We use your information only for purposes you would reasonably expect from a business you’ve engaged, specifically to:
This policy explains what personal data Digital Factory collects, why we collect it, how we use it, and the rights available to you under Indian law — principally the Digital Personal Data Protection Act, 2023.
Effective date: [DATE — fill in before publishing]
Last updated: [DATE — fill in before publishing]
On this page
Section 1
This Privacy Policy explains what personal data we collect from you, why we collect it, how we use it, and the rights available to you under Indian law — principally the Digital Personal Data Protection Act, 2023 (“DPDP Act”), the Information Technology Act, 2000, and the rules made under it.
Under the DPDP Act, Digital Factory acts as a Data Fiduciary in relation to the personal data of our clients and website visitors (Data Principals).
By using our website, purchasing a package (Launch, Grow, or Scale), submitting our project intake form, or otherwise interacting with us, you agree to the practices described in this Policy.
Section 2
We collect only what is reasonably necessary to deliver our services. Depending on how you interact with us, this includes:
We do not collect or store your card, UPI, or net-banking details. Payments are processed by Razorpay, a licensed payment aggregator, which handles and secures this information directly. We receive confirmation of payment and a transaction reference, not your financial credentials.
If you choose to link an existing Google Business Profile, Facebook, Instagram, or similar account during onboarding, we access only what is necessary to set up or manage that listing on your behalf, with your authorisation.
We do not knowingly collect sensitive personal data (health records, biometric data, financial account numbers, etc.) beyond what is described above.
Section 3
We use your information only for purposes you would reasonably expect from a business you’ve engaged, specifically to:
We do not sell your personal data to third parties, and we do not use your data to send unsolicited marketing to third-party lists.
Section 4
Under the DPDP Act, we process your personal data on the basis of:
You may withdraw consent at any time by contacting us (Section 12), though this may affect our ability to continue delivering an in-progress project.
Section 5
We share personal data only where necessary to deliver our services:
We do not share your data with third parties for their own independent marketing purposes. Where a third-party service (like Razorpay or Google) processes your data, their own privacy policy also applies to that processing.
We may disclose information if required by law, court order, or a valid request from a government authority in India.
Section 6
Our website may use cookies and similar technologies to:
You can control cookies through your browser settings. Disabling cookies may affect some website functionality, such as save-and-resume on the intake form.
Section 7
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction, consistent with the IT (Reasonable Security Practices and Procedures) Rules, 2011.
No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. If we become aware of a data breach affecting your personal data, we will notify you and the relevant authorities as required by law.
Section 8
We retain your personal data for as long as necessary to:
Once these purposes no longer apply, we take reasonable steps to delete or anonymise your data, except where we are legally required to retain it longer.
Section 9
Under the DPDP Act, as a Data Principal you have the right to:
To exercise any of these rights, contact us using the details in Section 12.
Section 10
Our services are intended for business owners and professionals. We do not knowingly collect personal data from individuals under 18. If we learn we have inadvertently collected such data, we will delete it.
Section 11
In accordance with the Information Technology Act, 2000 and the rules made thereunder, our Grievance Officer is:
You may contact the Grievance Officer with any complaints or concerns about how your personal data has been handled. We will acknowledge and address grievances within the timelines prescribed by applicable law.
For any questions about this Privacy Policy or how we handle your data:
Section 13
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated version on this page with a revised “Last updated” date. Material changes will be communicated to active clients directly where appropriate.
Section 14
This Privacy Policy is governed by the laws of India. Any disputes arising from it are subject to the exclusive jurisdiction of the courts in Puducherry, India.