GDPR Compliance
General Data Protection Regulation — European Union Statement
Effective Date: June 12, 2026Privacy by Design — GDPR Article 25
Squoosh Next is designed from the ground up to minimise personal data processing. Image files, which may contain biometric data (faces), sensitive location data (GPS EXIF), or proprietary commercial content, are processed exclusively on your local device. This architectural choice satisfies the GDPR's data minimisation and privacy by design requirements without requiring any legal workaround.
Data Controller Information
Controller: Naushad Alam, trading as Zest Tech Solution
Contact Email: contact@zestcommerce.in
WhatsApp: +91 7492068998
Website: zesttechsolution.cloud
As the Data Controller, Naushad Alam is responsible for determining the purposes and means of any personal data processing associated with this Application. For EU data subject requests, please use the contact details above.
Personal Data We Process
Data We DO NOT Process (Server-Side)
Image files (including any biometric data, GPS coordinates, or identifiable content they contain) are never transmitted to our servers. There is no server-side upload endpoint, no cloud processing queue, and no third-party image analysis API involved in the compression workflow. GDPR does not require consent for data that never reaches us.
Analytics Data (Anonymized)
Google Analytics 4 collects anonymized session metrics including page views, session duration, general geographic region (country-level), browser type, and device category. IP addresses are anonymized before processing under GA4's data collection model. This data is aggregated and does not identify individual users.
Contact Form Data
When you submit the contact form, your name, email address, and message content are processed to respond to your inquiry. This data is not stored in any database and is handled exclusively through email communication. reCAPTCHA v3 processes behavioral signals to validate the form submission.
Lawful Basis for Processing
Aggregated, anonymized website analytics (Google Analytics) to understand how users navigate the application — no individual profiling.
Advertising personalization via Google Adsense, where applicable based on your browser consent state and regional requirements.
Image processing, format conversion, and compression. These operations never involve personal data reaching our servers — they are purely local operations.
Your Rights Under GDPR
As a data subject under the GDPR, you have the following rights. Given our privacy-by-design architecture, many of these rights are automatically satisfied.
Right of Access (Art. 15)
You have the right to know what personal data we hold about you. Because Squoosh Next does not collect personal data on our servers, there is nothing stored to access. Any preference data is held exclusively in your own browser's local storage.
Right to Rectification (Art. 16)
You can correct any inaccurate data. Local storage preferences can be modified or cleared at any time through your browser settings.
Right to Erasure (Art. 17)
You have the right to have your data deleted. Clear your browser's local storage and cookies for this domain to immediately erase all locally stored preferences. No server-side erasure request is necessary because no server-side data exists.
Right to Restriction (Art. 18)
You may restrict processing of your data. Since all processing is local and voluntary, you control it directly — simply stop using the application or clear local storage.
Right to Data Portability (Art. 20)
You have the right to receive your data in a portable format. Browser DevTools (Application → Local Storage) allows you to inspect and export any stored preference keys at any time.
Right to Object (Art. 21)
You may object to data processing. Analytics collection can be blocked using a browser content filter or the Google Analytics Opt-out Add-on. No objection mechanism is required for image processing, as it is inherently local.
Data Retention
Local Storage Preferences: Retained indefinitely in your browser until you clear site data. No expiry is set by us; retention is controlled by your browser settings.
Analytics Data: Google Analytics retains event data for 14 months by default, per GA4 standard configuration. This is aggregated and anonymized.
Contact Form Submissions: Email correspondence is retained for the duration of the inquiry and reasonable follow-up period, not exceeding 12 months.
Right to Lodge a Complaint
If you believe your GDPR rights have been violated, you have the right to lodge a complaint with your local Data Protection Authority (DPA). EU residents can find their national DPA at edpb.europa.eu/about-edpb/about-edpb/members_en. We encourage you to contact us first at contact@zestcommerce.in so we can resolve any concerns directly and promptly.