Privacy Policy
This policy explains what personal data we collect, why we collect it, how we protect it, and the rights you have over it. It covers our website, our tools, our services, and any products we may launch.
1. What this policy covers
This Privacy Policy applies to personal data we handle through this website and any of our other websites, our free online tools, our contact and enquiry forms, our call-booking and newsletter sign-ups, our consulting and advisory services, and any product, application, or service we may launch in the future (together, the “Services”).
2. Our products and additional notices (umbrella clause)
We may launch products or services that collect personal data for their own purposes and carry their own privacy notices (“Product Notices”). A Product Notice adds detail for that product, it does not replace this policy.
This Privacy Policy is the parent policy for everything we do. Our core commitments here, that we collect only what we need, use it for clear purposes, keep it secure, honour your rights, and do not sell your data, apply to every product and service. Where a Product Notice gives extra detail or a different rule on a specific point it expressly covers, that Product Notice applies for that product. For everything a Product Notice does not cover, this policy continues to apply.
3. The personal data we collect
Data you give us. When you contact us, book a call, subscribe to the newsletter, or engage our services, we may collect your name, email address, company name, phone number if you provide it, and the content of your message or enquiry.
Data we collect automatically. When you visit the website, our hosting and analytics providers collect limited technical information such as your approximate location, device and browser type, referring pages, and the pages you view. We use a privacy-friendly, cookieless analytics service, so we do not set advertising or cross-site tracking cookies.
Data from our in-browser tools. Our tools that run in your browser process what you type on your own device. We do not receive or store the content you enter into those tools.
We do not ask for sensitive personal data through the website, and we ask you not to send it to us through the contact form.
4. Why we use your data, and our lawful basis
We use personal data to:
- respond to your enquiries and provide the information or services you ask for;
- schedule and hold calls and meetings;
- deliver, manage, and improve our consulting and advisory services;
- send you our newsletter, where you have signed up for it;
- operate, secure, and improve the website and tools; and
- meet our legal, tax, and regulatory obligations.
We process personal data on the basis of your consent, where you have given it (for example, the newsletter), for the performance of a contract with you, for certain legitimate uses permitted by law such as responding to a request you initiate, and to comply with the law. Under India’s Digital Personal Data Protection Act, 2023, we handle your data as your data fiduciary.
5. Consent, and how to withdraw it
Where we rely on your consent, you gave it by choosing to contact us, sign up, or use a feature. You can withdraw your consent at any time by emailing dsign@d-sign.in, or by using the unsubscribe link in our emails. Withdrawing consent is as easy as giving it. If you withdraw consent, we will stop the related processing, though it will not affect anything we lawfully did before you withdrew, and we may keep limited records where the law requires it.
6. Cookies and analytics
We use a cookieless web-analytics service to understand, in aggregate, how the site is used. It does not track you across other websites and does not build an advertising profile of you. We do not use third-party advertising cookies. If we add any feature in future that needs cookies or consent, we will ask you first.
7. When we share data, and with whom
We do not sell your personal data. We share it only in these limited ways:
- Service providers (data processors) who help us run the Services, such as our website hosting and analytics provider, our email-delivery provider, and our call-scheduling provider. They may process data only on our instructions and under agreements that require them to protect it.
- Professional advisers, such as our accountants and lawyers, where reasonably needed.
- Legal and safety reasons, where we must disclose data to comply with the law, a lawful request, or to protect our rights, safety, or property.
- Business transfers, if the Company is involved in a reorganisation, merger, or sale, in which case data may transfer to the new owner under this policy.
8. Where your data is processed, and transfers outside India
Some of our service providers may store or process personal data on servers located outside India. Where that happens, we take reasonable steps to ensure your data stays protected, and we do not transfer personal data to any country restricted by the Government of India for this purpose. Sector-specific rules, where they apply to us, are followed in addition to this policy.
9. How long we keep your data
We keep personal data only for as long as we need it for the purpose we collected it, or for as long as the law requires. When we no longer need it, and consent is withdrawn or the purpose is complete, we delete it or make it anonymous. Business and tax records may be kept for the periods set by law.
10. How we protect your data
We use reasonable technical and organisational safeguards to protect personal data, including access controls, encryption in transit, and careful selection of our service providers. No method of transmission or storage is perfectly secure, so we cannot promise absolute security, but we work to keep the risk low. If a personal data breach occurs, we will act as the law requires, including notifying the Data Protection Board of India and affected individuals where that duty applies.
11. Your rights
Subject to the law, you have the right to:
- ask what personal data of yours we hold and how we use it;
- ask us to correct or complete data that is wrong or incomplete;
- ask us to delete your personal data, where there is no legal reason to keep it;
- withdraw consent, as described above;
- raise a grievance about how we handle your data; and
- nominate another person to exercise your rights in the event of your death or incapacity.
To exercise any of these, email dsign@d-sign.in. We will respond within a reasonable time, and within any period the law sets. We may need to verify your identity first. If you are not satisfied with our response, you may complain to the Data Protection Board of India.
12. Children
The website and our services are meant for businesses and adults, and are not directed at children under 18. We do not knowingly collect personal data from children through the website. If you believe a child has given us personal data, please contact us and we will delete it. If a future product is meant for children, its Product Notice will explain the additional protections, including verifiable parental consent, that we apply.
13. Third-party links
Our website links to other sites we do not control. This policy does not cover those sites. Please read the privacy policy of any third-party site you visit.
14. Our Grievance Officer and data contact
If you have a question, request, or complaint about your personal data, you can contact our Grievance Officer, Dipankar Sinha, at dsign@d-sign.in, addressed to DSIGN DIGITAL TECHNOLOGIES PRIVATE LIMITED. We take these seriously and will respond promptly.
15. Changes to this policy
We may update this policy from time to time. When we do, we will change the effective date at the top and, where a change is significant, make reasonable efforts to highlight it. Please check back so you stay informed. See also our Terms & Conditions.