Privacy Policy

1. Who we are

Digitorium is a sole proprietorship of Neel Surti, based in Ahmedabad, Gujarat, India. We build websites and software, run Meta and Google ads, and do SEO, shoots and branding. For the personal data described here, we are the "Data Fiduciary" under the DPDP Act, which means we decide why and how it is used.

This policy covers digitorium.in and any time you contact us by WhatsApp, phone or email.

2. What we collect

What you give us

• Consultation form: your name, phone or WhatsApp number, email address, and the page of our site you sent it from.
• Messages: anything you send us on WhatsApp, by email or on a call, such as details about your business, your website or your ad account.
• Client work: if you hire us, the contact, billing and project details needed to do the work and invoice it. We may also get access to accounts you share with us, such as your ad account or website hosting.

What is collected automatically

• Server logs: our hosting provider records technical details of each visit, such as IP address, browser, device type, the page requested and the time. This is needed to run and protect the site.
• Browser storage: small settings kept in your own browser, such as your cookie choice. See section 8.
• Advertising and analytics cookies, only if you accept: Meta Pixel and Google Tag Manager can record which pages you visit and which of our ads brought you here. They do not load at all unless you click Accept.

What we do not collect

We do not ask for passwords, bank or card details, health information or any other sensitive personal data on this website. We do not take payments on this website.

3. Why we use it

• To reply to you and set up the free consultation call you asked for.
• To quote for, deliver and invoice the work you hire us for.
• To keep records that Indian tax and accounting law requires.
• If you accept cookies: to measure which of our ads and pages work, and to show our ads to people who visited our site.
• To keep the website secure and working.

We do not sell your personal data, and we do not use it for anything unrelated to these purposes.

4. Consent and legal basis

When you fill in our consultation form or click Accept on the cookie banner, you consent to the use of your data for the purposes stated there. When you send us your details yourself to get a quote or a service, we may also rely on the "legitimate uses" allowed by Section 7 of the DPDP Act.

You can withdraw your consent at any time, as easily as you gave it. For cookies, use Cookie settings at the bottom of any page. For anything else, email info@digitorium.in. Withdrawing consent does not affect what was done before you withdrew it.

5. Who we share it with

We only share personal data with the services we use to run our business, and only what each one needs:

We may also disclose personal data if an Indian law, court or government authority requires it. We never share your details with other businesses for their own marketing.

6. Where it is stored

Consultation form submissions are stored in a Supabase database hosted in Tokyo, Japan. Our website is served by Vercel from servers around the world. Meta and Google process data on their own servers, which may be outside India. The DPDP Act allows personal data to be processed outside India except in countries the Government of India restricts, and we will stop using any location that becomes restricted.

7. How long we keep it

• Consultation requests that do not become projects: up to 24 months after our last contact, then deleted.
• Client records and invoices: for as long as Indian tax and accounting law requires, then deleted.
• Server logs: for the short period our hosting provider keeps them.
• Cookies: for the periods listed in section 8, or until you clear them.

If you ask us to erase your data, we will do so unless the law requires us to keep it.

8. Cookies and similar technology

A cookie is a small file a website saves in your browser. Browser storage works in a similar way. We keep this to a minimum, and nothing for advertising or analytics is saved unless you click Accept. If you click Reject, the site works exactly the same.

You can change your choice at any time with Cookie settings at the bottom of every page. If you switch from Accept to Reject, we switch the Meta and Google tags off and delete their cookies from your browser.

9. Your rights

Under the DPDP Act you can ask us to:

• Tell you what personal data of yours we hold, what we do with it and who we have shared it with.
• Correct, complete or update it.
• Erase it, unless the law requires us to keep it.
• Withdraw consent you gave earlier.
• Nominate someone to exercise these rights for you if you die or become unable to.
• Resolve a grievance about how we handled your data.

Email info@digitorium.in or WhatsApp +91 786 198 2524 from the email address or number you gave us, so we can confirm it is you. We will reply within 30 days. There is no charge.

10. Grievance Officer and complaints

As required by the Information Technology Act, 2000 and its rules, and by the DPDP Act, questions and complaints about your personal data go to our Grievance Officer:

We will resolve your complaint within one month of receiving it. If you are not satisfied with our answer, you can complain to the Data Protection Board of India under the DPDP Act.

11. Security

We follow reasonable security practices as required by Section 43A of the Information Technology Act, 2000. The whole site runs over an encrypted HTTPS connection. The consultation form can only add new entries to our database: nobody visiting the site can read, change or delete them. Access to our accounts is limited to the people who need it. No system is perfectly secure, and if a breach affects your personal data, we will tell you and the Data Protection Board of India as the DPDP Act requires.

12. Children

Our services are for businesses and adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has sent us their details, email us and we will delete them.

13. Changes to this policy

If we change how we handle personal data, we will update this page and the date at the top. If the change is significant, for example a new purpose or a new kind of data, we will ask for your consent again where the law requires it.