Confidential · India Jurisdiction
**DIGITAL CREST** · Legal Documents
## **PRIVACY POLICY**
Digital Crest · AI Automation Agency Effective Date: 6 july 2026 · Last Updated: 6 july 2026
> **Laws** Drafted in compliance with: IT Act 2000 · SPDI Rules 2011 · DPDP Act 2023 · Consumer Protection Act 2019
## **1. Who We Are**
Digital Crest is an AI automation agency registered in India, operating the website www.digitalcrest.cloud . We help businesses automate repetitive tasks using artificial intelligence.
For any privacy-related queries, contact us at:
> **Email** info@digitalcrest.cloud
> **Address** mumbai, India
> **Grievance Officer** Poonam gonkar, director · info@digitalcrest.cloud · Respond within 30 days (as required by IT Act Rule 5(9))
## **2. What Information We Collect**
## **2.1 Information You Give Us Directly**
When you fill our contact form or book a discovery call, we collect:
- Full name
- Business / company name
- Email address
- WhatsApp / mobile number
- Your biggest business challenge (from the dropdown you select)
## **2.2 Information Collected Automatically**
When you visit our Website, we automatically receive:
- IP address and approximate location (city/country level only)
- Browser type and device type (mobile / desktop)
- Pages you visited and time spent on each page
- Referring website (e.g. Google search, social media link)
- Clicks, scroll depth, and heatmap data (via Hotjar, with your consent)
## **2.3 What We Do NOT Collect**
- We do not collect Aadhaar numbers, PAN, financial information, or government ID
- We do not collect passwords (we have no login system)
- We do not collect data from children under 18 years of age
## **3. Why We Collect Your Information (Purpose Limitation)**
Digital Crest · www.digitalcrest.cloud · info@digitalcrest.cloud · These documents are governed by Indian law.
Confidential · India Jurisdiction
**DIGITAL CREST** · Legal Documents
Under Rule 5(3) of the SPDI Rules 2011 and Section 7 of the DPDP Act 2023, we collect your data only for the following specific, lawful purposes:
|**Data Collected**|**Why We Use It**|
|---|---|
|Name, Email, WhatsApp|To respond to your enquiry and schedule your discovery call|
|Company and challenge|To understand your business and prepare a relevant response|
|IP address|For security monitoring and fraud prevention only|
|Analytics data (GA4)|To understand which pages are useful and improve the website|
|Heatmap data (Hotjar)|To improve website layout and user experience (consent-based)|
We will never use your data for purposes beyond what is listed above without obtaining fresh consent from you.
## **4. Legal Basis for Processing**
We process your personal data on the following legal grounds under the Digital Personal Data Protection Act 2023 (DPDP Act):
- Consent: You voluntarily submit your information via our contact form or Calendly booking system or WhatsApp connect button.
- Legitimate Interest: Website analytics and security monitoring to ensure our Website functions safely and improves over time.
- Contractual Necessity: When you engage us for services, processing your contact details is necessary to fulfil that engagement.
## **5. How We Share Your Information**
> **Important** We do NOT sell, rent, or trade your personal data to any third party for marketing purposes.
We share your data only with the following service providers who process it on our behalf, strictly to operate our Website and respond to your enquiry:
|**Service Provider**|**Purpose**|**Data Shared**|
|---|---|---|
|**HubSpot (USA)**|CRM — store and manage your enquiry|Name, email, company, phone|
|**Calendly (USA)**|Meeting scheduler|Name, email, selected time|
|**Tally.so (Belgium)**|Contact form submission|Form responses|
|**Google Analytics (USA)**|Website traffic analytics|Anonymised usage data|
|**Hotjar (Malta)**|UX heatmaps (consent-based)|Anonymised click/scroll data|
Digital Crest · www.digitalcrest.cloud · info@digitalcrest.cloud · These documents are governed by Indian law.
Confidential · India Jurisdiction
**DIGITAL CREST** · Legal Documents
|**Make.com (USA)**|Automation — route your enquiry to our team|Form data (transient)|
|---|---|---|
|**Google Workspace**|Email communications with you|Name and email only|
All third-party providers listed above are bound by their own privacy policies and data processing agreements. Cross-border data transfers to countries outside India are made only where adequate data protection standards exist or contractual safeguards are in place, as required under Section 16 of the DPDP Act 2023.
## **6. Cookies**
Our Website uses cookies and similar tracking technologies. A cookie is a small text file stored on your device.
|**Cookie Type**|**Examples**|**Purpose**|
|---|---|---|
|**Essential**|Platform session cookies|Required for the website to function. Cannot be disabled.|
|**Analytics**|Google Analytics 4|Count visits, track page views. Active only with your consent.|
|**Behavioural**|Hotjar|Heatmaps and session recording. Active only with your
consent.|
You can manage or withdraw cookie consent at any time using our cookie consent banner (displayed on your first visit) or by adjusting your browser settings. Note that disabling essential cookies may affect website functionality.
## **7. Data Retention**
We retain your personal data only for as long as necessary for the purpose it was collected:
- Contact form enquiries: 2 years from date of enquiry, or until you request deletion
- Analytics data: 14 months (Google Analytics default retention setting)
- Calendly booking records: retained as per Calendly's policy (typically 2 years)
- Email correspondence: retained for 3 years for business record purposes
After the retention period, data is deleted or anonymised. You may request earlier deletion at any time (see Section 8).
## **8. Your Rights as a Data Principal (DPDP Act 2023)**
Under the Digital Personal Data Protection Act 2023, you have the following rights:
|**Your Right**|**What It Means**|
|---|---|
|**Right to Information**|You can ask what personal data we hold about you and how we use it.|
|**Right to Correction**|You can ask us to correct any inaccurate or incomplete personal data.|
Digital Crest · www.digitalcrest.cloud · info@digitalcrest.cloud · These documents are governed by Indian law.
Confidential · India Jurisdiction
**DIGITAL CREST** · Legal Documents
|**Right to Erasure**|You can request deletion of your personal data. We will comply unless we are legally required to
retain it.|
|---|---|
|**Right to Grievance Redressal**|You can raise a complaint with our Grievance Officer. We will respond within 30 days.|
|**Right to Nominate**|You can nominate another person to exercise your rights in case of death or incapacity.|
|**Right to Withdraw Consent**|You can withdraw your consent to data processing at any time. This will not affect past
processing.|
To exercise any of the above rights, email us at info@digitalcrest.cloud with the subject line 'Data Rights Request'. We will acknowledge within 72 hours and respond fully within 30 days.
## **9. Data Security**
We implement reasonable technical and organisational security measures to protect your personal data, as required under Rule 8 of the SPDI Rules 2011:
- All data transmitted through our Website is encrypted using HTTPS / TLS
- Access to your data in our CRM is restricted to authorised team members only
- We use two-factor authentication on all tools that store your data
- Our third-party service providers maintain industry-standard security practices
> **Note** No system is 100% secure. In the event of a data breach that is likely to harm you, we will notify you and the relevant authority as required by law.
## **10. Children's Privacy**
Our Website and services are intended for business owners, managers, and professionals aged 18 years and above. We do not knowingly collect personal data from anyone under 18 years of age. If you believe a minor has submitted data to us, please contact us immediately at info@digitalcrest.cloud and we will delete the data promptly.
## **11. Links to Third-Party Websites**
Our Website may contain links to third-party websites (e.g. LinkedIn, WhatsApp, Calendly, meta). Once you click these links, you leave our Website and are subject to those platforms' own privacy policies. We are not responsible for the privacy practices of external websites.
## **12. Changes to This Privacy Policy**
We may update this Privacy Policy from time to time to reflect changes in law, our business, or our data practices. When we make material changes, we will update the 'Last Updated' date at the top of this page. We encourage you to review this policy periodically. Continued use of our Website after changes are posted constitutes your acceptance of the revised policy.
Digital Crest · www.digitalcrest.cloud · info@digitalcrest.cloud · These documents are governed by Indian law.
Confidential · India Jurisdiction
**DIGITAL CREST** · Legal Documents
## **13. Governing Law & Jurisdiction**
This Privacy Policy is governed by the laws of India, including the Information Technology Act 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules 2011, and the Digital Personal Data Protection Act 2023. Any disputes arising from this policy shall be subject to the exclusive jurisdiction of the courts of [City], India.
**Questions? Contact us: info@digitalcrest.cloud | Grievance Officer responds within 30 days as per IT Act 2000**
Digital Crest · www.digitalcrest.cloud · info@digitalcrest.cloud · These documents are governed by Indian law.