This policy explains what personal information Promogranade collects through promogranade.com, including the contact and careers forms, why, who we share it with, how long we keep it and the rights you have over it.
1. Who we are
Promogranade is a full-stack studio based in India, working with clients in the UK, UAE, US and India. For the personal data collected through this website, Promogranade decides the purposes and means of processing, so it acts as the Data Fiduciary under India's Digital Personal Data Protection Act 2023 and as the data controller for GDPR and UK GDPR purposes.
Privacy questions, requests and grievances go to hello@promogranade.com or +91 95117 84952 (Monday to Saturday, 10 AM to 8 PM IST). A postal address is available on request.
2. What we collect
We collect only what is needed to reply to you and to run the website.
- Contact form: your name, email address, phone number if you give it, and your message.
- Careers form: name, email, phone, city, the role you are applying for, years of experience, any links you share, your message and your CV file.
- Server logs: our host, Vercel, records standard request data (IP address, browser string, timestamps) to serve, secure and debug the site.
- Visit statistics: the pages you view, the site that referred you, any campaign tags in the link, your approximate location (country, region and city, from our host's network data) and your device type, browser and operating system. We set one first-party cookie (pg_vid), a random id that lets us count returning visitors. We do not store your IP address or run advertising pixels.
- Google Analytics: we use Google Analytics 4 to understand how the site is used: the pages you view, how you arrived, your approximate location, your device and browser, and the fact (not the content) that a form was sent. If you are in the European Economic Area, the United Kingdom or Switzerland, it sets no cookies until you accept them in the cookie bar and only counts visits without them before that. Elsewhere it sets its cookies (_ga and _ga_ followed by an id) by default. You can change your choice at any time from Cookie settings in the footer. We do not use Google's advertising features, and Google Analytics does not log or store IP addresses.
- Nothing else. There are no user accounts on the public site.
3. Why we use it
Each use has a matching legal basis under the DPDP Act, GDPR and UK GDPR.
- To reply to your enquiry and talk with you about a possible project: your consent, and steps taken at your request before a contract.
- To operate and secure the website: our legitimate interest in running a safe, working site.
- To measure which pages are useful with Google Analytics: your consent where the law requires it (the EEA, the UK and Switzerland), otherwise our legitimate interest in improving the site.
- To meet legal or accounting obligations where they apply: compliance with a legal obligation.
- We use your information only for the purpose you gave it for. We do not add you to marketing lists and we do not sell personal data.
4. Who else sees it
A small number of providers process data on our behalf.
- Neon: stores contact form submissions, careers applications (including the CV file) and visit statistics in a private Postgres database that only the founders can open.
- Our own customer records system (Promogranade Operations), where a copy of your enquiry or application is kept so we can follow it up.
- Google Workspace: sends the confirmation email you receive after filling a form and the alert we receive, from hello@promogranade.com, and hosts that inbox.
- Vercel: hosts the site and holds the server logs described above for the period set by Vercel's own policy.
- Google (Google Analytics): receives the usage data described above and processes it on our behalf under Google's data processing terms.
- Meta (WhatsApp, Instagram) and LinkedIn: only if you follow an outbound link. Their policies apply from that point.
5. International transfers
We operate from India and the providers above run infrastructure in several countries, so your information may be processed outside India and outside your own country. Where GDPR or UK GDPR applies, we rely on recognised transfer mechanisms such as Standard Contractual Clauses together with each provider's own safeguards.
6. How long we keep it
- Contact form data: for as long as needed to handle your enquiry, and up to 12 months after our last contact, then deleted.
- Careers applications and CVs: for the time needed to consider you and up to 6 months afterwards in case a suitable role opens, then deleted.
- Visit statistics: up to 24 months, then deleted.
- Google Analytics data: 14 months, then deleted by Google.
- Server logs: for the limited period Vercel retains them.
- We delete sooner on request unless the law requires us to keep something.
7. Security
Access to the database, inbox and records system where form data lands is limited to the founders, behind a password. Our providers maintain their own security programmes. No transmission over the internet is completely secure, so we cannot promise absolute security, but if a breach is likely to affect you we will tell you and the relevant authority where the law requires it.
8. Your rights
In India you can access a summary of your data, correct or erase it, withdraw consent as easily as you gave it, nominate someone to act for you, and escalate an unresolved grievance to the Data Protection Board of India.
In the EEA and UK you can access, rectify, erase, restrict, object, request portability, withdraw consent and complain to your supervisory authority.
In California: we do not sell or share personal information for cross-context advertising. Residents may contact us to exercise applicable rights.
Email hello@promogranade.com to exercise any right. We may verify your identity in proportion to the request. We aim to respond within 30 days and there is no charge for a reasonable request.
9. Children
The site is for businesses and professionals and is not directed at anyone under 18. We do not knowingly collect information from children. If you believe a child has sent us data, email us and we will delete it.
10. Changes
We will update this page when our practices change and revise the date at the top. Material changes will be flagged on the site.