Privacy Policy

1. Who we are & grievance contact

ADSage.in is owned and operated by Dave Groups, Mumbai, India. For the purposes of the DPDP Act, 2023, Dave Groups acts as the Data Fiduciary for personal data collected through this website and our services. We have appointed a Grievance Officer responsible for addressing privacy questions, requests and complaints.

Grievance & Privacy contact: The Grievance Officer, Dave Groups (ADSage.in)
Email: privacy desk
Location: Mumbai, India

We acknowledge grievances within 72 hours and aim to resolve them within the timelines prescribed under the DPDP Act and the IT Act rules.

2. Personal data we collect

(a) Data you provide directly, when you contact us, request a quote, subscribe to communications, sign a contract or use our services:

Identity: name, business name, designation
Contact: email address, phone number
Project information: description of your enquiry, brand assets, content you share with us
Commercial: payment details (processed via our payment gateway and not stored on our servers), GST details where applicable, billing information
Consent records: timestamp and choice for each consent you give us

(b) Data collected automatically, when you visit the website:

Technical: IP address (anonymised after 30 days), browser type, device type, operating system
Usage: pages viewed, time on page, referrer URL, search terms used to find us
Cookies and similar technologies (see our Cookie Policy Refund & Cancellation Shipping & Delivery)

We do not knowingly collect government identifiers such as Aadhaar or PAN through this website, nor health, biometric, financial account credentials, or any other categories you are not asked to provide.

3. Why we collect it

Under the DPDP Act, we process personal data only for lawful, specified purposes notified to you at or before collection. We use your personal data only to:

Respond to enquiries and provide quotes
Deliver the services you have engaged us for
Send communications you have asked for (project updates, newsletter, service announcements)
Process payments and manage accounts
Improve our website, services and customer experience (aggregated / de-identified where possible)
Meet legal obligations (tax, GST, accounting, fraud prevention, lawful orders)
Establish, exercise or defend legal claims and enforce contracts

We will not use your personal data for any other purpose without first obtaining your consent.

Consent under the DPDP Act is free, specific, informed, unconditional and unambiguous, given by a clear affirmative action. Before or at the time of seeking consent, we provide an itemised notice describing the personal data, the purpose, how to exercise your rights and how to complain to the Data Protection Board of India.

Bundled consent is never used. Each purpose is requested separately. You may consent to one purpose without consenting to another.
Withdrawal: you may withdraw consent at any time, as easily as it was given, by emailing our privacy desk or using the unsubscribe link in any marketing email. Withdrawal applies prospectively; it does not invalidate prior lawful processing.
Where we process limited data for a legitimate use permitted under the Act (for example, responding to an enquiry you initiated), we rely on that basis and tell you so.

5. Limiting collection, use & disclosure

We practise data minimisation: we collect only what is necessary for the notified purpose. We do not use or disclose personal data for any purpose other than the one for which it was collected, except with your consent or as required by law.

We do not sell personal data.

We engage vetted service providers ("Data Processors") who process personal data only on our documented instructions under a written contract that includes confidentiality, security and onward-transfer restrictions. Categories include cloud hosting, email delivery, analytics, and payment processing.

7. Cross-border data transfers

Some of our processors may store or process data outside India. Where this happens, transfers are made in accordance with the DPDP Act and any restrictions notified by the Central Government, and we put appropriate contractual safeguards in place. For EU clients, transfers rely on GDPR-compliant mechanisms such as Standard Contractual Clauses.

8. Retention periods

We retain personal data only as long as necessary for the purpose it was collected, or as required by Indian tax, company and accounting law. When the purpose is served and no legal obligation requires retention, we erase the data or anonymise it.

9. Security safeguards

We implement reasonable security safeguards as required under the DPDP Act and the IT Act, including access controls, encryption in transit, least-privilege access, and regular review. No method of transmission or storage is perfectly secure, but we work to protect your data against unauthorised access, disclosure, alteration and loss.

10. Automated decision-making & AI

We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing without human oversight. Where we use AI tools to support our work, a person remains accountable for the outcome.

11. Your rights as a Data Principal

Under the DPDP Act, you have the right to:

Access a summary of the personal data we process about you and the processing activities
Correction, completion and updating of inaccurate or incomplete data
Erasure of personal data that is no longer needed for the purpose
Grievance redressal through our Grievance Officer
Nominate another individual to exercise your rights in the event of death or incapacity

To exercise any right, contact our privacy desk. We verify identity before acting and respond within the timelines prescribed by law.

12. Data breach response

In the event of a personal data breach, we will notify the Data Protection Board of India and affected Data Principals in the manner and within the timelines prescribed under the DPDP Act and its rules.

13. Children's data

Our services are intended for businesses and adults. We do not knowingly process the personal data of children (individuals under 18) without verifiable parental or guardian consent, and we do not undertake tracking, behavioural monitoring or targeted advertising directed at children, consistent with the DPDP Act.

14. Marketing communications

We send marketing emails (newsletters, offers, service updates) only to people who have given express consent. Every marketing message includes a clear, one-click unsubscribe. We honour unsubscribe requests promptly. Transactional messages relating to a project you have engaged us for are sent on the basis of our service relationship.

15. Changes to this policy

We may update this policy to reflect changes in law or our practices. Material changes will be highlighted on this page with a revised "Last updated" date. Continued use of the website after an update constitutes acknowledgement of the revised policy.

16. Complaints & the Data Protection Board

If you are not satisfied with how we have handled your personal data or a request, please contact our Grievance Officer first so we can put it right. You also have the right to lodge a complaint with the Data Protection Board of India established under the DPDP Act, 2023.

17. International (GDPR) clients

If you are located in the European Economic Area or the United Kingdom, applicable data protection law (including the EU GDPR) may give you additional rights such as data portability and the right to object to certain processing. We will honour those rights where they apply. Our lawful bases are typically consent, performance of a contract, and our legitimate interests in running and improving our business. To exercise these rights, contact our privacy desk.