Privacy Policy

1. Introduction

Netling Digital Pvt. Ltd. ("Netling," "we," "us," or "our") is a company registered in India, committed to protecting the privacy and security of your personal data. This Privacy Policy describes how we collect, use, store, share, and protect personal information obtained from visitors and users ("you" or "your") of www.netling.digital and any related websites, applications, or services that link to this policy (collectively, the "Services").

By accessing or using our Services, you acknowledge that you have read, understood, and agree to the practices described in this policy. If you do not agree with this policy, please do not use our Services.

2. Data Controller

For the purposes of applicable data protection laws, the data controller responsible for your personal data is:

Entity: Netling Digital Pvt. Ltd.
Address: New Delhi, India
Email: privacy@netling.digital

3. Information We Collect

3.1 Information You Provide Directly

When you interact with our Services, you may provide us with:

Full name, email address, phone number, and job title
Company name and business details
Project requirements, briefs, and any files you upload
Account credentials (username and password) if you create an account
Payment and billing information when you engage our services
Any other information you voluntarily submit through forms, emails, or other communications

3.2 Information Collected Automatically

When you visit our website, we automatically collect certain technical information, including:

IP address and approximate geographic location
Browser type, version, and language preferences
Operating system and device type
Referring website URLs and exit pages
Pages viewed, time spent on pages, and navigation patterns
Date and time of access

3.3 Information from Third Parties

We may receive information about you from third-party sources such as business partners, marketing platforms, social media networks, and publicly available databases. This data may be combined with information we already hold to improve the relevance and personalisation of our Services.

4. Cookies and Tracking Technologies

4.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help us recognise your browser, remember your preferences, and understand how you use our site.

4.2 Types of Cookies We Use

Essential Cookies: Required for the website to function properly (e.g., session management, security). These cannot be disabled.
Analytics Cookies: Help us understand how visitors interact with our website by collecting anonymous usage data (e.g., Plausible Analytics). Note: Plausible is a privacy-focused analytics tool that does not use cookies or collect personal data, and is fully compliant with GDPR, CCPA, and PECR without requiring cookie consent.
Functional Cookies: Remember your preferences such as language, region, and display settings to enhance your experience.
Marketing Cookies: Used to deliver relevant advertisements and measure the effectiveness of marketing campaigns.

4.3 Web Beacons and Pixels

We may use web beacons (transparent pixel images) in emails and on our website to track email open rates, measure marketing effectiveness, and count page visits.

4.4 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling certain cookies may affect the functionality of our website. For more information, visit your browser's help documentation.

5. How We Use Your Information

We process your personal data for the following purposes:

Service Delivery: To provide, operate, and maintain our Services, including responding to inquiries and delivering requested products
Communication: To send you project updates, invoices, technical notices, security alerts, and support messages
Improvement: To analyse usage patterns and improve our website, products, and services
Marketing: To send promotional communications about our services, events, and industry insights (with your consent where required)
Legal Compliance: To comply with applicable laws, regulations, and legal processes
Security: To detect, prevent, and address fraud, abuse, security risks, and technical issues
Business Operations: To manage our business, including accounting, auditing, and internal reporting

6. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data based on one or more of the following legal grounds under Article 6 of the GDPR:

Consent: You have given clear consent for us to process your personal data for a specific purpose (e.g., subscribing to our newsletter)
Contract: Processing is necessary to perform a contract with you or to take pre-contractual steps at your request
Legitimate Interest: Processing is necessary for our legitimate business interests (e.g., improving our services, fraud prevention), provided these do not override your fundamental rights
Legal Obligation: Processing is necessary to comply with a legal or regulatory obligation

7. Sharing Your Information

We do not sell your personal data. We may share your information in the following circumstances:

Service Providers: With trusted third-party vendors who assist us in operating our business (e.g., hosting, analytics, email delivery, payment processing). These providers are contractually bound to protect your data and may only use it for the purposes we specify.
Legal Requirements: When required by law, regulation, court order, or governmental request
Protection of Rights: To protect the rights, property, or safety of Netling Digital, our users, or the public
Business Transfers: In connection with a merger, acquisition, reorganisation, or sale of assets, your data may be transferred as part of that transaction
With Your Consent: When you explicitly authorise us to share your information with a specific third party
Aggregated Data: We may share anonymised, aggregated data that cannot be used to identify you

8. International Data Transfers

As Netling Digital is based in India with clients worldwide, your personal data may be transferred to and processed in countries outside your country of residence, including India. These countries may have data protection laws that differ from those in your jurisdiction.

Where we transfer personal data outside the EEA or UK, we ensure appropriate safeguards are in place, including:

Standard Contractual Clauses (SCCs) approved by the European Commission
Adequacy decisions by relevant authorities
Other legally recognised transfer mechanisms

9. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Specific retention periods include:

Client project data: Retained for the duration of the business relationship plus 5 years for legal and contractual obligations
Marketing data: Retained until you withdraw consent or unsubscribe
Website analytics data: Retained for up to 26 months
Financial records: Retained for 7 years as required by applicable tax and accounting laws

When data is no longer required, it is securely deleted or anonymised.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

Encryption of data in transit (TLS/SSL) and at rest
Access controls and authentication mechanisms
Regular security assessments and vulnerability testing
Employee training on data protection and security best practices
Incident response procedures for data breaches

While we strive to protect your data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

11. Your Rights

Depending on your location and applicable laws, you may have the following rights regarding your personal data:

Right of Access: Request a copy of the personal data we hold about you
Right to Rectification: Request correction of inaccurate or incomplete data
Right to Erasure: Request deletion of your personal data ("right to be forgotten")
Right to Restrict Processing: Request that we limit how we use your data
Right to Data Portability: Request your data in a structured, commonly used, machine-readable format
Right to Object: Object to processing based on legitimate interests or for direct marketing purposes
Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing
Right Against Automated Decision-Making: Object to decisions made solely by automated means, including profiling, that produce legal or similarly significant effects

To exercise any of these rights, please contact us at privacy@netling.digital. We will respond to your request within 30 days in accordance with applicable law.

12. Indian Data Protection (DPDPA 2023)

In accordance with India's Digital Personal Data Protection Act, 2023 (DPDPA), we process personal data of Indian residents based on valid consent or for legitimate uses as permitted by law. If you are located in India, you have the following additional rights:

Right to access a summary of your personal data and processing activities
Right to correction and erasure of your personal data
Right to grievance redressal
Right to nominate another person to exercise your rights in case of death or incapacity

13. Children's Privacy

Our Services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@netling.digital and we will take steps to delete such information promptly.

14. Third-Party Services

Our website may contain links to third-party websites and services. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party services you interact with. Third-party services we may use include:

Plausible Analytics — for privacy-focused website usage analytics (no personal data collected, no cookies used)
Calendly — for scheduling meetings
Email service providers — for transactional and marketing communications
Cloud hosting providers — for website and application hosting

15. Confidentiality and NDA

We respect the intellectual property and confidential information of our clients. All project materials, designs, artwork, briefs, and documentation shared with us are treated as confidential and are used solely for the purpose of delivering the agreed services.

We will not reproduce, resell, distribute, or share your intellectual property or confidential materials with any third party under any circumstances, except:

With your prior written consent
When required by law, court order, or government directive
To resolve legal disputes

We will not contact your clients or customers without your prior written agreement.

16. Complaints

If you have concerns about how we handle your personal data, please contact us first at privacy@netling.digital. We take all complaints seriously and will work to resolve your concern promptly.

If you are not satisfied with our response, you have the right to lodge a complaint with the relevant supervisory authority:

India: Data Protection Board of India (once established under DPDPA 2023)
EU/EEA: Your local Data Protection Authority
UK: Information Commissioner's Office (ICO) — ico.org.uk

17. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. When we make material changes, we will update the "Last Updated" date at the bottom of this page and, where appropriate, notify you by email or through a prominent notice on our website.

We encourage you to review this policy periodically to stay informed about how we protect your information.

18. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: privacy@netling.digital
Company: Netling Digital Pvt. Ltd.
Address: New Delhi, India
Website: www.netling.digital