Privacy Policy

Redsan Digitals Pvt. Ltd. (“Redsan Digitals”, “the Company”, “we”, “us”, or “our”) is a full-service digital marketing and technology consultancy based in Dehradun, Uttarakhand, India. This Privacy Policy (“Policy”) explains what personal data we collect, why we collect it, how we use and protect it, and the choices and rights available to you, whether you are a visitor to our website, a prospective or existing client, or an individual whose data we process on a client’s behalf while delivering our services.

By using our website (redsan.in), engaging our services, or otherwise providing your information to us, you agree to the collection and use of information in accordance with this Policy. If you do not agree with this Policy, please do not use our website or services.

1. Scope of This Policy

This Policy applies to personal data we collect and process:

• Through our website, redsan.in, including contact and enquiry forms;
• In the course of providing digital marketing, creative, and technology services to our clients (“Agency Services”), as described in our Master Service Agreement;
• Through direct communication with prospective or existing clients, vendors, and partners (email, phone, WhatsApp, social media, or in person); and
• Through cookies, pixels, and similar tracking technologies used on our own website or, on a client’s instructions, on client-owned properties.

Note on Roles: This Policy governs how Redsan Digitals itself collects and uses personal data as a data controller or data fiduciary (for example, for our own website visitors and business development enquiries). Where we process data on a client’s behalf as part of Agency Services: such as leads generated through a client’s ad campaigns or website: we do so as a data processor acting on that client’s instructions, as described in Section 7.

2. Information We Collect

2.1 Information You Provide to Us

• Identity and contact details: name, company name, designation, email address, phone number, billing and postal address.
• Enquiry and project details: information you share when requesting a quotation, filling a contact form, or briefing us on a project (such as business goals, budget, target audience, and brand assets).
• Account and billing information: invoice details, GST/tax identifiers, and payment transaction references. Redsan Digitals does not store full credit card or bank account numbers; these are handled securely by regulated payment gateways and banking partners.
• Communications: records of correspondence, calls, and meetings between you and our team.

2.2 Information Collected Automatically

• Usage data: pages visited, time spent, referring URL, browser type, device type, and approximate location, collected via cookies and analytics tools (e.g., Google Analytics) when you visit redsan.in.
• Cookies and tracking technologies: as detailed in Section 5 below.

2.3 Information from Advertising & Third-Party Platforms

Where you interact with our own ads or social media profiles (e.g., Meta, Google, LinkedIn), those platforms may share limited aggregated engagement data with us in accordance with their own privacy policies and your user account settings.

3. How We Use Your Information

We use the personal data collected for the following legitimate purposes:

• To respond to enquiries, prepare proposals and quotations, and onboard new clients;
• To deliver, manage, and improve the Agency Services under a signed proposal, SOW, or Master Service Agreement;
• To raise invoices, process payments, and maintain statutory accounting and tax records;
• To communicate with you regarding your project, deliverables, account, or renewals;
• To operate, secure, and improve our website performance and internal systems;
• With your consent or where legally permitted, to send marketing communications regarding our services, which you may opt out of at any time; and
• To comply with applicable law, accounting, tax, and regulatory requirements, and to establish or defend legal claims.

4. Legal Basis for Processing

Where applicable law requires a legal basis for processing (including under India’s Digital Personal Data Protection Act, 2023), we rely on one or more of the following grounds:

• Consent: When you submit an enquiry form, initiate a consultation, or opt in to communications;
• Contractual Necessity: For the performance of a contract or service agreement with you or your organization;
• Legal Obligation: To comply with statutory tax, corporate, and accounting regulations; and
• Legitimate Business Interests: For securing our systems, preventing fraudulent activity, and refining service quality, provided these interests do not override your privacy rights.

5. Cookies & Tracking Technologies

Our website uses cookies and similar technologies to ensure smooth operation, store preferences, and analyze visitor traffic. These include:

• Essential cookies: Required for fundamental site functions such as page load speed and security.
• Analytics cookies: Assist us in understanding traffic trends and user interaction patterns (e.g., Google Analytics).
• Advertising & retargeting pixels: Employed by Redsan Digitals, and where applicable on client properties under client direction, to evaluate ad campaigns (e.g., Meta Pixel, Google Ads tags).

You can adjust or disable cookies through your browser settings. Disabling essential cookies may impact certain interactive features on our site.

6. Sharing & Disclosure of Information

We never sell your personal data. We may disclose personal data only under the following limited circumstances:

• Service Providers & Sub-Processors: Trusted partners who support our operations (cloud hosting, CRM systems, email delivery, accounting software, and payment processors) bound by strict confidentiality agreements;
• Advertising & Analytics Platforms: Such as Meta, Google, and LinkedIn, solely to the extent necessary to deliver and measure campaigns under their respective privacy terms;
• Professional Advisors: Independent auditors, accountants, or legal counsel when reasonably necessary;
• Government & Law Enforcement Authorities: When strictly mandated by applicable law, court orders, or official regulatory decrees; and
• Business Transfers: In connection with any merger, acquisition, or asset transfer, subject to the recipient upholding equivalent privacy standards.

7. Data of Client End-Users (Processing on a Client's Behalf)

In delivering Agency Services: such as running advertising campaigns, lead generation landing pages, or web platforms: Redsan Digitals frequently processes data belonging to our clients’ end customers or leads (“End-User Data”). In these engagements:

• Redsan Digitals acts strictly as a data processor / service provider, processing End-User Data only under the documented instructions of the client and within the scope of the signed SOW;
• The client remains the data controller / data fiduciary responsible for establishing a lawful basis, securing required end-user consents, and providing proper privacy notices;
• Redsan Digitals implements technical and organizational security controls to safeguard End-User Data and assists clients in fulfilling data subject access requests; and
• End-users seeking to exercise their privacy rights regarding data gathered through a client campaign should contact that client directly in the first instance.

8. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes set out in this Policy, including satisfying ongoing client projects, complying with statutory Indian accounting and tax retention periods, resolving disputes, and enforcing legal contracts. Non-converting prospect enquiry records are periodically pruned or anonymized.

9. Data Security

We maintain comprehensive technical, physical, and administrative measures: including HTTPS encryption, role-based access restrictions, periodic credential rotations, and hardened server configurations: designed to shield data from unauthorized access, loss, or alteration. While we implement robust defenses, no internet-connected platform can guarantee absolute impenetrability.

10. Your Rights

Under applicable data protection legislation, you are entitled to:

• Access and request copies of the personal data we hold about you;
• Request correction or updating of inaccurate or incomplete records;
• Request erasure of your personal data, subject to mandatory statutory retention rules;
• Withdraw previously given consent for marketing or optional processing; and
• Lodge a formal grievance regarding our data handling procedures with our designated Grievance Officer.

11. Children's Privacy

Our website and professional agency services are directed exclusively at business owners, professionals, and adults over the age of 18. We do not intentionally collect data from minors. If you believe a minor has provided us with personal information, please contact us immediately for deletion.

12. Grievance Redressal

In compliance with the Information Technology Act, 2000, rules made thereunder, and the Digital Personal Data Protection Act, 2023, you may direct privacy concerns, disputes, or complaints to our Grievance Officer:

We acknowledge all formal grievances within 2 business days and endeavour to investigate and resolve issues within 30 days of receipt.

13. International Data Transfers

Our core team and servers operate primarily within India. Where we leverage third-party cloud infrastructure, analytics providers, or ad platforms hosted overseas, data transfers are conducted under appropriate data protection safeguards and contractual mechanisms required by law.

14. Changes to This Policy

We may update this Privacy Policy periodically to reflect technological advancements, operational changes, or statutory revisions. The “Last Reviewed” timestamp at the top indicates the latest update date. Substantive amendments will be notified to active retainer clients via email or via a prominent notice on our website.