Privacy Policy
Effective date: 23 May 2026
Last updated: 23 May 2026
This Privacy Policy explains how Prodify Team (“Prodify”, “we”, “us”, “our”) collects, uses, stores, and shares personal data when you visit prodifyteam.in (the “Site”) or engage with us through the Site. It applies to visitors and prospective clients, whether you are based in India, the European Union / United Kingdom, or the United States (including California).
We have written this policy to be compliant with:
- India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”)
- The EU and UK General Data Protection Regulation (“GDPR”)
- The California Consumer Privacy Act, as amended by the CPRA (“CCPA”)
If anything in this policy is unclear, write to us at solutions@prodifyteam.in before sharing your data.
1. Who we are
Prodify Team is a consulting practice focused on AI-led automation for founders and small and medium businesses. For the purposes of data protection law:
- We are the Data Fiduciary under the DPDP Act for personal data of visitors processed via the Site.
- We are the Data Controller under GDPR for personal data of EU/UK visitors processed via the Site.
- We are the Business under CCPA for personal information of California consumers processed via the Site.
Contact for privacy queries: solutions@prodifyteam.in
2. What information we collect
We collect personal data only in three ways. We do not buy lists, scrape contact details, or enrich your profile with data from third-party brokers.
2.1 Information you give us directly
When you fill out a contact or consultation request form on the Site, we collect:
- Your name
- Your email address
- Your phone number (if provided)
- Your company or organisation name (if provided)
- The content of your message and any context you choose to share
You decide what to put in the message field. Please do not send us sensitive personal data (such as health, financial account details, government IDs, or biometric data) through the form — we have no need for it.
2.2 Information we collect automatically
When you browse the Site, we use Google Analytics 4 (GA4) to understand how visitors discover and use prodifyteam.in. Through GA4, the following is collected:
- IP address (truncated by GA4 before storage)
- Approximate location, at city or country level
- Device type, browser, and operating system
- Referring URL and pages viewed on the Site
- Time spent on pages and interaction events (clicks, scrolls)
- A randomly generated GA4 client ID stored in your browser
2.3 Cookies and similar technologies
The Site uses three categories of cookies and trackers:
- Strictly necessary cookies — required for the Site to load, route requests, and remember your cookie preferences. These cannot be switched off.
- Analytics cookies — set by GA4 to measure usage (see 2.2 above).
- Marketing cookies — set by advertising and retargeting partners so we can show relevant Prodify content to people who have already visited the Site. These may include pixels and similar identifiers placed by platforms such as Meta and LinkedIn.
For non-essential categories (analytics and marketing), we ask for your consent through a cookie banner on first visit. You can change your choice at any time using the cookie settings link in the Site footer.
3. Why we use your information
We process personal data for a small, defined set of purposes:
- Responding to your enquiry — to read your message, reply, schedule a call, and provide the consulting information you asked for.
- Improving the Site — to understand which pages are useful, which are not, and where visitors are getting stuck.
- Marketing and remarketing — to reach prospective clients on third-party platforms with relevant Prodify content, where you have consented to marketing cookies.
- Security and integrity — to detect and prevent spam, abuse, fraud, or attacks on the Site.
- Legal and regulatory compliance — to comply with applicable laws and respond to lawful requests from authorities.
We do not use your information to make solely automated decisions that produce legal or similarly significant effects on you.
4. Legal basis for processing (GDPR / UK GDPR)
If you are in the EU, EEA, or UK, we rely on the following legal bases:
- Consent (Article 6(1)(a)) — for analytics cookies, marketing cookies, and any direct marketing communications.
- Legitimate interests (Article 6(1)(f)) — for handling your enquiry once you contact us, securing the Site, and analysing aggregated usage. Our interest is to operate and improve a consulting business; we balance this against your rights and freedoms.
- Legal obligation (Article 6(1)(c)) — where we must retain or disclose data to comply with applicable law.
You can withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
5. Legal basis for processing (DPDP Act)
If you are in India, we process your personal data on the following grounds under the DPDP Act:
- Your consent, given freely, specifically, informed, and unambiguous, for analytics and marketing cookies and any marketing communications.
- Certain legitimate uses recognised under Section 7 of the DPDP Act — for example, when you voluntarily share your data with us to receive a service you have requested.
You may withdraw consent at any time by writing to solutions@prodifyteam.in. Withdrawal does not affect processing already lawfully carried out.
6. Who we share information with
We share personal data only with a short list of categories of recipients, and only as needed:
- Service providers (data processors) acting under our instructions:
- Hosting and infrastructure — for hosting the Site and storing form submissions.
- Analytics — Google Ireland Limited and Google LLC, for GA4.
- Advertising and retargeting platforms — where you have consented, including providers such as Meta Platforms and LinkedIn.
- Email and productivity tools — to receive and respond to your enquiries.
- Professional advisers — lawyers, accountants, and auditors, where required and under confidentiality.
- Authorities — law enforcement, regulators, and courts, where we are legally required to disclose information.
- Acquirers — in the unlikely event of a merger, acquisition, or reorganisation, in which case any transfer of personal data will be subject to this policy or one at least as protective.
We do not sell your personal information. We also do not “share” it for cross-context behavioural advertising in the specific sense defined under the CCPA, beyond the consented marketing cookies described above.
7. International data transfers
Prodify Team operates from India. Some of our service providers (notably Google for GA4, and major advertising platforms) process data in the United States and other countries.
- For EU/UK visitors, we rely on the European Commission’s adequacy decisions where available, and on Standard Contractual Clauses with supplementary measures where necessary.
- For India, transfers are made to jurisdictions not restricted by the Central Government under Section 16 of the DPDP Act.
If you would like more detail on the safeguards applied to a specific transfer, write to solutions@prodifyteam.in.
8. How long we keep your data
We do not keep personal data longer than we need:
- Contact form submissions — kept for up to 24 months from your last interaction with us, then deleted or anonymised. Active client communications are retained for the duration of the engagement plus the period required by tax, accounting, and contract law (typically up to 8 years in India).
- GA4 analytics data — retained for 14 months, after which it is automatically deleted by Google.
- Cookies on your device — retained for the lifespan declared in the cookie banner (most analytics and marketing cookies expire within 13 months).
- Backups — encrypted backups may persist briefly after deletion of the primary record and are overwritten in normal cycles.
9. Your rights
The rights available to you depend on where you are located.
9.1 If you are in India (DPDP Act)
You have the right to:
- Access a summary of personal data we hold about you and the processing activities.
- Correct, complete, update, or erase your personal data.
- Nominate another individual to exercise your rights in the event of death or incapacity.
- Withdraw consent at any time.
- File a grievance with us using the details in Section 13.
If your grievance is not resolved, you may approach the Data Protection Board of India.
9.2 If you are in the EU, EEA, or UK (GDPR)
You have the right to:
- Be informed about how your data is used (this policy).
- Access your data.
- Rectify inaccurate or incomplete data.
- Erase your data (“right to be forgotten”).
- Restrict processing in certain situations.
- Data portability — receive your data in a portable format.
- Object to processing based on legitimate interests, and to object to direct marketing at any time.
- Not be subject to solely automated decisions with significant effects (we do not carry out such processing).
You also have the right to lodge a complaint with your local supervisory authority — for example, the Information Commissioner’s Office (ICO) in the UK, or your national Data Protection Authority in the EU.
9.3 If you are in California (CCPA / CPRA)
You have the right to:
- Know what categories and specific pieces of personal information we have collected, the sources, the business purpose, and the categories of recipients.
- Delete personal information we have collected from you, subject to legal exceptions.
- Correct inaccurate personal information.
- Opt out of the “sale” or “sharing” of personal information. We do not sell your personal information. You can opt out of remarketing-related sharing by declining marketing cookies in the cookie banner.
- Limit the use of sensitive personal information. We do not knowingly collect sensitive personal information through the Site.
- Non-discrimination for exercising your CCPA rights. We will not deny you services, charge you a different price, or provide a different level of quality because you exercised a right.
9.4 How to exercise your rights
Send a request to solutions@prodifyteam.in with:
- Your name and the email address you used when contacting us.
- The right you wish to exercise.
- Enough detail for us to identify the personal data in question.
We will respond within the timelines required by applicable law (typically 30 days under GDPR, 45 days under CCPA, and as soon as practicable under the DPDP Act). We may ask you to verify your identity before acting on the request.
10. Children’s data
The Site is not directed at children. Under the DPDP Act, a child is a person under 18 years of age. We do not knowingly collect personal data from children without verifiable parental or lawful guardian consent. If you believe a child has provided personal data through the Site, write to solutions@prodifyteam.in and we will delete it.
11. How we protect your data
We use reasonable technical and organisational security measures, including:
- HTTPS / TLS encryption in transit between your browser and the Site.
- Access controls on accounts and dashboards holding personal data.
- Limited access on a need-to-know basis within Prodify.
- Periodic review of third-party processors and their security posture.
No method of transmission or storage is 100% secure. If we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant authority and, where required by law, you, within the timelines required by applicable law (including the 72-hour notification rule under GDPR and the breach notification obligations under the DPDP Act).
12. Changes to this Privacy Policy
We may update this policy from time to time to reflect changes in our practices, our service providers, or the law. When we make material changes, we will update the “Last updated” date at the top and, where appropriate, notify you through the Site or by email. Please review this policy periodically.
13. Contact and grievance officer
For any questions, requests, or complaints relating to this Privacy Policy or to your personal data:
- Email: solutions@prodifyteam.in
- Entity: Prodify Team
- Grievance Officer (DPDP Act): [GRIEVANCE_OFFICER_NAME], reachable at solutions@prodifyteam.in
We aim to respond to all privacy queries within 7 working days of receipt and to resolve grievances within the timelines required by applicable law.
This Privacy Policy is provided for informational purposes and does not constitute legal advice. We recommend that you review this policy with qualified legal counsel before publishing it on a live site.