Privacy Policy

This Privacy Policy applies to personal data collected through this website, operated by SMASH Digital Media Private Limited (“SMASH Digital Media Private Limited”, “we”, “us” or “our”). For this data, SMASH Digital Media Private Limited is the data controller (called the “data fiduciary” under India's Digital Personal Data Protection Act, 2023, the “DPDP Act”).

It does not cover personal data we handle for clients while delivering our services. That is processed under the agreement we have with each client. It also does not cover third-party websites you reach through links from the Site. Our Terms & Conditions apply alongside this policy.

Information you give us

When you submit the strategy request form on our contact page, you can give us:

• your full name, phone number and location (required);
• your company name, website or Instagram link and work email address (optional);
• the service you are interested in, your approximate monthly marketing budget and your primary goal (optional);
• any additional context you write in the message box (optional).

If you email, call or message us on WhatsApp, we also receive the contact details and content of that conversation, and we may keep a record of it. Please do not send us sensitive personal data such as health information, government ID numbers or financial account details. We do not need it.

Information collected automatically

When you visit the Site, certain technical information is processed automatically:

• your IP address, which our servers use to protect the Site (for example, to limit repeated form submissions) and which is not stored with your enquiry;
• basic request and error information, such as the page requested, response status and a request reference, recorded in our server logs for security and troubleshooting. These logs do not include the contents of forms you submit;
• if analytics and advertising tags are enabled on the Site and you have agreed to them in our cookie choices: the pages you view, links you click (for example, phone, email, WhatsApp and call-to-action buttons), whether you start or submit a form (never what you typed into it), approximate location, device, browser and operating system, referring website, and online identifiers set by cookies. See the Cookie Policy.

Information from other sources

If you reach us through an advertisement, a social media platform or a business referral, we may receive limited information from that source, such as the campaign that brought you here.

We use personal data only for purposes that are specific and lawful, namely to:

• respond to your enquiry, understand your goals and prepare a proposal or strategy call;
• manage our relationship with you and our sales pipeline in our internal customer relationship (CRM) system, including assigning, tracking and following up on your enquiry;
• operate, secure and improve the Site, and prevent spam, fraud and abuse;
• understand how the Site and our campaigns perform, so we can improve content and measure marketing results (where analytics are enabled);
• meet our legal, tax, accounting and regulatory obligations and establish, exercise or defend legal claims;
• contact you about our services where you have asked us to or where the law allows. You can opt out at any time.

We do not sell your personal data, and we do not use it for automated decisions that have legal or similarly significant effects on you.

Under the DPDP Act and India's Information Technology Act, 2000 and its rules, we process your personal data on the basis of your consent, which you give when you submit a form or contact us, or for certain legitimate uses the law recognises, such as responding to an enquiry you initiated and complying with legal obligations. You can withdraw consent at any time (see “Your rights and choices”).

If you are in the European Economic Area or the United Kingdom, we rely on the following bases under the GDPR / UK GDPR:

• contract steps at your request, to respond to your enquiry and prepare a proposal;
• legitimate interests, to run, secure and improve our business and Site and to promote our services, balanced against your rights;
• consent, for non-essential cookies and similar technologies and for marketing messages where consent is required;
• legal obligation, where the law requires us to keep or disclose information.

The Site may use cookies and similar technologies, including measurement and advertising tags from Google and Meta where they are enabled. The Cookie Policy lists what is used, why, for how long, and how to control it.

We share personal data only as needed and never sell it. Recipients are:

• Our team, limited to people who need the information to respond to you and do their work, under confidentiality duties;
• Service providers (processors) that help us run the Site and our business, such as cloud hosting, database and security providers, media and video delivery (for example Cloudinary), email and communication tools, and, where enabled, analytics and advertising platforms (Google Analytics, Google Tag Manager, Google Ads and Meta). They may use the data only on our instructions and to provide their service, except that Google and Meta act under their own terms for the advertising and measurement features;
• Professional advisers and authorities, such as lawyers, auditors, regulators and law-enforcement bodies, where we are required by law or need to protect our rights, safety or property;
• A successor business, if we merge with, are acquired by or sell part of our business, in which case the privacy commitments in this policy continue to apply to your data unless you are told otherwise.

Some of our providers may store or process data outside India. Where your data is transferred internationally, we take steps so it stays protected, such as choosing providers with appropriate security and contractual commitments, and, where the GDPR / UK GDPR applies, using recognised transfer mechanisms like standard contractual clauses. The DPDP Act permits transfers except to countries the Government of India restricts by notification.

We keep personal data only for as long as it is needed for the purposes described above, and then delete or anonymise it.

• Enquiries and CRM records are kept while we are actively in touch with you or reasonably expect to be, and then for as long as needed to meet legal, tax and accounting obligations or resolve disputes;
• Server logs are kept only as long as needed for security and troubleshooting;
• Analytics data is kept according to the retention settings of the analytics provider, and is aggregated or anonymised where possible.

You can ask us to delete your data sooner (see “Your rights and choices”). We may need to keep some information where the law requires it.

We use reasonable technical and organisational safeguards appropriate to the risk, in line with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 and the DPDP Act. These include encrypted connections (HTTPS), validation and rate limiting of form submissions, restricted and authenticated staff access to our CRM, signed login sessions, and redaction of sensitive values from our logs.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If you believe your information has been compromised, please contact us at smash@sysmantech.net or through our contact page straight away. If a personal data breach affects you, we will notify you and the relevant authority as the law requires.

Depending on where you live, you have rights over your personal data. Under the DPDP Act you can:

• ask for a summary of the personal data we process about you and who we have shared it with;
• ask us to correct inaccurate or incomplete data, or to complete or update it;
• ask us to erase your data when it is no longer needed for the purpose it was collected for, unless the law requires us to keep it;
• withdraw your consent at any time. This does not affect processing done before you withdrew it;
• use our grievance process below and, if unresolved, complain to the Data Protection Board of India;
• nominate another person to exercise your rights if you die or become unable to.

If the GDPR / UK GDPR applies to you, you also have the right to data portability, to restrict or object to processing (including processing based on legitimate interests and any direct marketing), and to complain to your local data protection authority. Residents of some other regions have similar rights under local law. We do not sell or share personal data for cross-context behavioural advertising as those terms are used in some US state laws, other than the advertising and measurement tags described in the Cookie Policy where enabled.

To exercise any right, contact us at smash@sysmantech.net or through our contact page. We may need to verify your identity first, and we will respond within the time the law requires. To stop marketing messages, use the opt-out in the message or tell us directly.

The Site is intended for businesses and adults, and is not directed at children. We do not knowingly collect personal data from anyone under 18 (the age of majority under the DPDP Act) without verifiable parental consent. If you believe a child has given us personal data, please contact us and we will delete it.

The Site contains links to other websites and services (such as LinkedIn, Instagram, Facebook, X and WhatsApp). We are not responsible for their content or privacy practices. We encourage you to read their privacy policies before sharing any information.

We may update this policy as our practices or the law change. If we make a material change, we will make it clearly visible on the Site, and where the law requires we will ask for your consent again.

Questions, requests or complaints about your personal data can be sent to our privacy contact (also our grievance officer for the purposes of the DPDP Act and the IT Act) at smash@sysmantech.net or through our contact page. We will acknowledge your request and respond within the time the law requires.

• Email: smash@sysmantech.net
• Phone: +91 95399 00003
• Address: Ground Floor, Arthungal Residency, Lower, Cheruparambath Rd, Tagore Nagar, Giri Nagar, Kadavanthra, Kochi, Ernakulam, Keralam 682020

You can also use the form on our contact page. We aim to reply to every message promptly.