Privacy Policy

Data protection is a high priority for GoPhygital Private Limited. Our products, services, websites and applications can be used without providing personal data; where a service requires it (such as a name, address, email or phone number), processing follows the General Data Protection Regulation (GDPR) and applicable country-specific law. Where no statutory basis exists, we obtain your consent. We have implemented technical and organisational measures to protect personal data, but internet transmission can never be absolutely secure - you are always free to share information with us by alternative means, e.g. by telephone.

This declaration uses the terms of the GDPR: personal data (any information relating to an identified or identifiable person), data subject, processing, restriction of processing, profiling, pseudonymisation, controller, processor, recipient, third party and consent - each as defined by the European legislator.

GoPhygital Private Limited, WIPL House, 76-D, Govt. Industrial Estate, Charkop, Kandivli (W), Mumbai - 400067, India. Phone: +91 8879447707 / 08 / 09 / 10 · Email: info@gophygital.io · Website: https://gophygital.io

Hitesh Jain, GoPhygital Private Limited (address and phone as above). Any data subject may contact our Data Protection Officer directly at any time with questions or suggestions concerning data protection.

Our online services use cookies and similar technologies to recognise your browser, keep you signed in and make services more user-friendly. You can prevent or delete cookies at any time via your browser settings; some functions may then not be fully usable.

When you access our services we collect general technical data in server log files: browser type and version, operating system, referrer, sub-pages visited, date and time of access, IP address and internet service provider. This data is not used to identify you; it is analysed anonymously to deliver and optimise content, keep our systems secure and assist law enforcement in the event of a cyber-attack. We do not knowingly collect data from children under 13 - contact us and we will delete such information.

We provide physical, electronic and procedural safeguards and limit access to authorised employees and contractors who need it to operate, develop or improve our services. No security system can prevent all potential breaches.

If you contact us by email or a contact form, the personal data you transmit voluntarily is stored solely to process your enquiry or contact you. It is not transferred to third parties.

We store personal data only for the period necessary to achieve the purpose of storage or as required by law. Once the purpose or statutory retention period expires, data is routinely blocked or erased.

Under the GDPR you have the right of confirmation and access; rectification; erasure (right to be forgotten); restriction of processing; data portability; objection - including to direct marketing; freedom from decisions based solely on automated processing, including profiling; and withdrawal of consent at any time. To exercise any right, contact any employee or our Data Protection Officer.

Some services require access to your camera or photos to function. We collect device information (hardware model, OS version, identifiers, sensors, network connections) and - with your permission - location information via GPS, wireless networks, cell towers, Wi-Fi and sensors.

Our services may integrate components of Facebook, Instagram, WhatsApp (Meta), the Amazon Partner Program, Google (Analytics with IP anonymisation, Tag Manager, Firebase, Ads), LinkedIn, Pinterest, Twitter, YouTube and Tawk.to live chat. When a page containing such a component loads, that provider learns which page you visited and - if you are logged in to their service - may associate the visit with your account. You can prevent this by logging out of the respective service before visiting, adjusting cookie settings, or using the providers’ opt-out tools (e.g. https://tools.google.com/dlpage/gaoptout). Each provider’s own privacy policy governs its processing.

Processing is based on Art. 6(1) GDPR: (a) consent, (b) performance of a contract or pre-contractual measures, (c) legal obligation, (d) vital interests, or (f) legitimate interests - ours being to carry out our business in favour of the well-being of our employees and shareholders.

Providing personal data is partly required by law or contract; without it a contract may not be concluded - our employees will clarify what is required case by case. As a responsible company, we do not use automated decision-making or profiling.

This Privacy Policy may be updated from time to time for any reason. Please consult it regularly; continued use is deemed approval of all changes.

We work with clients and service providers across the EU/EEA, the UK, Switzerland, Singapore, the United States and India, so your personal data may be processed outside your home country. Where we transfer data internationally we rely on appropriate safeguards - EU Standard Contractual Clauses, adequacy decisions where they exist, and equivalent contractual commitments from our processors - so your data keeps a comparable level of protection.

We share only the personal data necessary with vetted processors who act on our instructions under data-processing agreements: Google (Analytics 4, Tag Manager and reCAPTCHA Enterprise, for analytics and spam prevention), Mailjet (delivery of enquiry notifications and confirmation emails) and LogThis (application error, security, and performance monitoring, which processes the referrer URL, IP address, and device user-agent details). They process data solely to provide their service and do not sell it. Analytics tools load only after you accept cookies.

If you are in India, the Digital Personal Data Protection Act, 2023 applies to you as a Data Principal. You have the right to access a summary of the personal data we hold and how we process it; to correction, completion, updating and erasure; to grievance redressal; and to nominate another individual to exercise your rights if you die or become incapacitated. We rely on your consent or other legitimate uses permitted by the Act, use data only for the stated purpose, and let you withdraw consent as easily as you gave it.

In line with the DPDP Act and the Information Technology Act and rules, our Grievance Officer is Hitesh Jain, GoPhygital Private Limited (address as in the Controller section), reachable at info@gophygital.io. We acknowledge and resolve grievances within the timelines prescribed by law. If you remain unsatisfied, you may approach the Data Protection Board of India.

On your first visit we ask for consent before setting any non-essential analytics cookies, using Google Consent Mode - until you accept, analytics is held in a denied state. Essential cookies needed for security and core functionality are always active. You can change or withdraw consent at any time by clearing this site's data in your browser, and your consent to form processing is stored with a timestamp so we can evidence it.

You may complain to your local supervisory authority: in the EU/EEA your national Data Protection Authority; in the UK the Information Commissioner's Office (ICO); in Switzerland the FDPIC; and in India the Data Protection Board of India. If you are a California resident (CCPA/CPRA) you may know, delete, correct and opt out of the sale or sharing of personal information - we do not sell or share personal information as those laws define it.