Privacy Policy

1. Information we collect

We collect information in three ways: what you give us, what your browser sends automatically, and what we are given access to during a project.

• —Information you give us — your name, email address, phone number, company, budget range and anything you write in the enquiry form or send us by email, WhatsApp or on a call.
• —Technical information — IP address, browser and device type, referring page, pages viewed and time on page, collected through server logs and analytics.
• —Cookies and similar technologies — small files used to keep the site working, remember preferences, and measure traffic. See section 6.
• —Client project data — during an engagement we are typically given access to systems such as ad accounts, analytics properties, CRMs, hosting, repositories and, in some cases, databases containing your own customers' personal data.

2. How we use it

We do not use your enquiry to add you to a marketing list without asking, and we do not sell, rent or trade personal information to third parties.

• —To reply to your enquiry, quote for work, and carry out a project you have engaged us for.
• —To operate, secure and improve this website.
• —To measure which pages and campaigns bring qualified enquiries, so we can spend our own budget sensibly.
• —To send project updates, invoices and reports to clients.
• —To meet legal, accounting and tax obligations.

3. Legal basis

Where the GDPR or the UK GDPR applies, we rely on: your consent (for non-essential cookies and any marketing email); the performance of a contract (delivering a project you engaged us for); our legitimate interests (responding to enquiries, securing the site, and understanding how it is used); and legal obligation (tax and accounting records).

Where India's Digital Personal Data Protection Act, 2023 applies, we process personal data for the lawful purposes above, on the basis of consent or of legitimate uses permitted by that Act.

4. Client data we are given access to

When you engage us, we act on your instructions in relation to your customers' personal data. In GDPR terms, you are the controller and we are a processor.

• —We only access what is needed to do the work, and only for as long as the engagement requires.
• —We do not use your customer data for our own purposes, and we never mix one client's data with another's.
• —Access is provisioned to named individuals and revoked when an engagement ends or when you ask us to remove it.
• —If we engage a sub-processor to help deliver a project, we remain responsible for their handling of your data.
• —You own your accounts, your code and your data. Nothing here creates a claim by us over any of it.

5. Sharing and third parties

We share personal information only with service providers that help us run the business and deliver projects, and only to the extent they need it.

• —Hosting and infrastructure — for example Vercel, AWS and similar providers, which process server logs.
• —Analytics — traffic measurement on this website.
• —Advertising platforms — Meta, Google, LinkedIn and TikTok, where we or our clients run campaigns and conversion tracking.
• —Communication and productivity tools — email, messaging, scheduling, invoicing and project management software.
• —Professional advisers and authorities — where we are legally required to disclose information.

6. Cookies

Essential cookies keep the site functioning and cannot be switched off. Analytics and advertising cookies are only set where you have consented, and can be refused without losing access to the site.

You can clear or block cookies in your browser settings at any time. Doing so may affect how parts of the site behave.

7. International transfers

We work with clients and providers in India, the United States, Canada, the UAE, the UK and the EU, so personal information may be transferred and stored outside your country. Where required, transfers are made under appropriate safeguards such as standard contractual clauses.

8. How long we keep it

• —Enquiries that do not become projects — up to 24 months, then deleted.
• —Client project records, contracts and invoices — for as long as the relationship lasts and then as required by tax and accounting law, typically eight years in India.
• —Access to client systems — removed at the end of the engagement or on request.
• —Server logs and analytics — retained for a limited period in line with the relevant provider's defaults.

9. Your rights

Subject to the law that applies to you, you can ask us to: confirm what we hold about you; provide a copy; correct anything inaccurate; delete it; restrict or object to how we use it; port it to another provider; or withdraw consent you previously gave.

Email info@advorize.com and we will respond within 30 days. If you are unhappy with our response, you can complain to your local data protection authority — in India, the Data Protection Board established under the DPDP Act, 2023.

10. Security

We use access controls, encryption in transit, password managers and two-factor authentication on the accounts we hold, and we limit access to the people working on your project. No system is perfectly secure, and we will notify you and the relevant authority without undue delay if a breach affecting your personal data occurs.

11. Children

This site is not directed at children and we do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with information, email info@advorize.com and we will delete it.

12. Changes and contact

We may update this policy as the business or the law changes; the date at the top always reflects the current version.

Questions, requests or complaints: info@advorize.com, or call +91 87775 28883.