Privacy policy

This policy is published by Durrani Lab Private Limited, whose registered office is at #1-2 Jamadar Hospital Bldg., Khori Galli, Latur, Maharashtra, India. It was last updated on 11 November 2026 and applies from that date.

1. Who we are

This website, durranilab.com, is run by Durrani Lab Private Limited. Our registered office is at #1-2 Jamadar Hospital Bldg., Khori Galli, Latur, Maharashtra, India. In this policy, “we” and “us” mean that company, and “you” means the person whose information it is.

We decide why and how the personal information described here is used, so we are responsible for it. You can reach us at contact@durranilab.com or on +91 82 4010 4020.

2. What this policy covers

This policy applies to personal information that reaches us through:

• this website and its contact form
• the AI assistant on this website
• enquiries you send by email, by phone or on WhatsApp
• payments you make to us online

It applies to visitors, to people who enquire, to customers and to people who write to us about working with us. Where we handle personal information inside a system that we build or run for a client, the client decides how that information is used, and our agreement with that client applies to it.

3. Information we collect

We collect only what you send us and what a payment or a delivery needs. Listed by source:

• Contact form. Your name, your email address, the type of work and your message. If you choose to give them: a phone or WhatsApp number, the name of your company or organisation, and a budget.
• AI assistant. The messages you type, and any project brief the assistant drafts from them. If you ask for a brief to be sent to our team, the brief and the name and contact details you give with it.
• Email and phone. Your email address or phone number, and what you write or tell us.
• WhatsApp. Once you start a chat with us: your WhatsApp number, your profile name and your messages.
• Payments. What the payment gateway passes back to us: your name, email address and phone number, the amount, the date, the kind of payment method used, the transaction reference and whether the payment succeeded. For the invoice: your billing address, and your GSTIN if you give it.
• Delivery of physical goods. The name, address and phone number for the delivery.
• Enquiries about working with us. What you choose to email us: your introduction, links to your work and any document you attach. This website has no application form.
• Technical records. When your browser requests a page, the hosting provider records the IP address, the browser and device type, the page requested, and the date and time. The IP address is also used for a short time to limit how many requests one visitor can send to the contact form and the assistant.

4. Information we do not collect

We do not receive or store card numbers, card expiry dates, CVV numbers, UPI PINs or net banking passwords. You enter those on the page of the payment gateway, and they go to the gateway directly.

We do not ask for passwords, government identity numbers, health information or other sensitive personal information through this website. Please do not send them in the contact form, in the assistant or in a message.

5. Why we use it

Each kind of information is used for the purpose it was given for.

We do not use personal information for advertising, we do not build advertising profiles, and we do not sell or rent personal information to anyone.

6. Consent and your choices

Most of what we hold is information you gave us yourself, for a purpose you could see: an answer to an enquiry, a quotation, an order. We use it for that purpose. Where the law requires your consent, we ask for it through a clear action on your part. We do not use boxes that are ticked in advance.

You can withdraw consent at any time by writing to contact@durranilab.com. One message is enough, so that withdrawing is as easy as giving. Withdrawal does not undo what was done before it. Some records, such as invoices, must still be kept because the law requires it. If we need the information to deliver something you ordered, we will tell you what stopping means for that order.

7. The AI assistant

The assistant on this website is an AI, not a person. When you use it:

• The messages you type are sent to a third-party provider of AI models, which processes them to produce the replies. The provider acts for us and may process the messages on servers outside India.
• This website does not store the conversation. We keep no record of what you typed unless you send a brief to our team.
• The provider handles the messages under its own terms, including its own rules on how long it keeps them.
• If you ask the assistant to send a brief to the team, the brief and the contact details you give are emailed to contact@durranilab.com and are then treated as an enquiry.

Please do not type passwords, card or bank details, identity numbers, health information, or confidential information that belongs to someone else.

8. The contact form and email

A message sent through the contact form is emailed to contact@durranilab.com through an email delivery provider. The provider handles the message in order to deliver it and may keep delivery records, such as the time and the result of the delivery. This website does not keep form submissions in a database of its own.

Once a message is in our mailbox, it is held by the email service we use and is read by the people at Durrani Lab Private Limited who need it to answer you.

9. WhatsApp

The WhatsApp link on this website opens a chat with us in WhatsApp. Nothing is sent until you send a message. Once you do, we see your number, your profile name and your messages. WhatsApp is a separate service with its own privacy policy, and that policy applies to what WhatsApp itself does with your information.

10. Hosting and server logs

This website is served by a third-party hosting provider. As with any website, the provider keeps server logs of the requests it receives: the IP address, the browser and device type, the page requested, and the date and time. We use these logs to keep the website secure and to find faults. We do not use them to identify or follow individual visitors.

11. Payments

When online payment is offered on this website, it is handled by a payment gateway that is authorised to operate in India. The gateway is named at the payment step and on your receipt. You give your card, UPI or bank details to the gateway directly, and the gateway is responsible for them under its own privacy policy.

The gateway tells us that a payment was made, by whom and for how much, as listed under Information we collect. We use that to confirm your order, to issue the invoice and to handle any refund.

12. Cookies and tracking

This website sets no advertising cookies and no tracking cookies. It runs no analytics and no advertising pixels. Fonts and scripts are served from this website itself, so loading a page does not send your address to a separate font or script network.

The website does not need a cookie for you to read it. If that ever changes, this section will say what is stored and why.

Services that you open from this website, such as WhatsApp, a social media profile or the page of the payment gateway, set their own cookies under their own policies.

13. Who we share it with, and transfers outside India

We share personal information only where the purpose needs it, with:

• the provider of AI models, for assistant messages
• the email delivery provider and our email service, for form submissions and correspondence
• the hosting provider, for server logs
• the payment gateway and the banks involved, for payments and refunds
• the courier or postal service, for the name, address and phone number of a delivery
• our accountants, auditors and legal advisers, where their work requires it
• a court, regulator or government authority, where the law requires it

Each provider is allowed to use the information only to provide its service to us. We do not sell personal information.

Some of these providers process information on servers outside India. Where that happens, we remain responsible for the information, and we follow any restriction the Government of India places on such transfers.

14. How long we keep it

We keep personal information for as long as its purpose lasts, and no longer unless a law requires it.

• Assistant conversations. Not stored by this website.
• Enquiries and briefs. Kept while the conversation with you continues, and afterwards for as long as we reasonably need them to answer a follow-up. They are deleted when that need ends or when you ask, unless the enquiry has become a project.
• Customer, project and payment records. Kept while we work together, and afterwards for the period that tax, accounting and company law require.
• Enquiries about working with us. Kept until we have replied and the matter is closed, and deleted when you ask.
• Server logs. Kept by the hosting provider for the period its service sets, and for at least as long as the law requires.

When information is no longer needed for its purpose and no law requires us to keep it, we delete it. To ask how long a particular record is being kept, write to us.

15. Security

We take reasonable steps to protect personal information. This website is served over an encrypted connection. Payment details go to the payment gateway and never pass through our servers. We keep no database of contact form messages or assistant conversations on this website, and we limit access to enquiries and customer records to the people who need them for their work.

No way of sending or storing information is completely secure, and we cannot promise that it is. If a breach of personal information affects you, we will tell you without delay and report it to the Data Protection Board of India, as the law requires.

16. Your rights and how to use them

You can ask us to:

• tell you what personal information we hold about you and what we do with it
• correct information that is wrong, complete what is incomplete, or bring it up to date
• erase information that is no longer needed, unless a law requires us to keep it
• stop using information that you gave us with your consent
• record the person you nominate to use these rights for you if you die or become unable to
• look into a complaint about how we have handled your information

To use any of these, write to contact@durranilab.com or to our registered office. Say what you are asking for and give us enough to find your records. We may ask you to confirm who you are before we act. There is no charge.

We answer within one month of receiving your request. If you are not satisfied with the answer, write to the grievance officer named under Contact and grievances. If you are still not satisfied after that, you may complain to the Data Protection Board of India in the manner the Digital Personal Data Protection Act 2023 provides.

17. Children

This website and our services are not directed at anyone under 18. We do not knowingly collect the personal information of a child without the verifiable consent of a parent or guardian. We do not track children or direct advertising at them. If you believe a child has sent us personal information, write to us and we will delete it.

18. Links to other websites

This website links to our profiles on LinkedIn, GitHub, X, Instagram and Facebook, and to WhatsApp. Those services, and any other website we link to, have their own privacy policies. This policy does not cover them.

19. Changes to this policy

We may change this policy when the website, our services or the law changes. The date at the top of the page shows when it was last updated. If a change affects how we use information we already hold, we will say so on this website before the change applies.

20. Language

This policy is published in English. If you would like help understanding it in another language, write to us and we will tell you what we can provide.

21. Contact and grievances

The grievance officer named below also answers questions about personal information. Our terms and conditions apply alongside this policy.

Questions, requests and complaints go to the company at the details below. You can also contact us through the form on this site.

Grievance officer

If you are not satisfied with an answer, or you want to make a complaint, write to the Grievance Officer of Durrani Lab Private Limited.

We acknowledge every complaint within 48 hours and give it a ticket number, so that you can follow its progress. We resolve it within one month of the day we receive it, and we tell you the outcome in writing.