Your information matters
Privacy Policy
How we collect, use and protect the information you share with Digital Factory.
Who we are
Digital Factory (“we“, “us“, “our“, “Digital Factory“) is a registered partnership firm operating under the Indian Partnership Act, 1932, headquartered in Puducherry, India.
- Firm name : DIGITAL FACTORY
- GSTIN: 34AAJFD9199G1ZZ
- Registered Office: 95D, FIRST FLOOR, NEEDARAJAPPAIYAR STREET, PONDICHERRY 605001
- Website: digitalfactoryindia.com
This Privacy Policy explains what personal data we collect from you, why we collect it, how we use it, and the rights available to you under Indian law — principally the Digital Personal Data Protection Act, 2023 (“DPDP Act”), the Information Technology Act, 2000, and the rules made under it.
Under the DPDP Act, Digital Factory acts as a Data Fiduciary in relation to the personal data of our clients and website visitors (Data Principals).
By using our website, purchasing a package (Launch, Grow, or Scale), submitting our project intake form, or otherwise interacting with us, you agree to the practices described in this Policy.
Information We Collect
We collect only what is reasonably necessary to deliver our services. Depending on how you interact with us, this includes:
2.1 Information You Provide Directly
- Business name, industry/category, city or service area
- Description of your business, products/services, and target customers
- Contact details: name, email address, phone number, WhatsApp number
- Brand preferences: style direction, reference brands, colour preferences
- Logo files, photos, and other creative assets you upload
- Responses to intake form questions (e.g. hosting preference, whether you want your logo to be copyright-registrable, add-on selections)
- Any messages you send us via WhatsApp, email, or contact forms
b) Information collected automatically
- Basic usage data when you visit our website (pages viewed, approximate location by IP, browser/device type) via standard analytics tools
- Cookies necessary for the website and checkout flow to function (see Section 6)
c) Information from payments
We do not collect or store your card, UPI, or net-banking details. Payments are processed by Razorpay, a licensed payment aggregator, which handles and secures this information directly. We receive confirmation of payment and a transaction reference, not your financial credentials.
d) Information from connected third-party accounts
If you choose to link an existing Google Business Profile, Facebook, Instagram, or similar account during onboarding, we access only what is necessary to set up or manage that listing on your behalf, with your authorisation.
We do not knowingly collect sensitive personal data (health records, biometric data, financial account numbers, etc.) beyond what is described above.
Why we collect it (purpose)
We use your information only for purposes you would reasonably expect from a business you’ve engaged, specifically to:
- Build and deliver your Launch, Grow, or Scale package as described on our Packages page
- Set up and manage your website, Google Business Profile, social channels, and related digital assets
- Process payments and issue invoices (including GST-compliant billing)
- Communicate with you about your project — including reminders if your intake form is incomplete after payment
- Provide customer support and respond to your queries
- Improve our services, website, and intake process
- Meet legal, tax, and regulatory obligations in India
We do not sell your personal data to third parties, and we do not use your data to send unsolicited marketing to third-party lists.
Legal basis for processing
Under the DPDP Act, we process your personal data on the basis of:
- Your consen, given when you submit our intake form, make a purchase, or otherwise voluntarily provide information to us; and
- Legitimate use necessary to perform the contract you enter into with us when purchasing a package, and to comply with applicable law (e.g. GST invoicing, tax records).
You may withdraw consent at any time by contacting us (Section 12), though this may affect our ability to continue delivering an in-progress project.
Cookies and tracking
Our website may use cookies and similar technologies to:
- Keep the intake form's save-progress feature working across visits
- Understand aggregate website traffic and usage patterns
- Support payment checkout flows
You can control cookies through your browser settings. Disabling cookies may affect some website functionality, such as save-and-resume on the intake form.
Data storage and security
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction, consistent with the IT (Reasonable Security Practices and Procedures) Rules, 2011.
No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. If we become aware of a data breach affecting your personal data, we will notify you and the relevant authorities as required by law.
Data retention
We retain your personal data for as long as necessary to:
- Deliver the package you've purchased and any ongoing Grow/Scale engagement
- Comply with tax, accounting, and legal record-keeping obligations under Indian law (typically several years for financial records)
- Resolve disputes and enforce our agreements
Once these purposes no longer apply, we take reasonable steps to delete or anonymise your data, except where we are legally required to retain it longer.
Your rights
Under the DPDP Act, as a Data Principal you have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Erase your personal data, where it is no longer necessary for the purpose it was collected, subject to our legal retention obligations
- Withdraw consent at any time
- Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity
- Grievance redressal — Grievance redressal — raise a complaint with us first (Section 11), and if unresolved, with the Data Protection Board of India
To exercise any of these rights, contact us using the details in Section 12.
Children's privacy
Our services are intended for business owners and professionals. We do not knowingly collect personal data from individuals under 18. If we learn we have inadvertently collected such data, we will delete it.
Grievance officer
In accordance with the Information Technology Act, 2000 and the rules made thereunder, our Grievance Officer is:
- Firm name : DIGITAL FACTORY
- GSTIN: 34AAJFD9199G1ZZ
- Registered Office: 95D, FIRST FLOOR, NEEDARAJAPPAIYAR STREET, PONDICHERRY 605001
- Website: digitalfactoryindia.com
You may contact the Grievance Officer with any complaints or concerns about how your personal data has been handled. We will acknowledge and address grievances within the timelines prescribed by applicable law.
Contact us
For any questions about this Privacy Policy or how we handle your data:
- Email: info@digitalfactoryindia.com
- WhatsApp: +9199431 91699
- Address: 95-D, First Floor, Needarajapaiyer Street, Pondicherry, India
Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated version on this page with a revised “Last updated” date. Material changes will be communicated to active clients directly where appropriate.
Governing law and jurisdiction
This Privacy Policy is governed by the laws of India. Any disputes arising from it are subject to the exclusive jurisdiction of the courts in Puducherry, India.
A question about your information?
We’re here to help you understand the next step.