Privacy Policy
Last updated: August 2026
This policy is written to comply with India's Digital Personal Data Protection Act, 2023 (DPDP Act).
1. Who we are
This website is operated by Ishant Dubey, a sole proprietor based in Bhopal, Madhya Pradesh 462011, India. In this policy "we", "us" and "our" refer to Ishant Dubey. Under the DPDP Act we act as the Data Fiduciary for the personal data described below, and you are the Data Principal.
2. What personal data we collect
| Category | Examples | How it is collected |
|---|---|---|
| Contact data | Name, email address, phone/WhatsApp number, company name | You submit it in a form, WhatsApp message, or email |
| Enquiry data | Monthly ad budget range, services you need, website URL, your message | You submit it in an enquiry or audit-request form |
| Usage data | Pages viewed, referrer, time on page, scroll depth, clicks, approximate city, device and browser type | Collected automatically by analytics (only after you accept cookies) |
| Technical data | IP address, timestamps, security and error logs | Collected automatically by our server and CDN for security |
We do not knowingly collect financial account numbers, government ID numbers, health data, or any data from children under 18. Please do not send such data to us.
3. Why we use it, and our legal basis
| Purpose | Data used | Basis under DPDP Act |
|---|---|---|
| Replying to your enquiry and preparing a proposal or audit | Contact + enquiry data | Your consent, given when you submit the form |
| Delivering a service you have engaged us for | Contact + enquiry data | Performance of our contract with you |
| Sending a requested guide, checklist or report | Email address | Your consent |
| Understanding how the website performs | Usage data | Your consent via the cookie banner |
| Preventing spam, fraud and abuse; keeping the site online | Technical data | Legitimate use for security |
We do not sell your personal data. We do not rent or trade contact lists. We do not use your data to train any machine-learning model.
4. Cookies and tracking
Analytics and advertising cookies are set to denied by default. Nothing beyond strictly necessary storage runs until you press Accept on the cookie banner. This is implemented using Google Consent Mode v2.
| Cookie / storage | Purpose | Runs before consent? |
|---|---|---|
cc_consent (local storage) | Remembers your cookie choice so you are not asked again | Yes — strictly necessary |
| Google Analytics 4 | Aggregate traffic and conversion reporting | No |
| Microsoft Clarity | Anonymised heatmaps and session replay, used to find UX problems | No |
| Our first-party analytics | Page views and form events on our own domain | No |
| Google Ads | Measuring which ads produce enquiries | No |
To withdraw consent: clear this site's data in your browser settings, or email us at [email protected]. The banner will appear again and your previous choice is discarded.
5. Who we share it with
We share personal data only with processors that help us run this business, and only as far as needed:
- Google (Analytics, Ads) — website and campaign measurement
- Microsoft (Clarity) — behaviour analytics
- Meta — measuring ad performance, where you arrived from a Facebook or Instagram ad
- Razorpay — payment processing where you purchase a paid product. Card details go directly to Razorpay; we never see or store them
- Our email, hosting and workflow providers — storing and routing your enquiry to us
We may also disclose data where required by Indian law, a court order, or a lawful government request. Some of these providers process data on servers outside India; where that happens, transfers are made under the provider's standard contractual protections.
6. How long we keep it
| Data | Retention |
|---|---|
| Enquiry that did not become a client | 24 months from last contact, then deleted |
| Client records and correspondence | Duration of engagement + 8 years (Indian tax and accounting requirements) |
| Email subscribers | Until you unsubscribe, then removed within 30 days |
| Analytics data | 14 months (Google Analytics default), then auto-deleted |
| Server security logs | 90 days |
7. Your rights as a Data Principal
Under the DPDP Act you have the right to:
- Access — get a summary of the personal data we hold about you and who we shared it with
- Correction and completion — have inaccurate or incomplete data fixed
- Erasure — have your data deleted, unless we must keep it by law
- Withdraw consent — as easily as you gave it (see section 4)
- Grievance redressal — raise a complaint with us and get a response
- Nominate — nominate another person to exercise these rights in the event of your death or incapacity
To exercise any of these, email [email protected] with the subject line "DPDP request". We respond within 30 days. There is no fee. We may ask you to confirm your identity before acting, to make sure we do not disclose your data to someone else.
8. Grievance Officer
If you are unhappy with how we handled your data or your request, contact our Grievance Officer:
Ishant Dubey, Grievance Officer, Bhopal, Madhya Pradesh 462011
Email: [email protected]
Phone: +91 87708 00440
Response time: within 30 days of receipt
If you remain dissatisfied, you may escalate your complaint to the Data Protection Board of India.
9. Security
The site is served over HTTPS with HSTS. Access to enquiry data is restricted to the proprietor. No system is perfectly secure — if a personal data breach occurs that affects you, we will notify you and the Data Protection Board as required by the DPDP Act.
10. Changes to this policy
If we change this policy materially, we will update the "Last updated" date above and, where the change affects how we use data you already gave us, notify you by email.
11. Contact
Ishant Dubey, Bhopal, Madhya Pradesh 462011, India · [email protected] · +91 87708 00440