India Dubai London

Last updated 7 November 2026

Privacy notice

We build software that keeps people's details private, and we hold our own website to the same standard. This notice explains what we collect through pophasta.com, why we collect it, and what you can ask us to do with it.

Who we are

Pop Hasta is a custom software company based in India. In this notice, “we” and “us” mean Pop Hasta. We decide how the personal details collected through this website are used, which makes us the Data Fiduciary under India’s Digital Personal Data Protection Act, 2023, and the controller for visitors covered by the UK or EU General Data Protection Regulation. Our company details and how to reach us are at the end of this page.

What we collect

When you send us a message through our contact form, we collect:

  • your name and work email address
  • your phone or WhatsApp number, if you give it
  • your company name and industry, if you give them
  • what you tell us about the tools you use today and the problems you want solved
  • your agreement for us to use these details to reply to you, and the date and time you sent the form
  • the page you came to the form from, the demo you asked about and the campaign name in the link you followed, if there was one
  • our notes on your enquiry: who at Pop Hasta is looking after it, what we discussed and what happens next

When you visit any page, our server automatically records basic technical details to keep the site secure and working: your IP address, the type of browser you use, the page you asked for and the time. We don’t use these details to find out who you are.

Please don’t send us sensitive details such as health information, bank or card numbers, or passwords through the form.

Why we use it

We use the details you send us only to:

  • reply to your enquiry and talk with you about your project
  • prepare a scope or proposal if you ask us for one
  • keep a record of our conversation with you

We use the technical details only to protect the website from misuse and to fix problems. We don’t sell your details, we don’t use them for advertising, and we don’t add you to a mailing list unless you ask us to.

If the UK or EU GDPR applies to you, we rely on your consent for the contact form, and on our legitimate interest in keeping the website secure for the technical details.

Cookies

The first time you visit, we ask whether we can use cookies from Google and Meta. If you say yes, Google Analytics helps us see which pages people find useful, and Google Ads and Meta (Facebook and Instagram) tell us whether someone who clicked one of our ads went on to contact us, and can show our ads to people who have visited this website. Google and Meta receive this information and may store it on servers outside India.

If you say no, nothing is stored on your device for this, and Meta's pixel isn't loaded at all. Google may still receive basic signals without cookies, such as that a page was viewed, which it uses to estimate visits and ad results without identifying you.

Whatever you choose, our website also keeps its own count of visits, without cookies and without storing anything on your device. Each count holds only the day, the page, whether a demo was opened or the contact form started, and the campaign name in the link you followed. It keeps nothing about you, such as your IP address or browser, so it can’t tell one visitor from another, and it isn’t shared with anyone.

You can change your choice at any time with Cookie settings at the foot of every page. We remember your choice in a small cookie of our own, called ph_consent.

The site also sets a security cookie on the contact page, which stops other websites from sending the form in your name. It holds no personal details. If you sign in to manage the website, a session cookie keeps you signed in.

Our demos, and other websites we link to such as WhatsApp, are run separately and have their own privacy terms.

Who can see your details

Your details are seen only by the people at Pop Hasta who handle enquiries. The website and its database run on a server we rent from Hostinger, which stores the data for us.

If you agree to cookies, Google and Meta receive information about how you use the website, as explained under Cookies. Neither receives what you write in the contact form.

Sometimes an enquiry is better handled by another member of the Pop Hasta family, Pop Hasta Labs in the United Kingdom, or by our UAE partner, FRS Luma Consultancy. We only pass your enquiry on to them if you agree. We may also share details where the law requires us to.

Where your details are stored

Your details are stored on our server in Mumbai, India. If you write to us from another country, your details travel to India when you send the form.

How long we keep them

We keep enquiries for up to 24 months after we last hear from you, then delete them. If you become a client, we keep what we need for our work together and for our legal and tax records. Technical details are kept only as long as we need them to keep the website secure.

Your rights

You can ask us at any time to:

  • tell you what personal details we hold about you and what we have done with them
  • correct, complete or update your details
  • delete your details
  • stop using your details, by withdrawing your consent

Withdrawing your consent is as easy as giving it: just write to us. It doesn’t affect anything we did before you withdrew it. If you are in India, you can also nominate someone to act for you if you die or can no longer act for yourself.

If the UK or EU GDPR applies to you, you also have the right to restrict or object to how we use your details, and to receive them in a format you can take elsewhere.

We reply to every request within 30 days. If you’re not happy with our reply, you can complain to the Data Protection Board of India; in the UK, to the Information Commissioner’s Office; or in the EU, to your local data protection authority.

Keeping your details safe

This website is only served over an encrypted connection, the area where enquiries are kept is open only to our team, and we keep the server and its software up to date. If a breach ever affects your details, we will tell you and the authorities as the law requires.

Children

This website is for businesses and isn’t meant for children. We don’t knowingly collect details from anyone under 18.

Changes to this notice

If we change how we use personal details, we’ll update this page and the date at the top.

How to reach us