Privacy Policy
Effective Date: 01-01-2018
Welcome to The Bombay Digital Company (“Company,” “we,” “us,” or “our”). We are committed to protecting your privacy and ensuring that your personal information is handled in a safe, transparent, and responsible manner.
This Privacy Policy explains how we collect, use, store, disclose, and protect information obtained through our website, services, communications, and business operations. It is designed to comply with applicable laws, including the Digital Personal Data Protection Act, 2023 (India) (“DPDP Act”), and aligns with generally accepted international privacy principles.
By accessing our website or using our services, you agree to the practices described in this Privacy Policy.
1. Introduction
The Bombay Digital Company provides digital marketing, web development, branding, social media management, performance marketing, search engine optimization (SEO), content creation, technology consulting, software solutions, and related professional services.
We recognize the importance of your privacy and are committed to maintaining the confidentiality, integrity, and security of your personal data.
2. Information We Collect
We may collect personal information and non-personal information from clients, prospective clients, website visitors, business partners, and other individuals who interact with us.
Personal Information
Personal information may include:
- Full Name
- Email Address
- Phone Number
- Company Name
- Website URL
- Job Title or Designation
- Business Information provided during inquiries or onboarding
Technical Information
We may automatically collect certain technical information, including:
- IP Address
- Device Information
- Browser Type and Version
- Operating System
- Referring URLs
- Website Usage Data
- Geographic Location Data (where permitted)
Marketing and Communication Data
We may collect information related to:
- Newsletter subscriptions
- Marketing preferences
- Event registrations
- Survey responses
- Customer feedback
3. How We Collect Information
We collect information through various channels, including:
Website Contact Forms
Information submitted through inquiry, consultation, support, or contact forms available on our website.
Lead Generation Forms
Information submitted through advertising campaigns, landing pages, social media platforms, and lead capture forms.
Newsletter Subscriptions
Information provided when subscribing to newsletters, marketing communications, industry updates, or promotional content.
Client Onboarding Processes
Information shared during project discussions, proposals, agreements, account creation, onboarding, and service delivery.
Analytics Tools
Information collected through website analytics platforms and performance monitoring tools.
Cookies and Similar Technologies
Information automatically collected through cookies, tracking pixels, tags, scripts, and related technologies.
4. How We Use Your Information
We may use the information we collect for the following purposes:
Service Delivery
- Responding to inquiries and requests
- Providing digital marketing and technology services
- Managing projects and client relationships
- Delivering customer support
Communication
- Sending service-related updates
- Providing requested information
- Sharing proposals, reports, and project communications
Marketing and Promotional Activities
- Sending newsletters
- Sharing company updates and announcements
- Promoting our services and offerings
- Conducting marketing campaigns, subject to applicable consent requirements
Website Improvement
- Improving website functionality and user experience
- Monitoring website performance
- Troubleshooting technical issues
Analytics and Reporting
- Measuring campaign effectiveness
- Understanding user behavior
- Generating business insights and performance reports
Legal and Compliance Purposes
- Complying with legal obligations
- Enforcing contractual rights
- Preventing fraud and misuse
- Protecting our business, clients, and users
5. Legal Basis for Processing Information
Where required by applicable law, including the DPDP Act, we process personal information based on one or more of the following lawful grounds:
- Your consent
- Performance of a contract
- Compliance with legal obligations
- Legitimate business interests
- Protection of legal rights and interests
- Compliance with regulatory requirements
Where consent is relied upon, you may withdraw your consent at any time, subject to applicable legal or contractual restrictions.
6. Cookies and Tracking Technologies
Our website may use cookies and similar technologies to improve functionality, analyze traffic, and enhance user experience.
Cookies may be used to:
- Remember user preferences
- Understand website usage patterns
- Improve website performance
- Support marketing and advertising activities
- Measure campaign effectiveness
Users may control cookie settings through their browser preferences. Disabling certain cookies may affect website functionality.
7. Sharing and Disclosure of Information
We do not sell personal information.
We may share information with trusted third parties where necessary for legitimate business purposes, including:
Service Providers
Third-party vendors who assist with:
- Website hosting
- Analytics
- Marketing automation
- Email communications
- CRM systems
- Cloud infrastructure
- Payment processing
- Technology support
Professional Advisors
Lawyers, accountants, auditors, consultants, and other professional service providers.
Legal Authorities
Government agencies, regulators, law enforcement bodies, courts, or other authorities where disclosure is required by law or necessary to protect legal rights.
Business Transactions
In connection with mergers, acquisitions, restructuring, financing activities, or sale of business assets, subject to appropriate confidentiality protections.
8. Data Security
We implement reasonable technical, organizational, and administrative safeguards to protect personal information from:
- Unauthorized access
- Loss
- Misuse
- Disclosure
- Alteration
- Destruction
Security measures may include:
- Secure hosting environments
- Access controls
- Data encryption where appropriate
- Firewalls and monitoring systems
- Employee confidentiality obligations
While we strive to protect information, no method of transmission or storage can be guaranteed to be completely secure.
9. Data Retention
We retain personal information only for as long as necessary to:
- Fulfill the purposes described in this Privacy Policy
- Deliver services
- Maintain business records
- Comply with legal, regulatory, tax, accounting, or contractual obligations
- Resolve disputes and enforce agreements
When information is no longer required, it will be securely deleted, anonymized, or archived in accordance with applicable laws.
10. User Rights and Choices
Subject to applicable law, including the DPDP Act, individuals may have the right to:
Access
Request confirmation regarding the personal information we hold about you.
Correction
Request correction or updating of inaccurate or incomplete information.
Erasure
Request deletion of personal information, subject to legal and contractual obligations.
Withdrawal of Consent
Withdraw previously provided consent where processing is based on consent.
Grievance Redressal
Submit complaints or concerns regarding the handling of personal information.
Communication Preferences
Opt out of marketing communications by following unsubscribe instructions or contacting us directly.
To exercise any of these rights, please contact us using the details provided below.
11. Third-Party Services and Links
Our website may contain links to third-party websites, tools, platforms, and services.
We are not responsible for the privacy practices, security measures, or content of third-party websites. Users are encouraged to review the privacy policies of those third parties before providing personal information.
12. International Data Transfers
In the course of providing services, personal information may be processed, stored, or transferred outside India to jurisdictions where our service providers, partners, or technology infrastructure operate.
Where such transfers occur, we take reasonable measures to ensure that appropriate safeguards are implemented and that personal information receives an adequate level of protection consistent with applicable legal requirements.
13. Children’s Privacy
Our services and website are not directed toward individuals under the age of 18 years.
We do not knowingly collect personal information from children. If we become aware that information has been collected from a child without appropriate authorization, we will take reasonable steps to delete such information promptly.
Parents or guardians who believe a child has provided personal information may contact us for assistance.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect:
- Changes in legal requirements
- Business practices
- Technology developments
- Service offerings
Any updates will be posted on this page with a revised Effective Date. Continued use of our website or services after updates constitutes acceptance of the revised Privacy Policy.
15. Contact Information
If you have any questions, requests, complaints, or concerns regarding this Privacy Policy or our data handling practices, please contact us:
The Bombay Digital Company
We will make reasonable efforts to respond to privacy-related inquiries in accordance with applicable laws and regulations.
