Privacy Policy

This Privacy Policy ("Policy") governs the collection, processing, storage, and protection of personal data by Divyash Digital ("Agency", "We", "Us", or "Our"). We operate as a Data Fiduciary as defined under the Digital Personal Data Protection (DPDP) Act, 2023 of India.

This Policy applies to all visitors, clients, and prospective clients ("Data Principal", "You", or "Your") accessing our website https://divyashdigital.co.in and engaging our digital marketing, brand design, content strategy, and advertising management services.

We adhere to the principle of data minimization and collect only the personal data strictly required for fulfilling service obligations and financial transactions:

• Identity & Contact Data: Full name, primary email address, mobile/telephone number, and business entity name.
• Financial & Billing Data: Bank account numbers, IFSC codes, UPI handles, or payment transaction IDs provided for raising invoices, processing direct bank transfers, or handling payment reconciliations.
• Technical & Usage Data: IP address, device identifier, browser type, and page access logs collected automatically via technical security logs when navigating our site.

We process Your personal data solely for explicit, lawful purposes under Section 4 and Section 7 of the DPDP Act, 2023:

• Service Execution: Communicating project briefs, campaign deliverables, performance reports, and client account updates.
• Financial Operations: Issuing tax invoices, verifying received client payments, processing refunds, and managing accounting ledgers.
• Statutory & Legal Compliance: Fulfilling tax, reporting, and accounting mandates under Indian law (e.g., Goods and Services Tax, Income Tax Act).
• Legitimate Uses: Responding to voluntary requests or inquiries submitted directly by You through our contact channels.

• Notice & Consent: Your personal data is processed based on Your explicit, free, informed, and unambiguous consent obtained at the point of collection via form submissions or agreement execution.
• Right to Withdraw Consent: You have the right to withdraw Your consent at any time. Withdrawal of consent does not affect the legality of processing carried out prior to such withdrawal. To withdraw consent, send a written request to our designated Grievance Officer. Please note that withdrawing consent may limit our ability to continue providing marketing services or maintaining client account operations.

We do not sell, rent, or trade personal data to third parties for marketing or commercial gains. Data is disclosed only to the following entities on a strict need-to-know basis:

• Financial Institutions & Banking Partners: To facilitate and confirm direct bank account settlements and invoice clearing.
• Data Processors & Operational Vendors: Cloud hosting providers, communication platforms, and accounting tools acting strictly under contractual obligations aligned with DPDP security requirements.
• Legal & Regulatory Authorities: When required under Indian statutory law, court orders, or government directives.

In accordance with Section 8 of the DPDP Act, 2023, we implement reasonable technical and organizational safeguards — including end-to-end transport security, access control privileges, and data encryption — to prevent unauthorized access, alteration, or disclosure.

In the event of a personal data breach affecting Your information, the Agency will promptly notify the Data Protection Board of India (DPBI) and all impacted Data Principals as prescribed under the law.

Personal data is retained only for as long as necessary to fulfill the operational purposes for which it was collected or to comply with statutory accounting and tax record-retention requirements under Indian law. Once the processing purpose is completed or upon valid consent withdrawal, your personal data will be permanently erased or anonymized.

Under the DPDP Act, 2023, You hold the following enforceable rights:

• Right to Access Information: Request a summary of personal data held by us, along with identities of third parties with whom it has been shared.
• Right to Correction & Erasure: Request updating, correcting, or deleting incomplete or inaccurate personal data.
• Right to Grievance Redressal: Access an efficient, transparent mechanism to address any concerns regarding the handling of Your personal data.
• Right to Nominate: Nominate any other individual to exercise Your statutory rights in the event of death or medical incapacity.

If You have questions, wish to exercise Your statutory rights, or wish to register a formal complaint regarding Your data privacy, please reach out to our designated Data Protection / Grievance Officer:

• Attn: Yash Verma
• Agency Name: Divyash Digital
• By email: info@divyashdigital.co.in
• By visiting this page on our website: Contact Us
• By phone: +91 88103 76026, 92664 52049
• Registered Address: New Delhi, India

We will acknowledge receipt of Your grievance within 24 hours and resolve all valid requests within the timeline mandated under the DPDP Rules. If you remain dissatisfied with our resolution, you retain the right to escalate your complaint to the Data Protection Board of India (DPBI).