Privacy notice

Short version: I collect the few things I need to come and fix your plumbing. Sending the form saves them on my server and alerts me over WhatsApp. I do not sell them, and you can ask me to delete them at any time.

This notice explains what Bajarangi Plumbing Services collects through this website, where it actually goes, how long it is kept, and how to exercise your rights over it. Last updated 31 October 2026.

Who is responsible for your data

Bajarangi Plumbing Services, a sole proprietorship operated by Kailash Chandra Behera, is the data fiduciary for the personal data described here. That means I decide what is collected and why, and I am the one answerable for it.

What I collect, and why

Only what the job needs. Nothing on this website asks for anything that is not used to answer your enquiry or carry out the work.

Through the short request form

  • Your name — so I know who I am talking to and who to ask for on arrival.
  • Your mobile number — so I can reply, confirm a time, and call you if I cannot find the address.
  • Your address or locality — so I know whether you are in an area I cover and how long it takes me to get there.
  • A description of the plumbing problem — so I can bring the right parts and quote accurately.
  • The service category, if you pick one — optional.
  • Your consent, and a note of which version of the consent wording you were shown.

Through the booking form

The same details, plus:

  • Your email address — optional. Only used if you want written confirmation.
  • Preferred date, time slot and urgency — to hold the right amount of time on the right day.
  • Any extra notes you choose to add.

Collected automatically, not typed by you

  • The IP address you submitted from, on either form. This is the one item that is not about doing your job: it exists solely to stop the form being abused by automated submissions, each of which costs me a paid WhatsApp message. It is erased after 30 days, ahead of everything else, because it is the least necessary thing here.

Cloudflare handles connection information to protect this website and provides aggregate performance measurements, such as page-loading times and browser/device categories. Its Web Analytics service does not use analytics cookies or track people across websites. This is separate from the enquiry details you submit. See the cookie policy for security cookies and browser storage.

Where your details actually go

This section is deliberately specific, because an earlier version of this page described it wrongly. When you press the send button on either form, two things happen at once.

  1. Your details are sent to my server and saved in a PostgreSQL database hosted by Neon, in a record only I can see. This happens immediately, when you press the button.
  2. WhatsApp opens with the same details written out for you to send. You can read it, edit it, or abandon it.

The important consequence, stated plainly: if you fill in the form and press send, I receive your details even if you then close WhatsApp without sending the message. The earlier version of this page claimed the opposite. If you would rather I did not hold your details at all, call instead, or message me on WhatsApp directly without using the form.

Who else handles it

I am one plumber, but I use a few ordinary services to run the website and to be told when someone needs me. Each one is listed here with what it actually receives.

  • Meta Platforms (WhatsApp Cloud API) — receives your name, locality, service category and the first part of your problem description, as the alert that tells me you have been in touch. If you also send the WhatsApp message yourself, that conversation is handled by WhatsApp under Meta's own privacy terms, and WhatsApp passes on the number you message from, as it does in any chat.
  • Brevo (email) — used only as a fallback when the WhatsApp alert fails. In that case it receives your name, full phone number, locality, service and the whole problem description, inside an email to me.
  • Neon — hosts the database the record is stored in.
  • Heroku — hosts the website application and processes the requests and enquiry details sent to it.
  • Cloudflare — sits in front of the application to provide HTTPS delivery, security checks and aggregate website-performance measurements. It processes connection information, including IP addresses, for these services.
  • Sentry — receives technical error reports if something breaks. It is configured not to send personal data, request bodies or local variables, specifically so your details do not travel with a crash report.
  • GitLab — holds a nightly encrypted backup of the database for seven days, so that a failure does not lose your enquiry.

Some of these companies are outside India and your data may be processed abroad. None of them is permitted to use your details for their own purposes, and none of them is paid for your data. I do not sell, rent or trade your details to anyone, ever, and there are no advertising or data-broker services involved in this website.

What I do not do

  • I do not sell, rent or share your details for marketing.
  • I do not add you to a mailing list. There is no newsletter.
  • I do not run advertising trackers, Google Analytics, Tag Manager, advertising pixels, heatmaps or session recordings. Cloudflare provides the security and aggregate performance services described above.
  • I do not take card or bank details on this website, and there is no online payment.
  • I do not use profiling or automated decision-making. A person — me — reads every enquiry.
  • I do not knowingly collect details from anyone under 18. This is a service for whoever is responsible for a property. If you are under 18, please ask an adult to make the enquiry.

How long I keep it

These periods are enforced by a scheduled job that deletes the records automatically, not by me remembering to do it.

  • Submission IP address: 30 days. Erased from the record while the rest of it is still there.
  • Enquiries that never became a job: about 6 months from when you sent them, then deleted.
  • Records of work actually carried out: about 18 months. Longer, because the Consumer Protection Act 2019 gives you two years to raise a complaint about work, and I cannot answer a dispute about your job if I have deleted the record of it. That cuts both ways, and it is in your interest as much as mine.

You do not have to wait for any of that. Ask me to delete your details and I will, unless I am genuinely required to keep a record of work already carried out.

Separately, the server keeps standard technical logs for troubleshooting (error messages, timestamps, request status codes). These are not the same as the records above: they do not contain your name, phone number, email or other personal details, and they are not subject to the retention periods described here.

The form also uses short-lived counters to detect abuse — for example, someone submitting it dozens of times in quick succession. These counters store only a scrambled (hashed) value, not a readable IP address or phone number. They expire within minutes and are swept away automatically by the nightly cleanup job, well before any of the retention periods above apply.

Your rights

Under the Digital Personal Data Protection Act 2023 you can:

  • Ask what I hold about you, and who I have shared it with.
  • Ask me to correct or complete it — wrong number, wrong address, just say.
  • Ask me to erase it. I will, unless I am required to keep it.
  • Withdraw your consent at any time. Tell me to stop contacting you and I will stop. It does not affect work already agreed, or anything done before you withdrew.
  • Nominate someone to exercise these rights for you if you die or become incapable of doing so yourself.
  • Complain, and be told what happened about it.

There is no charge for any of this, and I will not ask you why. Please use email if you can — it gives us both a dated record of what was asked and what I did.

How to reach me, and how to complain

Me, directly. There is no privacy department.

I aim to answer any request about your data within 30 days. If you are not satisfied with how I have handled it, you can complain to the Data Protection Board of India, which was established under the Digital Personal Data Protection Act 2023. You are entitled to go to the Board whether or not you come to me first, though it is usually quicker to ask me.

How it is kept safe

The site is served only over HTTPS. The database is not reachable from the public internet and the connection to it is encrypted. Backups are encrypted before they are stored. The admin console where I read enquiries is password-protected and locks out repeated wrong guesses. Nothing here is a guarantee — no one can honestly give you one — but these are the measures actually in place rather than a list of intentions.

Changes to this notice

If what I do with your details changes, this page changes at the same time, and the date at the top changes with it. The consent wording on the forms carries a version stamp, and the version you agreed to is recorded with your enquiry, so it is always possible to establish what you were actually told.

Cookie policy · Terms of service · Cancellations & refunds · Contact

Call now WhatsApp us