Privacy Policy

Effective date: 1 April 2026 Last updated: 1 April 2026 Jurisdiction: India Governed by: IT Act 2000, DPDP Act 2023

This Privacy Policy is published in accordance with Rule 3(1) of the Information Technology (Intermediaries Guidelines) Rules, 2011 and the Digital Personal Data Protection Act, 2023 (DPDP Act). By using our website or submitting your information, you consent to the practices described in this policy.

Table of Contents

Who we are
What data we collect
How we collect your data
Why we collect your data
Legal basis for processing
Who we share your data with
How long we keep your data
How we protect your data
Your rights as a data principal
Cookies and tracking
Children's privacy
Grievance officer
Changes to this policy
Contact us

1. Who we are

Ombre Consultants ("Ombre", "we", "us", or "our") is a digital marketing agency incorporated in India, with its registered office at Gurugram, Haryana. We operate the website ombreconsultants.in (the "Website") and provide digital marketing services including SEO, SEM, social media marketing, email marketing, analytics, and influencer marketing.

For the purposes of the Digital Personal Data Protection Act, 2023, Ombre Consultants is the Data Fiduciary. You, the user, are the Data Principal.

2. What data we collect

2.1 Personal data you provide directly

When you fill out our contact or lead capture form, we collect:

Full name (first and last name)
Work email address
Phone number (optional)
Company or brand name
Website URL (optional)
Marketing budget range (optional)
Your message or goals (free text)

2.2 Data collected automatically

When you visit our Website, we may automatically collect:

IP address and approximate geographic location
Browser type, version, and operating system
Pages visited, time spent, and navigation path
Referring URL (how you found us)
Device type (desktop, mobile, tablet)
Cookie and session identifiers

2.3 Data we do not collect

We do not collect any sensitive personal data as defined under the DPDP Act 2023, including financial information, biometric data, health data, or government-issued identification numbers (Aadhaar, PAN, etc.) through this Website.

3. How we collect your data

Contact forms: When you submit our enquiry or lead capture form on the Website.
Email correspondence: When you contact us directly by email.
Cookies and analytics: Automatically when you browse the Website (see Section 10).
Third-party referrals: Occasionally via referral partners, with your prior consent.

4. Why we collect your data

We collect and use your personal data strictly for the following purposes:

To respond to your enquiry: Processing your lead form submission and contacting you about our services.
To provide services: Delivering the digital marketing services you engage us for.
To send service-related communications: Updates, audit reports, and deliverables related to your project.
To send marketing communications: With your explicit consent only — you may opt out at any time.
To improve our Website: Analysing usage patterns to enhance user experience.
To comply with legal obligations: Retaining records as required under Indian law.

We will not use your personal data for any purpose beyond those listed above without obtaining your prior explicit consent.

5. Legal basis for processing

Under the Digital Personal Data Protection Act, 2023, we process your personal data on the following lawful bases:

Consent: You provide consent when you voluntarily submit our contact form or sign up for marketing communications. You may withdraw consent at any time by writing to us at legal@ombreconsultants.in.
Legitimate use: Processing necessary for responding to your service enquiry, fulfilling a contract, or for our legitimate business interests.
Legal obligation: Processing required to comply with applicable Indian laws and regulations.

We do not sell, rent, or trade your personal data to any third party. We may share your data with:

Our team members: Employees and contractors who need access to your data to deliver services, bound by confidentiality obligations.
Service providers (Data Processors): Trusted third-party platforms such as email services, analytics tools, and CRM software, who process data on our behalf under written data processing agreements.
Legal authorities: If required by law, court order, or directive from a competent Indian government authority.

All third-party service providers engaged by us are required to maintain appropriate security measures and are prohibited from using your data for their own purposes.

7. How long we keep your data

Lead enquiry data: Retained for 3 years from the date of submission, or until you request deletion.
Client data: Retained for 7 years after the end of the engagement, as required under Indian commercial law (Companies Act, 2013).
Analytics data: Anonymised and retained for up to 26 months.
Email marketing data: Retained until you unsubscribe or request deletion.

After the applicable retention period, your data will be securely deleted or anonymised.

8. How we protect your data

We implement reasonable technical and organisational security measures to protect your personal data, including:

SSL/TLS encryption for all data transmitted through our Website
Access controls ensuring only authorised personnel can access personal data
Regular security reviews of our systems and processes
Password-protected and access-controlled internal systems

However, no method of transmission over the internet is 100% secure. In the event of a data breach that is likely to cause harm, we will notify affected individuals and the Data Protection Board of India in accordance with the DPDP Act, 2023.

9. Your rights as a data principal

Under the Digital Personal Data Protection Act, 2023, you have the following rights:

Right to access: Request a summary of the personal data we hold about you and how it is being processed.
Right to correction: Request correction of inaccurate or incomplete personal data.
Right to erasure: Request deletion of your personal data, subject to legal retention requirements.
Right to grievance redressal: Register a complaint with our Grievance Officer (see Section 12).
Right to nominate: Nominate another individual to exercise your rights in the event of your death or incapacity.
Right to withdraw consent: Withdraw previously given consent at any time, without affecting the legality of processing done before withdrawal.

To exercise any of these rights, write to us at legal@ombreconsultants.in. We will respond within 30 days.

10. Cookies and tracking

Our Website uses cookies — small text files placed on your device — to enhance your experience. We use:

Essential cookies: Necessary for the Website to function. Cannot be disabled.
Analytics cookies: Help us understand how visitors use our Website (e.g. Google Analytics). These are anonymised where possible.
Marketing cookies: Used to track visitors for remarketing purposes. Only placed with your consent.

You may control cookie settings through your browser preferences. Disabling analytics or marketing cookies will not affect your ability to use the Website.

11. Children's privacy

Our Website and services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. In accordance with the DPDP Act, 2023, we will obtain verifiable parental consent before processing personal data of a child if we become aware that we have inadvertently collected such data. If you believe we have collected data from a minor, please contact us immediately at legal@ombreconsultants.in and we will delete it promptly.

12. Grievance officer

In accordance with the Information Technology Act, 2000 and the DPDP Act, 2023, we have appointed a Grievance Officer to address any concerns or complaints regarding the processing of your personal data:

Grievance Officer: Ravinder Sahu

Designation: Founder, Ombre Consultants

Email: grievance@ombreconsultants.in

Response time: Within 30 days of receipt of complaint

If your grievance is not resolved to your satisfaction, you may approach the Data Protection Board of India once it is constituted under the DPDP Act, 2023.

13. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email. We encourage you to review this policy periodically.

14. Contact us

For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact us:

Email: legal@ombreconsultants.in
General: hello@ombreconsultants.in