Who we are
CommerceBolt is an eCommerce services brand of Perigeon Software Private Limited (“CommerceBolt”, “we”, “us”). This policy explains how we handle personal data collected through commercebolt.com, the forms on it, the resources you download from it, and the messages you send us.
For that data we decide why and how it is processed, which makes us the data controller (a “Data Fiduciary” under India’s Digital Personal Data Protection Act, 2023).
This policy does not cover personal data we process on behalf of clients during a project — for example a client’s customer records during a platform migration. That processing is governed by our written agreement with the client, and the client’s own privacy notice applies.
What we collect
| Source | What we collect |
|---|---|
| Contact and resource forms | Name, work email, and optionally company, phone number, store URL, your message and the topic you choose. We also record which form you used, the resource you asked for and the page you sent it from. |
| Emails and calls | Whatever you choose to send us, and our replies. |
| Booking a call | If you book through our scheduling link, Calendly collects your name, email and answers to its questions under its own privacy policy, and shares them with us. |
| Analytics | Pages viewed, how you arrived (referrer), approximate location derived from your IP address, device and browser type, and interactions such as form submissions, collected through Google Analytics. |
| Server logs | IP address, browser user agent, requested URLs and timestamps, recorded by our hosting provider for security and troubleshooting. |
We do not ask for, and do not want, payment card details, government identity numbers or other sensitive personal data through the website. Please do not send them.
How we use it
- To answer you. Responding to your enquiry, sending the resource you requested, or carrying out the store review you asked for.
- To follow up on your request. Contacting you about the enquiry or resource you submitted. We do not add you to a marketing newsletter unless you separately ask to join one.
- To run and improve the website. Understanding which pages are useful, fixing problems and keeping the site secure.
- To meet legal obligations. Keeping records the law requires and responding to lawful requests.
Where the UK or EU General Data Protection Regulation applies, we rely on our legitimate interest in responding to business enquiries and running our website, on steps taken at your request before a possible contract, and on your consent where the law requires it (for example for analytics cookies). Under India’s DPDP Act, we process personal data you provide voluntarily for the purpose you provided it.
We do not sell personal data, and we do not use it for automated decisions that have legal or similarly significant effects on you.
Cookies and analytics
We use Google Tag Manager to load Google Analytics, which sets cookies (such as _ga) to distinguish visitors and measure how the site is used. Analytics only loads if you accept it in the cookie banner. If you reject, it is not loaded and any analytics cookies already set are removed.
We remember your choice in your browser’s local storage for 12 months, then ask again. You can change it at any time with the Cookie settings link at the bottom of every page. The website works fully without analytics cookies.
The site’s fonts are served by Google Fonts, so your browser connects to Google’s servers to load them; this does not set cookies. You can also block or delete cookies in your browser settings, or opt out of Google Analytics with Google’s browser add-on.
Who we share it with
We share personal data only with the parties below, and only what they need:
| Recipient | Why |
|---|---|
| Google (Workspace, Analytics, Tag Manager, Fonts) | Delivering form submissions to our inbox by email, website analytics, and serving fonts |
| Our hosting provider | Hosting the website and its server logs |
| Calendly | Scheduling calls you book with us |
| Perigeon group staff | People in our team who need it to respond to you |
| Professional advisers | Lawyers, auditors and similar advisers, under confidentiality |
| Authorities | Where the law, a court order or a regulator requires it |
These providers process data under their own terms and security commitments. If CommerceBolt or Perigeon were reorganised, merged or sold, personal data could transfer to the successor, which would remain bound by this policy.
International transfers
We operate from India and the United States, and our service providers process data in several countries. When personal data moves between countries, we rely on the safeguards our providers offer for international transfers, such as standard contractual clauses where those are required.
How long we keep it
- Enquiries and form submissions: for as long as needed to respond and manage any resulting relationship, then reviewed and deleted after 24 months without contact.
- Analytics data: in line with our Google Analytics retention setting, at most 14 months.
- Server logs: for the hosting provider’s standard log period, typically a few weeks.
We keep data longer only where the law requires it.
How we protect it
The website is served over an encrypted connection (HTTPS). Form submissions go directly to our email inbox and are not stored in a website database. Access to that inbox and to our analytics is limited to the people who need it, and mail-service credentials are kept off the public web server.
No method of transmission or storage is completely secure, so we cannot guarantee absolute security. We work to protect your data and will act promptly if something goes wrong.
Your rights
Depending on where you live, you may have the right to:
- ask what personal data we hold about you and receive a copy;
- correct data that is inaccurate or incomplete;
- ask us to delete your data;
- object to, or ask us to restrict, how we use it;
- withdraw consent you gave earlier, without affecting what happened before;
- receive your data in a portable format; and
- nominate someone to exercise these rights on your behalf (India).
To make a request, email [email protected] with “Privacy request” in the subject line. We will confirm receipt and respond within 30 days, and we may need to verify your identity first.
If you are unhappy with our response, you can complain to your data protection authority — for example the Data Protection Board of India, the UK Information Commissioner’s Office, or the supervisory authority in your EU country.
California residents: we do not sell your personal information or share it for cross-context behavioural advertising, and you may ask what we collect and request its deletion as described above.
Children
The website is aimed at businesses and is not directed at anyone under 18. We do not knowingly collect personal data from children. If you believe a child has sent us personal data, contact us and we will delete it.
Links to other websites
The site links to other services — such as Calendly, LinkedIn and platform vendors’ websites. Their privacy practices are their own; please read their policies.
Changes to this policy
We may update this policy as the website or the law changes. We will change the “Last updated” date at the top, and for significant changes we will make that clear on this page.
Contact us
Questions about this policy or your personal data:
- Email: [email protected] — subject “Privacy request”
- India: Perigeon Software Private Limited, 403 Priviera, Patel Colony, Near Nehrunagar Circle, Ahmedabad 380006, Gujarat, India
- United States: 8 The Green, Dover, Delaware 19901, USA