Privacy Policy

01Introduction

This Privacy Policy explains how Digital Udyami (“Digital Udyami”, “we”, “us” or “our”) collects, uses, shares and protects personal data when you visit www.digitaludyami.com (the “Website”), contact us, or use our digital marketing, website development, advertising, branding and AI automation services (the “Services”).

We follow the Digital Personal Data Protection Act, 2023 (“DPDP Act”), the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and other applicable Indian laws. By using the Website or sharing your details with us, you agree to this Policy.

02Information we collect

Information you give us

• Contact details: your name, phone or WhatsApp number, email address, business name and website.
• Enquiry details: your goals, budget, industry, city and any message you send us.
• Client information: if you become a client, billing details, GST number and the information needed to deliver the Services.
• Account access: access you grant us to your website, analytics, ad accounts, social media or CRM so we can do the work you asked for.

Information collected automatically

• Usage data: pages visited, time on page, referring website, device type, browser and approximate location (city level), collected through cookies and analytics tools.
• Technical data: IP address and server logs needed to keep the Website secure and working.

We do not knowingly collect sensitive personal data such as passwords (other than access you choose to grant for a project), financial account details, health information or biometric data through the Website.

03How our website forms work

The enquiry forms on our Website do not store your details on our servers. When you submit a form, your browser prepares a message and opens WhatsApp (or your email app). Your details are shared with us only if you choose to send that message.

Once you send it, the message is handled under this Policy and under WhatsApp’s own privacy policy, which is operated by WhatsApp LLC / Meta Platforms.

04How we use your information

We use personal data only for clear, lawful purposes:

• to reply to your enquiry, call you back or send you a proposal;
• to deliver, manage and improve the Services you have engaged us for;
• to send invoices, collect payments and keep accounting and tax records;
• to understand how visitors use the Website and improve its content and performance;
• to run and measure our own advertising, including remarketing on Google and Meta platforms;
• to send you updates or useful information, only where you have agreed or where it relates to Services you use (you can opt out at any time);
• to keep the Website secure, prevent fraud and comply with legal obligations.

Our legal basis is your consent, which you give when you contact us or accept cookies, together with the legitimate uses permitted under the DPDP Act, such as performing a contract you have requested and meeting legal obligations.

05Cookies and tracking

Cookies are small files stored on your device. We and our partners may use:

• Essential cookies that make the Website work (for example, security and WordPress functions);
• Analytics cookies, such as Google Analytics, that show how the Website is used;
• Advertising cookies and pixels, such as Google Ads and the Meta Pixel, that measure our campaigns and show relevant ads.

You can block or delete cookies in your browser settings, and you can manage ad preferences in your Google and Meta account settings. Blocking some cookies may affect how the Website works.

06How we share information

We do not sell or rent your personal data. We share it only when needed, with:

• Service providers who help us operate: hosting, email, WhatsApp, cloud storage, CRM, analytics, payment and accounting tools;
• Advertising and technology platforms (such as Google, Meta, LinkedIn and AI tools) when this is needed to deliver Services you have asked for;
• Professional advisers such as accountants and lawyers, under confidentiality obligations;
• Government or law enforcement authorities, when required by law or a valid legal order.

Some of these providers may store data on servers outside India. When that happens we take reasonable steps to make sure your data stays protected, in line with the DPDP Act and any restrictions notified by the Government of India.

07Use of AI tools

We use AI tools to support research, content drafting, reporting and automation. We avoid putting personal data into AI tools unless this is needed for a Service you have asked for. When we do, we use business-grade tools with data-protection settings wherever available. People review AI-assisted work before it is delivered.

08How long we keep information

• Enquiries that do not become projects: kept for up to 24 months, then deleted.
• Client records, contracts and invoices: kept for as long as the law requires, generally up to 8 years for tax and accounting purposes.
• Analytics data: kept according to the retention settings of the analytics tool, usually 14 months.

When data is no longer needed, we delete or anonymise it. Access to your accounts that you granted for a project should be removed by you when the engagement ends, and we will help you do this.

09How we protect information

We use reasonable security practices, including access controls, strong passwords and two-factor authentication where available, encrypted (HTTPS) connections, limited staff access on a need-to-know basis, and trusted service providers. No method of transmission or storage is completely secure. If a personal data breach occurs, we will act quickly and notify affected people and the authorities as required by law.

10Your rights

Under the DPDP Act you have the right to:

• access a summary of the personal data we hold about you and how it is used;
• correct, complete or update your personal data;
• erase your personal data when it is no longer needed, unless the law requires us to keep it;
• withdraw consent at any time, as easily as you gave it (this does not affect processing already done);
• raise a grievance with us and, if not resolved, with the Data Protection Board of India;
• nominate another person to exercise these rights in case of your death or incapacity.

To use any of these rights, contact us using the details below. We may need to verify your identity before acting on a request.

11Children’s privacy

The Website and Services are meant for businesses and adults. We do not knowingly collect personal data from anyone under 18 years of age. If you believe a child has shared personal data with us, please contact us and we will delete it.

12Third-party websites

The Website links to third-party sites and platforms such as WhatsApp, Google Reviews, Facebook, Instagram, LinkedIn and X. We are not responsible for their content or privacy practices, so please read their policies before sharing information with them.

13Changes to this policy

We may update this Policy from time to time. The latest version will always be on this page with the “Last updated” date. If we make important changes, we will make reasonable efforts to let you know, for example with a notice on the Website.

14Contact and Grievance Officer

For questions, requests or complaints about this Policy or your personal data, please contact our Grievance Officer:

We will acknowledge your request within 48 hours and aim to resolve it within 30 days.