Privacy Policy

1. Introduction

PalmGro Creative Agency ("PalmGro," "we," "us," or "our") is a digital marketing and web design agency operated as a proprietorship by Gagan Suthar, based in Sri Ganganagar, Rajasthan, India. This Privacy Policy explains how we collect, use, disclose, and protect information when you visit our website (palmgro.in), contact us, or engage us for services such as branding, content creation, social media management, Meta Ads management, website design, or WhatsApp/AI automation.

By using our website or engaging our services, you agree to the practices described in this policy. If you do not agree, please do not use our website or share personal information with us.

2. Information We Collect

We collect information in the following ways:

2.1 Information you give us directly

2.2 Information collected automatically

When you visit our website, our hosting provider and any analytics tools we use may automatically collect:

• IP address and approximate location (city/country level)
• Browser type, device type, and operating system
• Pages visited, time spent on the site, and referring website
• Standard server log data (for security and performance monitoring)

2.3 Information from third-party platforms

If you interact with us via Meta (Facebook/Instagram) — for example by messaging our page or engaging with an ad — Meta may share limited interaction data with us as permitted by their platform policies. If you engage us for Meta Ads management, we may access your business's ad account, Page, and Pixel data solely to deliver the agreed services.

3. How We Use Your Information

We use the information we collect to:

• Respond to your enquiries and communicate with you about our services
• Prepare quotes, proposals, and service agreements
• Deliver contracted services (website development, content creation, ad management, etc.)
• Send project updates, invoices, and service-related communication
• Improve our website, services, and client experience
• Maintain business records for accounting, tax, and GST compliance
• Protect against fraud, misuse, or security issues
• Comply with applicable legal obligations

We do not sell your personal information to third parties, and we do not use your data for purposes unrelated to the services described above without your consent.

4. Legal Basis for Processing

We process personal information on the following grounds:

• Consent — when you voluntarily submit a form, message us, or opt in to communication
• Contract — when processing is necessary to deliver services you've engaged us for
• Legitimate business interest — for things like security, service improvement, and basic business record-keeping
• Legal obligation — where we're required to retain or disclose information under Indian law (e.g. GST/tax records)

5. Cookies & Tracking Technologies

Our website may use cookies and similar technologies to:

• Remember your preferences during a visit
• Understand how visitors use our website (analytics)
• Support embedded content and web fonts (e.g. Google Fonts, which may log IP addresses when loading fonts)

You can control or disable cookies through your browser settings. Disabling cookies may affect how parts of the website function.

6. Third-Party Services We Use

We rely on the following categories of third-party service providers, each with their own privacy practices:

These third parties process data under their own privacy policies. We encourage you to review the privacy policies of Meta, Google, and WhatsApp directly for details on how they handle data.

7. How We Share Information

We may share your information with:

• Service providers who help us operate our business (hosting, communication tools, payment processing)
• Subcontractors or team members working on your project, under confidentiality expectations
• Legal or regulatory authorities, if required by law, court order, or government request
• Successors, in the event of a business transfer, merger, or restructuring — with continued protection of your data

We do not share your personal information with third parties for their own marketing purposes.

8. Data Security

We take reasonable technical and organizational measures to protect the information we hold, including restricted access, secure hosting, and careful handling of client credentials and business data. However, no method of transmission or storage over the internet is 100% secure, and we cannot guarantee absolute security.

If you share sensitive credentials (e.g. website or ad account logins) with us for service delivery, we recommend using secure channels and rotating passwords after project completion where appropriate.

9. Data Retention

We retain personal information only as long as necessary for the purposes outlined in this policy, including:

• Enquiry and contact form data — retained until the enquiry is resolved or up to 24 months, whichever is longer, unless you request earlier deletion
• Client project data — retained for the duration of the engagement and a reasonable period afterward for support and record-keeping
• Financial and invoicing records — retained as required under Indian tax and GST regulations

10. Your Rights

Depending on applicable law, including India's Digital Personal Data Protection Act, 2023 (DPDP Act), you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Withdraw consent for processing, where consent is the basis for processing
• Request erasure of your personal information, subject to legal or contractual retention requirements
• Nominate another individual to exercise these rights on your behalf, in the event of death or incapacity
• Lodge a grievance with us, and escalate to the relevant Data Protection Board if unresolved

To exercise any of these rights, contact us using the details in Section 15. We will respond within a reasonable timeframe, generally within 30 days.

11. Grievance Redressal

If you have concerns about how your personal information has been handled, please contact our Grievance Officer:

12. Children's Privacy

Our website and services are intended for businesses and individuals aged 18 and above. We do not knowingly collect personal information from children. If we become aware that a minor has provided us with personal information without appropriate consent, we will take steps to delete it.

13. International Visitors

PalmGro is based in India, and the information we collect is primarily processed and stored in India. If you are visiting our website or engaging our services from outside India, please be aware that your information may be transferred to, stored, and processed in India, where data protection laws may differ from those in your country.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. Material changes will be reflected by updating the "Last Updated" date at the top of this page. We encourage you to review this page periodically.

15. Contact Us

If you have any questions about this Privacy Policy or how we handle your information, reach out to us: