The short version
- We collect the details you give us (name, email, phone/WhatsApp, business info) and standard analytics/advertising data when you use our website.
- We use it to respond to you, deliver our services, improve our website, and run our own marketing — never to sell your data.
- We use Google (Analytics, Ads), Meta (Pixel, Conversions API), a CRM, an email tool, and a payment processor. Each is disclosed below, with opt-outs.
- You can ask us to access, correct, or delete your data, and you can withdraw consent at any time — details in Section 14.
- Questions or requests: [EMAIL — hello@getpromotely.com]
The full policy below explains everything in detail.
1. Who we are
Promotely Digital (“Promotely”, “we”, “us”, “our”) is a digital marketing agency with its principle place of business at G-45,Agrasen tower, Central spine, Vidhyadhar Nagar, Jaipur, Rajasthan, India. Our website address is: http://getpromotely.com.
2. What this policy covers — and our two roles
Because we are a marketing agency, we handle personal data in two distinct ways:
(a) Data we collect for ourselves. This includes data about our website visitors, leads, newsletter subscribers, and clients. This policy governs that data, and we are the Data Fiduciary/Controller for it.
(b) Data we process on behalf of our clients. When we run advertising campaigns, manage Google Business Profiles, operate WhatsApp automations, or handle lead lists for a client, the personal data of that client’s customers belongs to the client. For that data, we act only as a Data Processor, on the client’s instructions and under our service agreement. The client’s own privacy policy governs that data. If you are a customer of one of our clients and have a privacy question, please contact that business directly; we will assist them in responding. We make data processing terms available to clients on request.
3. Personal data we collect
Information you give us directly:
- Identity and contact details: name, business name, email address, phone/WhatsApp number, city.
- Enquiry details: the service you’re interested in, approximate budget, and anything you write in our forms, audit requests, or messages.
- Billing details when you purchase services: billing name, address, GSTIN (for businesses), and transaction references. We do not receive or store full card numbers (see Section 8).
- Communication content: emails, WhatsApp messages, and call notes from our conversations with you.
Information collected automatically when you use our website:
- Device and technical data: IP address, browser type, operating system, device type, screen size.
- Usage data: pages visited, time on page, clicks, scroll depth, referral source.
- Advertising identifiers: cookie IDs and ad-click identifiers (such as Google’s
gclidand Meta’sfbclid) when you arrive from one of our ads. - Approximate (city-level) location derived from your IP address.
Information from third parties:
- Campaign data from advertising platforms (e.g., which ad or keyword brought you to us).
- Payment confirmations from our payment processor.
- Publicly available business information (e.g., your company website or Google Business Profile) when preparing a proposal you requested.
We do not seek sensitive personal data (such as health, religious, or financial-account information). Please do not send it to us through our forms or chat.
4. Why we use your data (purposes)
We use personal data for the following itemized purposes:
- Responding to you — answering enquiries, preparing audits, quotes, and proposals you request.
- Delivering our services — managing your account, campaigns, deliverables, and support during an engagement.
- Billing and records — invoicing, payment processing, GST and tax compliance, and maintaining business records.
- Service communications — updates about your project, reports, and administrative messages.
- Marketing communications — our newsletter, offers, and useful content, only with your consent, and with an unsubscribe option in every message.
- Website analytics and improvement — understanding how visitors use our site so we can improve content and performance.
- Advertising and remarketing — measuring our ad campaigns and showing relevant ads to people who visited our site, subject to the consent choices described in Section 6.
- Legal and safety — complying with applicable law, preventing fraud or misuse, and enforcing our terms.
5. Legal bases for processing
| Purpose | DPDP Act basis (India) | GDPR basis (EEA/UK visitors) |
|---|---|---|
| Responding to enquiries you send us | Consent / voluntary provision for a specified purpose | Legitimate interests / steps prior to a contract |
| Delivering contracted services | Consent / voluntary provision | Performance of a contract |
| Billing, tax, and statutory records | Compliance with law | Legal obligation |
| Newsletter and marketing messages | Consent | Consent |
| Analytics and advertising cookies | Consent | Consent |
| Fraud prevention and enforcing terms | Legitimate uses under the DPDP Act | Legitimate interests |
You may withdraw consent at any time (Section 14); withdrawal is as easy as giving it and does not affect processing already carried out.
6. Cookies, analytics, and advertising technologies
We use cookies and similar technologies. Non-essential cookies (analytics and advertising) are set only after you consent via our cookie banner, where you can also change or withdraw your choices at any time. For visitors from the EEA/UK, our Google tags honour your choices through Google Consent Mode.
Tools we use:
- Google Analytics 4 (Google LLC) — helps us understand website traffic and usage. Learn how Google uses data from sites that use its services at policies.google.com/technologies/partner-sites. You can opt out with the Google Analytics opt-out browser add-on.
- Google Tag Manager — loads and manages our measurement tags; it does not itself collect personal data beyond what is needed to function.
- Google Ads conversion tracking and remarketing — measures whether our ads lead to enquiries and allows us to show ads to previous site visitors across Google’s network. With your consent, we may also use enhanced conversions, which sends a privacy-protective hashed version of data you submit in our forms (such as email or phone) to Google to improve measurement accuracy. Manage your Google ad preferences at adssettings.google.com.
- Meta Pixel and Conversions API (Meta Platforms) — measures our Facebook/Instagram ad performance and supports remarketing. The Conversions API sends event data from our server, and with your consent we may use advanced matching, which shares hashed identifiers (such as email or phone) with Meta to match conversions. See Meta’s privacy policy at facebook.com/privacy/policy and manage your ad preferences at facebook.com/adpreferences.
Common cookies on our site:
| Cookie | Set by | Purpose | Typical duration |
|---|---|---|---|
_ga, _ga_* | Google Analytics | Distinguishes visitors and sessions | Up to 2 years |
_gcl_au | Google Ads | Links ad clicks to conversions | ~90 days |
_fbp | Meta Pixel | Identifies browsers for ad measurement | ~90 days |
_fbc | Meta Pixel | Stores the click ID when you arrive from a Meta ad | ~90 days |
| Consent cookie | Our cookie banner | Remembers your cookie choices | 6–12 months |
Other opt-outs: youradchoices.com, youronlinechoices.eu, and your browser’s cookie controls.
7. WhatsApp communications
When you click a WhatsApp button on our website or ads, you are taken to WhatsApp (a Meta service), and your phone number, profile name, and messages are shared with us through WhatsApp. Your use of WhatsApp is governed by WhatsApp’s privacy policy. We use WhatsApp Business tools to respond to enquiries and serve clients. We will only send you promotional messages on WhatsApp with your consent, and you can opt out at any time by replying “STOP” or telling us in any message.
8. Payments
Payments on our website are processed by [PAYMENT PROCESSOR — e.g., Razorpay / Stripe / PayPal]. Your card, UPI, or bank details are collected and processed directly by the processor under its own privacy policy and security standards; we receive only a payment confirmation, transaction reference, and the billing details needed for invoicing and GST compliance. We never store full card numbers.
9. CRM and email marketing
- CRM: We store lead and client records (contact details, enquiry history, notes, engagement status) in [CRM NAME — e.g., Zoho CRM / HubSpot] to manage relationships and service delivery.
- Email marketing: Our newsletter and marketing emails are sent through [EMAIL TOOL — e.g., Brevo / Mailchimp], which tracks delivery, opens, and clicks so we can measure and improve our emails. Every marketing email contains an unsubscribe link, and unsubscribing takes effect promptly. Service and billing emails are not affected by marketing unsubscribes.
10. Who we share data with
We do not sell personal data, and we do not share it with third parties for their own advertising. We share data only with:
- Service providers (processors) who help us run our business: our website host [HOSTING PROVIDER], Google (Analytics, Tag Manager, Ads, Workspace email), Meta (Pixel/Conversions API), our CRM and email tools (Section 9), our payment processor (Section 8), and professional advisers (accountant/CA) — each bound to use the data only to provide their service to us.
- Advertising platforms acting independently. When Google or Meta process measurement data through their tags on our site, they also act as independent data fiduciaries/controllers for certain purposes under their own policies, linked in Section 6.
- Legal and safety disclosures — where required by law, regulation, court order, or to protect rights, safety, or prevent fraud.
- Business transfers — if Promotely’s business is reorganised, sold, or merged, data may transfer to the successor under the same protections, and we will inform you of any material change.
11. International data transfers
Some of our providers (including Google, Meta, and our CRM/email tools) store data on servers outside India, including in the United States and the European Union.
- Under the DPDP Act, transfers of personal data outside India are permitted except to countries restricted by the Central Government; we comply with any such restrictions and applicable conditions.
- For EEA/UK individuals, where data is transferred outside the EEA/UK we rely on appropriate safeguards such as adequacy decisions (including the EU–US Data Privacy Framework, where the provider is certified) and Standard Contractual Clauses.
12. How long we keep data
We keep personal data only as long as needed for the purposes above, then delete or anonymise it:
- Enquiries and leads that don’t become clients: up to 24 months after our last interaction, unless you ask us to delete sooner.
- Client records and contracts: for the duration of the engagement, then up to 8 years as required by Indian tax and GST record-keeping laws.
- Newsletter data: until you unsubscribe or ask us to delete it.
- Analytics and advertising data: per the durations in Section 6 and our analytics retention settings.
13. Security and breach notification
We protect personal data using HTTPS/TLS encryption on our website, access controls and least-privilege access to our tools, reputable providers with strong security practices, and regular software updates. No method of transmission or storage is 100% secure, but if a personal data breach occurs, we will notify the Data Protection Board of India and affected individuals as required under the DPDP Act, and EEA/UK authorities and individuals where the GDPR requires it.
14. Your rights
If you are in India (DPDP Act), you have the right to:
- Access — obtain a summary of your personal data we hold and how we’ve processed it.
- Correction and erasure — have inaccurate or incomplete data corrected, updated, or erased.
- Grievance redressal — raise a complaint with us and receive a timely response (Section 17).
- Nominate — appoint another person to exercise your rights if you are unable to.
- Withdraw consent — at any time, as easily as you gave it.
If you are not satisfied with our response, you may complain to the Data Protection Board of India.
If you are in the EEA or UK (GDPR/UK GDPR), you additionally have the right to: restriction of processing, data portability, objection to processing (including an absolute right to object to direct marketing), and the right to lodge a complaint with your local supervisory authority.
Everyone: To exercise any right, email [EMAIL] with your request. We may need to verify your identity before acting. We will respond within the timelines required by applicable law, and we will never penalise you for exercising your rights. You may also request a Hindi summary of this notice.
15. Children
Our website and services are intended for businesses and individuals aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us data, contact us at [EMAIL] and we will delete it.
16. Third-party links
Our website links to external sites (for example, client websites, tools, or social platforms). Their privacy practices are their own, and we encourage you to read their policies.
17. Grievance and contact details
Under the DPDP Act, you can reach the person responsible for answering questions about your personal data:
Grievance Contact: Promotely Digital, Proprietor Email: hello@getpromotely.com · Phone: +91 9521894282 Address: G-45, Agrasen tower, central spine, Vidhyadhar Nagar, Jaipur, Rajasthan, India
We aim to acknowledge grievances within 72 hours and resolve them within the timelines prescribed under applicable law.
18. Changes to this policy
We may update this policy as our services, tools, or the law change. The “Last updated” date at the top reflects the latest version, and material changes will be highlighted on this page or notified to active clients by email.
19. Governing law
This policy is governed by the laws of India, and any disputes are subject to the jurisdiction of the courts at Jaipur, Rajasthan.