Legal
Privacy Policy
Last updated 13 August 2026
This policy explains what happens to personal data when you use srfcapital.studio. It covers this website only. The internal applications at app.srfcapital.studio and founders.srfcapital.studio are separate systems with their own access controls and are not covered here.
What we collect
Two things, and nothing else:
- What you send us. If you complete the contact form, we store the details you enter so we can reply. Nothing in that form is required in order to read the site.
- Where your enquiry came from. A form submission also records which page you were reading when you arrived, which link you followed to reach the form, and any campaign details in the address you clicked. It tells us which of our writing is actually useful. It is sent only when you choose to submit the form, it is never collected from people who simply read the site, and it is not shared with advertisers.
- Analytics, if you agree to it. Measurement of which pages are read and how people arrive. This is off until you accept it, and you can change your mind at any time.
We do not sell personal data, and we do not use it to build advertising profiles.
Cookies
A cookie is a small file a website asks your browser to keep. This site sets none of them until you choose to allow them — the banner you saw on your first visit is that choice, and declining it is a real decline.
One exception, stated plainly because it is the only thing that reaches a third party before you decide. Google Analytics loads in its consent mode: from the moment the page opens it can tell Google that a visit happened and which page it was, so that Google can estimate overall readership. It writes no cookie, stores no identifier, and cannot recognise you on a later visit, unless and until you accept the analytics category. If you decline, or simply never answer, it stays in that state permanently. Nothing else — Mailchimp, YouTube, Vimeo — loads at all before you agree.
This is the complete list. There are two third parties, and no advertising or cross-site tracking of any kind:
- Essential — SRF Capital Studio. Stores your choice on this screen, for six months. It is the only category that cannot be switched off, because switching it off would mean forgetting your decision and asking again on every page.
- Analytics — Google Analytics 4. Sets
_gaand_ga_<id>, lasting up to two years. Tells us which pages are read and where readers arrive from. - Mailing list — Mailchimp (Intuit). Stores a subscriber identifier so we recognise you if you already subscribed. Retention is set by Mailchimp.
You can change your choice at any time from Cookie preferences in the footer of any page — withdrawing consent is one click, the same as giving it. You may also clear the cookies your browser has stored for this site.
If we materially change this notice — a new category, a new third party, a different purpose — the consent screen reappears. A previous decision was consent to the wording shown at the time, not to whatever replaces it.
Who processes it
We use a small number of established providers, each for one job: Cloudflare serves and protects the site, Supabase stores contact-form enquiries and article content, Google Analytics measures readership, and Mailchimp runs the mailing list. Cloudflare and Supabase are necessary for the site to work at all. Mailchimp receives nothing unless you accept the mailing-list category. Google receives a cookieless signal that a page was viewed from the moment you arrive, and anything more — cookies, returning-visitor recognition — only if you accept the analytics category.
Your rights
Under India’s Digital Personal Data Protection Act 2023 — and, if you are in the UK or EU, under the UK GDPR and GDPR — you can ask us what personal data we hold about you, ask us to correct it, ask us to erase it, and withdraw a consent you previously gave. Withdrawing consent does not undo processing that already, lawfully, happened.
To make any of these requests, write to Growth@srfcapital.studio. We will respond within a reasonable period. If you are in the EU or UK and are unhappy with our response, you may also complain to your national data protection authority.
How long we keep it
Enquiries are kept for as long as we may need them for the conversation you started and for our own record-keeping obligations, and are deleted when neither applies. Analytics data is retained according to the standard Google Analytics retention window. If you want an enquiry deleted sooner, ask us at the address above.
Languages
This notice is published in English. Under section 5(3) of the Digital Personal Data Protection Act 2023 you may ask for it in any language listed in the Eighth Schedule to the Constitution of India. Write to Growth@srfcapital.studio and we will provide it.
Changes
If this policy changes materially we will update the date at the top of this page. We recommend checking it when you next get in touch with us.
Contact
Questions about this policy, or about any personal data we hold, go to Growth@srfcapital.studio.
