1. Introduction

This Privacy Policy explains how Ekarthaan [LEGAL ENTITY NAME] (“Ekarthaan”, “we”, “us”, or “our”) collects, uses, shares, and protects personal data when you visit www.ekarthaan.com (the “Website”), contact us, schedule a call, or engage our services. We are a creative technology studio based in India serving clients in India and internationally.

We process personal data in accordance with applicable data protection laws, including the Digital Personal Data Protection Act, 2023 (India) and the Information Technology Act, 2000 and its rules, and, where applicable to visitors and clients in the European Economic Area or United Kingdom, the General Data Protection Regulation (GDPR) and UK GDPR.

2. Information We Collect

Information you provide directly

• Contact and enquiry details: name, email address, phone number, company name, job title, country, and the contents of your message when you use our contact form, email us, or message us on WhatsApp;
• Scheduling details: name, email, and meeting preferences when you book a call through our scheduling provider (Calendly);
• Business and project information: details you share with us in the course of discussing or receiving our services, including files, briefs, and specifications;
• Marketing preferences: your responses to our emails, newsletters, or outreach.

Information collected automatically

• Usage and device data: IP address, browser type, operating system, device identifiers, pages visited, referring URLs, and time spent on the Website, collected through cookies and similar technologies;
• Analytics data: aggregated statistics about Website traffic and behaviour via analytics tools such as Google Analytics.

Information from third parties

• Publicly available professional information (for example, from LinkedIn or company websites) used for business development;
• Information from platforms through which you engage us, such as Freelancer or Upwork, subject to those platforms’ terms.

3. How We Use Your Information

We use personal data to:

• Respond to enquiries and schedule and conduct calls and meetings;
• Prepare proposals, deliver services, and manage client relationships, projects, invoicing, and payments;
• Send service updates, marketing communications, and business outreach relevant to your professional role (you can opt out at any time);
• Operate, secure, analyse, and improve the Website and our services;
• Comply with legal, tax, accounting, and regulatory obligations;
• Establish, exercise, or defend legal claims.

4. Legal Bases for Processing

Where the GDPR or UK GDPR applies, we rely on the following legal bases: (a) your consent (for example, for certain cookies and marketing emails); (b) performance of a contract or steps taken at your request before entering a contract (responding to enquiries, delivering services); (c) our legitimate interests (operating and improving the Website, business development directed at professional contacts, securing our systems), balanced against your rights; and (d) compliance with legal obligations.

Where Indian law applies, we process personal data on the basis of your consent or for legitimate uses recognised under the Digital Personal Data Protection Act, 2023.

5. Cookies and Analytics

We use cookies and similar technologies to operate the Website, remember preferences, and understand how visitors use the site. Analytics cookies (such as Google Analytics) help us measure traffic and improve content. You can control or delete cookies through your browser settings; disabling cookies may affect some Website functionality. Where required by law, we will request your consent before placing non-essential cookies.

6. Who We Share Data With

We do not sell personal data. We share personal data only with:

• Service providers and processors: hosting providers, scheduling tools (Calendly), email and communication providers, analytics providers (e.g. Google), CRM and outreach tools, cloud storage, and payment processors — in each case only as needed to provide their services to us and under appropriate contractual safeguards;
• Communication platforms: if you contact us via WhatsApp or social media, your data is also processed by those platforms under their own privacy policies;
• Professional advisers: lawyers, accountants, and auditors where necessary;
• Authorities: where required by law, court order, or to protect our legal rights;
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this Policy.

7. International Data Transfers

We are based in India and serve clients internationally. Your personal data may be transferred to, stored, or processed in India or other countries where we or our service providers operate. Where we transfer personal data from the EEA or UK, we use appropriate safeguards such as the European Commission’s Standard Contractual Clauses or rely on transfers necessary for the performance of a contract with you.

8. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Policy: enquiry data for as long as needed to respond and follow up; client and project data for the duration of the engagement and thereafter as required for legal, tax, and accounting purposes (typically up to 8 years under Indian law); and marketing data until you opt out or we determine it is no longer needed. We then delete or anonymise the data.

9. Data Security

We implement reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction, including access controls, encrypted transmission, and secure cloud storage. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you and obtain a copy;
• Correct inaccurate or incomplete data;
• Request erasure of your data;
• Withdraw consent at any time (without affecting prior processing);
• Object to or restrict certain processing, including direct marketing;
• Data portability (where GDPR applies);
• Nominate another individual to exercise your rights in case of death or incapacity (under the DPDP Act, 2023);
• Lodge a complaint with a supervisory authority — the Data Protection Board of India, or your local data protection authority in the EEA/UK.

To exercise any of these rights, contact us using the details in Section 14. We will respond within the timelines required by applicable law.

11. Marketing Communications

We may send marketing and business development communications to professional contacts. Every marketing email includes an unsubscribe link, and you may opt out at any time by clicking it or by emailing us. We will honour opt-out requests promptly.

12. Children’s Privacy

The Website and our services are directed at businesses and professionals. We do not knowingly collect personal data from children under 18. If you believe a child has provided us personal data, please contact us and we will delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the most recent version. Material changes will be highlighted on the Website. Continued use of the Website after changes take effect constitutes acknowledgement of the updated Policy.

14. Contact Us / Grievance Officer

For privacy questions, requests, or complaints, contact:

• Grievance Officer: [NAME — required under Indian IT Rules and DPDP Act]
• Email: sales@ekarthaan.com
• Phone: +91 93404 76695
• Address: [REGISTERED ADDRESS]

We will acknowledge grievances and aim to resolve them within the timelines prescribed under applicable Indian law.