Privacy Policy

1.Introduction

Desire Planet Media House ("we", "us", "our") is a digital growth and technology partner based in New Delhi, India. We provide services including search engine optimisation (SEO), Google and Meta advertising, social media marketing, branding, website design and development, CRM implementation, WhatsApp and workflow automation, AI-assisted tools and chatbots, analytics, and custom software (the "Services").

This Privacy Policy explains how we collect, use, disclose and protect personal data when you visit dplanetmediahouse.com (the "Website"), contact us, or use our Services. It is written in line with the Information Technology Act, 2000 and the rules made under it, and the Digital Personal Data Protection Act, 2023 (the "DPDP Act") to the extent in force. Where relevant to overseas visitors, it also reflects other applicable laws such as the GDPR.

By using the Website or sharing your data with us, you acknowledge this Policy. Where the law requires your consent, we will ask for it separately.

2.Who we are and our role

• As Data Fiduciary / Controller: for data collected through our Website, enquiries, and our own marketing and recruitment, we decide why and how your data is processed.
• As Data Processor: when we handle personal data for our clients (for example, customer lists in a CRM we build, leads captured by a client's landing page, or audiences in a client's ad account), we act on the client's instructions. The client is the Data Fiduciary and is responsible for having a lawful basis and giving notices. If you are such an individual, please contact the relevant client first.

3.Personal data we collect

a) Data you provide

• Name, email address, phone number, business name, designation and location
• Details you share through contact forms, "Start a Project" or "Talk to an Expert" requests, roadmap requests and newsletter sign-ups
• Messages sent via WhatsApp, email, phone calls or social media
• Business information such as website URLs, budgets, goals and account access details you choose to share for a project
• Billing details such as billing name, address and GSTIN (payments are handled by a payment gateway or bank; we do not store full card details or UPI PINs)
• CVs and details you submit when applying for a job or internship

b) Data collected automatically

• IP address, browser type, device and operating system, screen size, and language
• Pages visited, time spent, clicks, referring site or campaign, and approximate location
• Information from cookies and similar technologies (see our Cookie Policy)

c) Data from other sources

• Analytics and advertising platforms (for example Google and Meta) and lead-form integrations
• Referrals from clients, partners and public business sources

We do not intentionally collect sensitive personal data (such as health information, financial account passwords or government ID numbers) through the Website. Please do not send it to us unless a specific project agreement requires it.

4.How and why we use your data

Legal basis. Under the DPDP Act we process personal data based on your consent or for "certain legitimate uses" permitted by law (for example, where you voluntarily provide data for a purpose you have indicated, or to comply with legal obligations). Where the GDPR applies, we rely on consent, contract, legitimate interests or legal obligation, as appropriate.

5.WhatsApp, calls, SMS and email

If you contact us or submit your number, you agree that we may reply and follow up by phone, WhatsApp, SMS and email about your enquiry.

We send promotional messages only where permitted by law (including TRAI regulations and DND preferences). You can stop them at any time by replying "STOP", using the unsubscribe link, or contacting us. WhatsApp is operated by Meta and is subject to its own privacy terms.

6.Who we share data with

We do not sell your personal data. We share it only as needed with:

• Service providers: web hosting and domain providers, CRM and email tools, project management and communication tools, analytics, cloud storage, payment and accounting providers, and freelancers or contractors under confidentiality obligations
• Advertising and analytics platforms: such as Google, Meta, LinkedIn and YouTube, where you have allowed relevant cookies or where you interact with our ads
• AI tools: where we use AI-assisted tools for drafting, analysis or automation, we avoid entering confidential personal data into tools that are not suitably protected
• Clients and partners: where needed to deliver a campaign or project you are involved in
• Professional advisers and authorities: lawyers, auditors, and government or law enforcement bodies where legally required
• Successors: in a merger, acquisition or restructuring, subject to this Policy

7.Cookies and similar technologies

We use cookies, pixels and tags to run the Website, understand traffic and measure marketing. You can manage your choices through our cookie banner or your browser settings. Details are in our Cookie Policy.

8.International transfers

Some of our tools and providers (for example Google, Meta, and cloud and email platforms) process data on servers outside India. We transfer data only to the extent permitted by applicable law and use contractual and technical safeguards where appropriate.

9.How long we keep data

• Enquiries and leads: up to 24 months from last interaction, unless you become a client
• Client and billing records: as required by Indian tax and company laws (generally 8 years)
• Job applications: up to 12 months
• Analytics data: as per the retention period configured in the tool (generally 14–26 months)

When data is no longer needed, we delete or anonymise it, unless the law requires us to keep it.

10.Security

We use reasonable security safeguards, including access controls, encrypted connections (HTTPS), password protection, and confidentiality commitments from staff and vendors.

No online system is completely secure. If a personal data breach occurs, we will notify affected individuals and authorities as required by law.

11.Your rights

Subject to applicable law, you may:

• Ask for a summary of the personal data we process about you and the parties we share it with
• Request correction, completion or updating of your data
• Request erasure of data that is no longer necessary or for which you have withdrawn consent
• Withdraw consent at any time (this does not affect processing already done)
• Nominate another person to exercise your rights in case of death or incapacity
• Use our grievance redressal process, and complain to the Data Protection Board of India if the matter is unresolved (once operational)
• If the GDPR applies: object to or restrict processing, request portability, and complain to your local supervisory authority

To exercise these rights, email info@dplanetmediahouse.com. We may need to verify your identity, and we aim to respond within 30 days.

12.Children

Our Services are for businesses and adults. We do not knowingly collect personal data of anyone under 18 without verifiable parental consent as required by law. If you believe a child has provided us with data, contact us and we will delete it.

13.Third-party websites

Our Website links to third-party sites and platforms, including our pages on Facebook, Threads, YouTube and WhatsApp. We are not responsible for their content or privacy practices.

14.Grievance Officer

We will acknowledge complaints within 48 hours and aim to resolve them within 15 days or the period required by law.

15.Changes to this Policy

We may update this Policy from time to time. The "Last updated" date at the top of this page shows the latest version. Significant changes will be highlighted on the Website or communicated to you where required.

16.Contact