Privacy Policy

01About this policy

This Privacy Policy explains how ADDAXART ("ADDAXART", "we", "our", "us") collects, uses, shares and protects personal data when you:

• visit our website addaxart.com (the "Site");
• use our client portals, including admin.addaxart.com and marketing.addaxart.com (the "Portals");
• contact us, request a quote, or work with us as a client, partner or job applicant.

ADDAXART is a digital marketing, web development and creative agency, operating since 2015, with offices in India, Dubai (UAE) and Regina (Canada). For the personal data described in this policy, ADDAXART is the "data fiduciary" (under Indian law) or "data controller" (under the GDPR).

Please also read our Terms & Conditions.

02Information we collect

Information you give us:

• contact details such as your name, email address, phone or WhatsApp number, company name and job title;
• enquiry, quote and project details you share through forms, email, phone, WhatsApp or meetings;
• billing details such as your billing address and GST or tax number. Card payments are handled by payment gateways, and we do not store your full card details;
• Portal account details, such as login email and activity; and
• job applications, such as your CV and portfolio, if you apply to work with us.

Information collected automatically: IP address, device and browser type, approximate location (country or city), pages viewed, referring site, and how you interact with the Site, collected through cookies and similar technologies.

Information from third parties: details from ad and lead platforms (such as Google or Meta lead forms), business directories, or social media profiles you choose to make public or connect with us.

03How we use your information

We use personal data to:

• respond to enquiries and send quotes, proposals and invoices;
• deliver, manage and support the services you have engaged us for;
• create and secure Portal accounts, including sending one-time passwords (OTPs);
• send service updates, reports and important notices by email, SMS or WhatsApp;
• send newsletters and marketing messages, only where you have consented;
• analyse and improve the Site, our content and our services;
• prevent fraud, spam and security incidents; and
• meet legal, tax and accounting obligations.

04Legal basis for processing

We process personal data only where the law allows it:

• Consent: for example, for marketing messages and non-essential cookies. You can withdraw consent at any time, as easily as you gave it.
• Contract: to provide the services you ask for or have agreed to buy.
• Legitimate uses or interests: such as responding to information you voluntarily send us, keeping our Site secure and improving our services, where this does not override your rights.
• Legal obligation: such as keeping tax records or responding to lawful requests from authorities.

In India, we process digital personal data under the Digital Personal Data Protection Act, 2023 and its rules. If you are in the EU or UK, the GDPR or UK GDPR applies. If you are in Canada, PIPEDA applies. If you are in the UAE, the UAE Personal Data Protection Law applies.

05Cookies and analytics

Cookies are small files stored on your device. We use:

• Essential cookies that make the Site and Portals work, such as security and login cookies;
• Analytics cookies (for example, Google Analytics) that help us understand how visitors use the Site; and
• Marketing cookies and pixels (for example, from Google or Meta) that measure our ad campaigns, where enabled.

Where required by law, we ask for your consent before using non-essential cookies. You can also block or delete cookies in your browser settings, though some parts of the Site may then not work properly.

06Marketing communications

We send newsletters, offers and updates by email, SMS or WhatsApp only to people who have opted in, or where the law otherwise allows. Every marketing message includes a simple way to opt out, such as an unsubscribe link or replying STOP.

Opting out of marketing does not stop service messages about an active project, invoice or Portal account.

07Client portals and client-provided data

When you are our client, you may share or upload personal data about your own customers or contacts, for example a contact list for a WhatsApp or email campaign, or customer data in a CRM or website we manage.

For this data, you are the data fiduciary or controller and ADDAXART acts as your data processor. We use it only to provide the services you request and on your instructions, keep it confidential and secure, and delete or return it when the engagement ends, unless the law requires us to keep it. You are responsible for having a lawful basis, including valid consent, for the data you share with us.

08AI tools and automated processing

We may use artificial intelligence (AI) tools to help with tasks such as drafting content, summarising enquiries, keyword research and reporting. Our team reviews AI-assisted work.

• We take reasonable care not to enter personal or confidential client data into AI tools that may use it to train public models.
• We do not make decisions that have legal or similarly significant effects on you based only on automated processing.

09Sharing and disclosure

We do not sell or rent your personal data. We share it only with:

• Service providers who help us run our business, such as website hosting, cloud storage, email and CRM tools, analytics, payment gateways, and messaging providers such as the WhatsApp Business Platform;
• Advertising and marketplace platforms (such as Google, Meta, Amazon or Flipkart) when needed to deliver a service you have engaged us for;
• Professional advisers such as accountants, auditors and lawyers;
• Authorities when required by law, court order or to protect our rights, users or the public; and
• a buyer or successor, if our business is merged, sold or restructured, with the same privacy protections.

Our service providers may only use your data to provide services to us and must keep it confidential and secure.

10International data transfers

We work with clients and partners worldwide and have offices in India, the UAE and Canada. Some of our service providers store data in other countries. Where personal data is transferred across borders, we take steps to protect it as required by applicable law, for example by using reputable providers and contractual safeguards such as standard contractual clauses where the GDPR applies.

11Data security

We use reasonable technical and organisational measures to protect personal data, including HTTPS encryption, role-based access controls, password and OTP-protected Portal logins, regular backups, and limiting access to staff who need it.

No method of transmission or storage over the internet is completely secure, so we cannot guarantee absolute security. Please keep your Portal login details private.

12Data retention

We keep personal data only for as long as needed for the purpose it was collected, for example:

• enquiries that do not become projects are kept for a limited period so we can follow up, then deleted or anonymised;
• client and project records are kept for the duration of the engagement and afterwards as required for legal, tax and accounting purposes; and
• marketing data is kept until you unsubscribe or withdraw consent.

When data is no longer needed, we securely delete or anonymise it.

13Children's privacy

Our Site and services are meant for businesses and adults. We do not knowingly collect personal data from anyone under 18 without verifiable consent from a parent or lawful guardian. If you believe a child has given us personal data, please contact us and we will delete it.

14Your rights

Depending on where you live, you may have the right to:

• Access a summary or copy of the personal data we hold about you;
• Correct, complete or update inaccurate or incomplete data;
• Erase your data when it is no longer needed or you withdraw consent;
• Withdraw consent or object to marketing at any time;
• Restrict processing, or port your data to another provider, where the GDPR applies;
• Nominate another person to exercise your rights on your behalf in case of death or incapacity, under Indian law; and
• Raise a grievance with us, and if it is not resolved, complain to the relevant authority, such as the Data Protection Board of India or your local data protection authority.

15How to exercise your rights

To make a request or raise a grievance, email info@addaxart.com with the subject line "Privacy Request", and tell us what you would like us to do. We may need to verify your identity before acting on a request.

We will respond within the time required by applicable law. Exercising your rights is free, unless a request is clearly unfounded or excessive.

16Data breaches

If a personal data breach occurs that affects you, we will act quickly to contain it and will notify you and the relevant authorities where the law requires, explaining what happened and the steps we are taking.

17Links to other websites

The Site may link to third-party websites and social media platforms. We are not responsible for their privacy practices. Please read their privacy policies before sharing personal data with them.

18Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be on this page with its "Last updated" date. If changes are significant, we will take reasonable steps to let you know, for example by a notice on the Site or by email.

19Contact us

For questions, requests or grievances about this Privacy Policy or your personal data, contact us: