Privacy Policy

Effective Date: 25 May 2026 Last Updated: 25 May 2026

This Privacy Policy describes how Digiaddabox Management Private Limited (CIN: U73100HR2025PTC133774), a company incorporated under the Companies Act, 2013, having its registered office at Unit No. 219, Second Floor, Tower B4, Spaze ITech Park, Gurugram, Haryana 122018, India (hereinafter referred to as “Digiadda”, “we”, “us”, or “our”) collects, uses, stores, discloses, and otherwise processes information about you (“you”, “your”, or “User”) when you visit our website digiaddabox.com (the “Website”), interact with our team, or avail any of our services (collectively, the “Services”).

This Privacy Policy is published in accordance with:

• The Digital Personal Data Protection Act, 2023 (“DPDP Act”);
• The Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“SPDI Rules”);
• Rule 3(1) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021.

By accessing the Website or using any of our Services, you confirm that you have read, understood, and agreed to be bound by this Privacy Policy. If you do not agree, please do not access the Website or use the Services.

1. Information We Collect

We collect information about you in the following ways:

1.1 Personal Information You Provide Directly

When you fill out a form, sign up for a service, book a call, subscribe to communications, or interact with us, you may share:

• Full name
• Email address
• Phone number (including WhatsApp number)
• Business name, designation, and industry
• Website URL and social media handles
• Billing details, billing address, and GSTIN (where applicable)
• Communication preferences
• Any other information you voluntarily share over calls, emails, chat, or onboarding forms

1.2 Payment Information

Digiadda does not store your full credit card, debit card, or bank account details on its own servers. All payments are processed by our payment partner Razorpay Software Private Limited, which is PCI-DSS compliant. Your payment data is collected and stored directly by Razorpay under its own privacy policy. Where you choose to share business or payment details with us on a call, we will use those details only to set up, process, or service your order, in line with this Policy.

1.3 Information Collected Automatically

When you visit the Website, certain information is collected automatically:

• IP address and approximate geolocation
• Browser type, operating system, and device identifiers
• Pages visited, time spent on pages, click paths, and referring URLs
• Date and time of access
• Performance and crash logs

1.4 Information from Third Parties

We may receive information about you from third parties such as analytics providers, advertising partners, lead generation platforms, and social media platforms when you engage with our ads, lead forms, or content. We will process such information only to the extent that the source had a lawful basis to share it.

1.5 User-Generated Content

If you post testimonials, reviews, comments, images, videos, or any other content on our platforms or community spaces, we may collect and retain that content along with any metadata associated with it.

2. Cookies and Similar Tracking Technologies

This section forms part of our Privacy Policy and serves as our Cookie Policy.

2.1 What are Cookies?

Cookies are small text files placed on your device when you visit a website. They help the website recognise your device on return visits and improve your experience. Similar technologies include web beacons, pixels, local storage, and SDKs.

2.2 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the Website to function (e.g., login sessions, security tokens). These cannot be disabled.
• Performance and Analytics Cookies: Help us understand how visitors interact with the Website so we can improve it.
• Functionality Cookies: Remember your preferences (e.g., language, region).
• Marketing and Advertising Cookies: Used by us and our advertising partners to deliver relevant content and measure the effectiveness of campaigns. These may include retargeting pixels.

2.3 Third-Party Cookies

Certain cookies on our Website are set by third parties whose services we use. These third parties may collect information about your online activities over time and across different websites.

2.4 Managing Cookies

Most browsers allow you to refuse or accept cookies, delete existing cookies, or set preferences for specific sites. Please refer to your browser’s help section for instructions. Disabling certain cookies may affect the functionality of the Website.

3. How We Use Your Information

We use your information for the following lawful purposes:

• To provide, operate, maintain, and improve the Services;
• To create and manage your account, process orders, and deliver Services purchased;
• To communicate with you regarding bookings, calls, deliverables, support requests, invoices, renewals, and changes to our Services;
• To send marketing communications, promotional offers, newsletters, and educational content (where you have consented or where permitted by applicable law);
• To personalise your experience and recommend relevant offerings;
• To analyse usage trends and measure the effectiveness of our content, ads, and campaigns;
• To prevent fraud, enforce our Terms of Service, and protect the security of our Users and systems;
• To comply with applicable laws, regulations, court orders, or other lawful requests by public authorities; and
• For any other purpose disclosed to you at the time of collection or to which you have consented.

4. Legal Basis for Processing

We process your personal data on one or more of the following legal bases:

• Your free, specific, informed, unconditional, and unambiguous consent;
• Performance of a contract with you, or steps taken at your request before entering into a contract;
• Compliance with a legal obligation;
• Our legitimate interests, where such interests are not overridden by your rights and freedoms; and
• Other legitimate uses recognised under the DPDP Act and applicable law.

5. Sharing and Disclosure of Information

We do not sell your personal information. We may share your information in the following circumstances:

5.1 Service Providers and Data Processors

We share information with trusted third-party vendors who perform services on our behalf, such as payment processing (Razorpay), hosting, customer relationship management, email and messaging delivery, analytics, advertising, and customer support. These providers are bound by contractual obligations to handle your data in accordance with our instructions and applicable law.

5.2 Business Transfers

If we are involved in a merger, acquisition, restructuring, financing, or sale of assets, your information may be transferred as part of that transaction, subject to the terms of this Privacy Policy.

5.3 Legal and Regulatory Requirements

We may disclose information when we believe in good faith that disclosure is necessary to (i) comply with applicable law or a binding order of a court, tribunal, or authority; (ii) enforce our Terms of Service; (iii) protect the rights, property, or safety of Digiadda, our Users, or the public; or (iv) detect, prevent, or otherwise address fraud, security, or technical issues.

5.4 With Your Consent

We may share your information with other parties where you have given us your specific consent to do so.

6. International Data Transfers

Digiadda serves clients both within India and internationally. As a result, your information may be transferred to, stored in, or processed in countries other than the country in which you reside, including jurisdictions where data protection laws may differ from those in your home country. By using our Services, you consent to such transfers, provided that we will take reasonable steps to ensure that your information is treated securely and in accordance with this Policy and applicable law, including any restrictions notified by the Central Government of India under the DPDP Act.

7. Data Retention

We retain your personal information only for as long as is necessary for the purposes for which it was collected, including to satisfy legal, accounting, tax, or reporting obligations. The retention period depends on the type of information and the purpose for which it was collected. When personal data is no longer required, we will either delete it, anonymise it, or securely archive it where deletion is not technically feasible.

8. Your Rights as a Data Principal

Subject to applicable law (including the DPDP Act), you have the following rights with respect to your personal data:

• Right to Access: To obtain confirmation of, and a summary of, the personal data we process about you.
• Right to Correction and Erasure: To request correction of inaccurate or incomplete data, and erasure of data that is no longer necessary for the purposes for which it was collected (subject to legal retention obligations).
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time. Withdrawal will not affect the lawfulness of processing carried out before withdrawal.
• Right to Grievance Redressal: To raise a grievance with our Grievance Officer (see Section 12).
• Right to Nominate: To nominate another individual to exercise your rights in the event of your death or incapacity.
• Right to Opt Out of Marketing: To opt out of receiving marketing communications at any time by following the unsubscribe instructions in our emails, replying “STOP” to messages, or contacting us directly.

To exercise any of these rights, please contact us at the details provided in Section 12. We may request information to verify your identity before acting on your request.

9. Data Security

We have implemented reasonable security practices and procedures in line with the SPDI Rules and prevailing industry standards, including administrative, technical, and physical safeguards designed to protect your information from unauthorised access, loss, misuse, alteration, or destruction. Despite our efforts, no method of transmission over the internet or method of electronic storage is fully secure. We therefore cannot guarantee absolute security.

In the event of a personal data breach that is likely to result in harm to you, we will notify you and the Data Protection Board of India in accordance with applicable law.

10. Third-Party Websites and Services

The Website and our communications may contain links to third-party websites, products, or services. We are not responsible for the privacy practices or the content of such third parties. We encourage you to read the privacy policies of every website or service you interact with.

11. Children’s Privacy

Our Services are not directed to individuals under the age of 18 years. We do not knowingly collect personal information from children. If you are a parent or legal guardian and believe that your child has provided us with personal information without your consent, please contact us and we will take steps to delete such information from our records. Where we knowingly process the personal data of a child or a person with a disability who has a lawful guardian, we will obtain verifiable consent from the parent or guardian in accordance with the DPDP Act.

12. Grievance Officer and Contact Information

In accordance with the Information Technology Act, 2000, the rules made thereunder, and the DPDP Act, the details of our Grievance Officer / Data Protection Contact are as follows:

Name: Ritish Designation: Grievance Officer Entity: Digiaddabox Management Private Limited Address: Unit No. 219, Second Floor, Tower B4, Spaze ITech Park, Gurugram, Haryana 122018, India Email: ritish@digiaddabox.com

Any grievance, query, or request concerning the processing of your personal data may be addressed to the Grievance Officer. We will endeavour to resolve your grievance within the timelines prescribed under applicable law.

If you remain dissatisfied with our response, you may approach the Data Protection Board of India under the DPDP Act.

13. Changes to this Privacy Policy

We reserve the right to update, modify, or revise this Privacy Policy at any time to reflect changes in our practices, technologies, legal requirements, or other factors. The updated version will be posted on this page with a revised “Last Updated” date. Where changes are material, we will provide additional notice (such as by email or a prominent notice on the Website). Your continued use of the Website or Services after any changes become effective constitutes your acceptance of the revised Policy.

14. Governing Law and Jurisdiction

This Privacy Policy is governed by and construed in accordance with the laws of India. Any disputes arising out of or in connection with this Policy shall be subject to the exclusive jurisdiction of the competent courts at Gurugram, Haryana.

© 2026 Digiaddabox Management Private Limited. All rights reserved.