Privacy Policy & Data Notice

1. Data Fiduciary & Identity

This privacy policy constitutes an itemised notice issued by Digital Footprint Private Limited (operating under the brand Digital Footprint), having its registered office at 12th Main Road, HAL 2nd Stage, Indiranagar, Bengaluru, Karnataka 560038, India (CIN: U72900KA2026PTC123456, GSTIN: 29AAAAA0000A1Z5).

Under the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000, Digital Footprint Private Limited operates as the "Data Fiduciary" for all digital personal data collected directly through this website (https://digitalfootprint.agency) and associated diagnostic evaluation forms.

2. Itemised Personal Data Collection

In accordance with the DPDP principle of purpose limitation and data minimisation, we collect only data necessary to fulfill specified commercial requests:

3. Sensitive Data & Children's Privacy

No Sensitive Personal Data (SPDI): We do not collect, request, or process sensitive personal data such as financial passwords, biometric identifiers, health records, sexual orientation, or payment card numbers through this marketing website.

Protection of Children: In strict adherence to Section 9 of the DPDP Act 2023, our website and commercial services are intended exclusively for adult business operators and professionals aged 18 years and above. We do not knowingly collect personal data from minors. If you believe a minor has submitted personal information, please alert our Grievance Officer immediately for rapid erasure.

4. Specified Purposes of Processing

Your data is processed strictly for the following lawful purposes:

• Evaluating your business visibility across Google Search, Maps, review platforms, and generative AI search engines.
• Transmitting the bespoke diagnostic Footprint Audit report to your nominated email address or WhatsApp account.
• Scheduling one-on-one strategy walkthroughs upon your explicit request.
• Fulfilling statutory tax, billing, and accounting obligations under Karnataka and Indian legislation.
• Investigating technical abuse, Denial of Service (DoS) attacks, or unauthorised system intrusion attempts.

We strictly prohibit and reject the selling, leasing, or brokering of client contact records to third-party marketing lists.

5. Data Processors & Cross-Border Transfers

To maintain high reliability, Digital Footprint Private Limited engages vetted Data Processors under strict contractual non-disclosure and data protection terms:

Cross-Border Transfer Disclosure: Where technical processors maintain cloud infrastructure outside the territory of India, such transfers comply fully with Section 16 of the DPDP Act 2023 and the absence of any central government notification restricting such jurisdictions.

6. Security Safeguards & Breach Protocol

We implement industry-grade technical and organizational safeguards including end-to-end TLS 1.3 encryption in transit, AES-256 encryption at rest, least-privilege role-based access control (RBAC), and automated DDoS mitigation.

Breach Notification Protocol: In the unlikely event of a personal data breach impacting your confidentiality or integrity, Digital Footprint Private Limited will promptly notify the Data Protection Board of India (DPBI) and affected individuals within statutory timeframes, accompanied by remedial guidance.

7. Retention & Systematic Deletion

Personal data is retained only for the duration necessary to satisfy the purpose for which it was gathered, or to comply with statutory accounting requirements. Upon expiry of the retention schedule or upon receipt of a valid erasure request, database records are cryptographically purged or permanently de-identified.

8. Your Rights Under the DPDP Act, 2023

As a Data Principal under Indian law, you possess enforceable rights which you can exercise free of charge via our dedicated Data Rights Portal:

• Right to Access Summary: Receive a clear summary of the personal data we hold and the identities of data processors with whom it has been shared.
• Right to Correction & Updating: Correct inaccurate, incomplete, or outdated personal information.
• Right to Erasure: Request the deletion of your personal data when processing is no longer warranted.
• Right to Withdraw Consent: Revoke previously granted consent as easily as it was given.
• Right of Grievance Redressal: Submit a complaint regarding processing to our Grievance Officer.
• Right to Nominate: Nominate another individual to exercise these rights on your behalf in the event of incapacity or demise.

9. Cookies & Preference Management

We employ strictly necessary cookies for security and site navigation. Telemetry cookies (such as Google Analytics) are disabled by default and activate only with your explicit consent. Detailed descriptions and retention timelines are available in our Cookie Policy.

10. Grievance Redressal Officer

In accordance with Section 43A of the Information Technology Act, 2000, Rule 5(9) of the SPDI Rules 2011, and Section 13 of the DPDP Act 2023, the designated Grievance Redressal Officer is:

If you remain dissatisfied following the completion of our internal grievance redressal mechanism, you have the right to register a formal appeal before the Data Protection Board of India (DPBI).

11. Amendments & Version History

We periodically review this policy to reflect operational refinements or legislative updates. Material revisions will be prominently announced on our website homepage and notified by email to active newsletter subscribers.

12. International Visitors (GDPR / UK GDPR Notice)

If you access this website from the European Union (EU) or the United Kingdom (UK), the General Data Protection Regulation (GDPR / UK GDPR) confers corresponding rights including data portability and supervisory authority escalation. To exercise GDPR rights, contact privacy@digitalfootprint.agency.