This Privacy Policy explains how Zylous Digital collects, uses, shares and protects personal data when you visit zylousdigital.com, submit a form, request a call back, comment on our blog or otherwise interact with us. We process personal data in accordance with the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and other applicable laws of India.
1. Who we are
Zylous Digital is a digital marketing agency operated as a sole proprietorship by Naveen Sehgal in India ("Zylous Digital", "we", "us" or "our"). For the purposes of Indian data protection law, Zylous Digital is the Data Fiduciary responsible for the personal data described in this policy.
2. Personal data we collect
Information you give us
- Enquiry and contact forms: your name, email address, phone number, organisation, the service you are interested in and the details of your enquiry.
- Call-back requests: your name and phone number.
- Blog comments: your name, email address and comment. Your email address is never published.
- Communications: anything you share with us by email, phone or messaging while discussing or receiving our services.
Information collected automatically
- Usage and device data: pages visited, time spent, links clicked, referring website, approximate location (city or country), browser, device type and IP address.
- Cookies and similar technologies: as described in section 5.
We do not ask for sensitive personal data such as financial information, passwords, health data or biometric data through this website. Please do not submit such information in our forms.
3. How we use your personal data
- To respond to your enquiry, call you back and discuss your requirements.
- To prepare proposals and, where you become a client, to deliver our services.
- To publish and moderate comments on our blog and reply to them, including by email.
- To understand how our website is used and improve its content, design and performance.
- To measure the effectiveness of our own marketing, where you have consented to the relevant cookies.
- To keep our website secure and prevent spam, fraud and misuse.
- To comply with legal obligations and respond to lawful requests from authorities.
We do not sell your personal data, and we do not use it for purposes unrelated to those listed above without asking you first.
4. Consent and legal basis
We process your personal data on the basis of the consent you give when you submit a form, request a call back, post a comment or accept optional cookies, and for legitimate uses permitted under applicable law, such as responding to a request you have made or complying with legal obligations. You may withdraw your consent at any time by contacting us (see section 13). Withdrawal does not affect processing carried out before it, but we may no longer be able to respond to your enquiry or provide a service.
5. Cookies and tracking technologies
Our website uses cookies and similar technologies:
- Essential cookies that are needed for the website to function and remain secure.
- Analytics cookies, such as Google Analytics 4 and Microsoft Clarity, that help us understand how visitors use the website.
- Marketing cookies and pixels, such as Google Ads and the Meta Pixel, that help us measure and improve our own advertising.
Tags are managed through Google Tag Manager. Optional analytics and marketing cookies are only used with your consent, which you can give or withdraw through the cookie banner or your browser settings. Blocking some cookies may affect how the website works.
6. How we share personal data
We share personal data only where necessary and with appropriate safeguards:
- Service providers who help us operate the website and our business, such as website hosting and security (for example Cloudflare), email, analytics and customer communication tools. They may process data only on our instructions.
- Advertising and analytics platforms such as Google and Meta, where you have consented to the relevant cookies.
- Authorities where required by law, court order or to protect our rights, users or the public.
- A successor if our business is transferred, in which case this policy will continue to apply to your data.
7. Transfers outside India
Some of our service providers store or process data outside India. Where this happens, we transfer data only to countries and in ways permitted under Indian law, and we choose providers that apply appropriate security measures.
8. How we protect your data
We use reasonable security practices and procedures, including encrypted connections (HTTPS), access controls, limited access on a need-to-know basis and trusted service providers. No method of transmission or storage is completely secure, but we work to protect your data and will notify you and the relevant authorities of a personal data breach as required by law.
9. How long we keep your data
We keep personal data only as long as needed for the purposes described in this policy. Enquiries that do not lead to an engagement are normally deleted within 24 months. Client records are kept for as long as required for our services and for accounting, tax and legal obligations. Published blog comments remain until you ask us to remove them or we remove them during moderation.
10. Your rights
Subject to applicable law, you have the right to:
- Access a summary of the personal data we hold about you and how it is processed.
- Correct, complete or update inaccurate or incomplete personal data.
- Request erasure of personal data that is no longer needed or where you withdraw consent.
- Withdraw consent at any time.
- Nominate another person to exercise your rights in the event of death or incapacity.
- Have your grievances addressed by our Grievance Officer, and approach the Data Protection Board of India if you are not satisfied.
To exercise any of these rights, contact us using the details in section 13. We may need to verify your identity before acting on a request.
11. Children
Our website and services are intended for businesses and adults. We do not knowingly collect personal data from anyone under 18 years of age. If you believe a child has provided us with personal data, please contact us and we will delete it.
12. Third-party websites and changes to this policy
Our website may link to other websites, which have their own privacy policies. We are not responsible for their content or practices. We may update this Privacy Policy from time to time; the "Last updated" date at the top shows when it was last revised, and significant changes will be highlighted on this page.
13. Grievance Officer and contact
If you have any questions, requests or complaints about this Privacy Policy or how we handle your personal data, please contact our Grievance Officer:
We will acknowledge your grievance and aim to resolve it within the timelines required under applicable law.