about this Privacy Policy, how we handle your data, or want to exercise your privacy rights, please reach out to us directly.
Data Controller & Privacy Contact — GDPR Art. 13(1)(a)
Jurisdiction
India (delivery centre) · Global clients
Response Commitments
- Acknowledgment within 72 hours
- Full response within 30 days
- Free of charge for all rights requests
- Identity verification may be required for security
Supervisory authority complaints (EEA/UK): If you believe we have handled your data unlawfully, you have the right to lodge a complaint with your national Data Protection Authority (DPA). Find your DPA at edpb.europa.eu. UK residents may contact the ICO. We would always prefer to resolve concerns directly first.