Debmedia Technologies LLP Official Website
Home
Services

Software Development Services

  • 🤖
    AI Software Solutions Machine learning & intelligent automation
  • ☁️
    SaaS Platform Development Multi-tenant cloud platforms
  • 🏢
    Enterprise Web Applications Secure, scalable business systems
  • ⚙️
    Automation & Data Engineering Pipelines, ETL, workflow automation
  • 🧩
    Custom Software Development Tailored solutions for unique needs

Web & Commerce

  • 🛒
    WordPress & E-commerce WooCommerce & online stores
  • 🧱
    Business Website Development Professional corporate websites
  • 🔁
    Website Redesign & Migration Modernize & upgrade existing sites
  • 🚀
    Performance Optimization Speed up slow websites & apps

Solutions for Businesses

  • MVP Development for Startups
  • Workflow Automation Systems
  • AI Integration for Existing Apps
  • Legacy System Modernization
  • Internal Business Portals

Not sure which service you need?

Get expert guidance on the best technical approach for your business.

✅ Free Consultation
✓ No obligation
✓ Expert advice
✓ Fast response
Case Studies Insights About Us Contact
Book Free Consultation
Debmedia Technologies LLP Official Website
📞 Book Free Consultation
Home
Software Development Services
🤖 AI Software Solutions ☁️ SaaS Platform Development 🏢 Enterprise Web Applications ⚙️ Automation & Data Engineering 🧩 Custom Software Development
Web & Commerce
🛒 WordPress & E-commerce 🧱 Business Website Development 🔁 Website Redesign & Migration 🚀 Performance Optimization
Solutions for Businesses
MVP Development for Startups Workflow Automation Systems AI Integration for Existing Apps Legacy System Modernization Internal Business Portals
Case Studies Insights About Us Contact
Home / Privacy Policy

Privacy Policy

How we collect, use, and protect your personal information

Company: Debmedia Technologies LLP Jurisdiction: Hooghly, West Bengal, India Last Updated: January 25, 2026

Table of Contents

Overview (1-5)

1. Introduction 2. Company Information 3. Scope of This Policy 4. Definitions 5. Legal Basis for Processing

Data Collection (6-9)

6. Information We Collect 7. How We Use Your Information 8. AI and Automated Processing 9. Cookies and Tracking

Data Rights (14-17)

14. Your Rights and Choices 15. Rights Under Indian Law 16. Rights Under GDPR (EU) 17. Rights Under CCPA (California)

Quick Links

Data Security Children's Privacy Governing Law Contact Us

1. Introduction

Debmedia Technologies LLP ("Company," "we," "us," or "our") is committed to protecting your privacy and handling your personal information with transparency, security, and in compliance with applicable data protection laws.

This Privacy Policy explains how we collect, use, disclose, store, and protect your personal data when you:

  • Visit our website (debmediatechnologies.com);
  • Use our software development services, SaaS platforms, AI tools, or other products;
  • Communicate with us via email, phone, WhatsApp, or other channels;
  • Engage our consulting, training, or professional services;
  • Subscribe to our newsletters or marketing communications;
  • Participate in our events, webinars, or programs.

Your Consent: By using our Services or providing your personal information, you consent to the collection, use, and disclosure of your information as described in this Privacy Policy.

Important: Please read this Privacy Policy carefully. If you do not agree with our practices, please do not use our Services or provide your personal information.

2. Company Information

Legal Name: Debmedia Technologies LLP

Type of Entity: Limited Liability Partnership registered in India

Registered Office: Hooghly, West Bengal, India

Email: hello@debmediatechnologies.com

Privacy Contact: legal@debmediatechnologies.com

Website: www.debmediatechnologies.com

Data Controller: For the purposes of data protection law, Debmedia Technologies LLP is the data controller responsible for your personal information.

3. Scope of This Privacy Policy

What This Policy Covers:

  • Personal information collected through our website and Services;
  • Data collected from clients, users, and visitors;
  • Information gathered through cookies and tracking technologies;
  • Data processing for marketing, analytics, and business operations;
  • Your rights and choices regarding your personal data.

What This Policy Does NOT Cover:

  • Third-party websites or services linked from our site;
  • Data processing by our clients using our services (they have their own privacy policies);
  • Employment candidate data (covered by separate recruitment privacy notice);
  • Business contact information used solely for B2B purposes in some jurisdictions.

Supplementary Policies: This Privacy Policy should be read in conjunction with our Terms & Conditions, Cookie Policy, and any service-specific privacy notices.

4. Definitions and Interpretation

Personal Data / Personal Information: Any information relating to an identified or identifiable natural person, including name, email address, IP address, location data, online identifiers, and other data that can directly or indirectly identify you.

Sensitive Personal Data: Special categories of personal data including financial information, health data, biometric data, sexual orientation, religious beliefs, political opinions, or other data requiring enhanced protection under applicable laws.

Processing: Any operation performed on personal data, including collection, storage, use, analysis, disclosure, transfer, or deletion.

Data Subject: The individual to whom personal data relates (i.e., you, the user).

Data Controller: The entity that determines the purposes and means of processing personal data (Debmedia Technologies LLP for data we collect about users).

Data Processor: The entity that processes personal data on behalf of the data controller (we may act as processor for enterprise clients' customer data).

Services: All products, platforms, software, applications, websites, and services provided by Debmedia Technologies LLP.

5. Legal Basis for Processing Personal Data

We process your personal data based on one or more of the following legal grounds:

5.1 Consent: You have given explicit consent for us to process your personal data for specific purposes (e.g., marketing communications, cookies, newsletter subscriptions).

5.2 Contractual Necessity: Processing is necessary to perform a contract with you or to take steps at your request before entering into a contract (e.g., providing Services, processing payments, delivering projects).

5.3 Legal Obligation: Processing is required to comply with legal obligations under Indian law or other applicable jurisdictions (e.g., tax compliance, regulatory reporting, responding to legal requests).

5.4 Legitimate Interests: Processing is necessary for our legitimate business interests or those of a third party, provided such interests are not overridden by your rights and freedoms (e.g., fraud prevention, network security, business analytics, improving Services).

5.5 Vital Interests: Processing is necessary to protect vital interests of you or another person (e.g., emergency situations).

5.6 Public Interest: Processing is necessary for tasks carried out in the public interest or in exercise of official authority (rarely applicable to our business).

6. Information We Collect

We collect various types of information depending on how you interact with our Services:

6.1 Personal Identification Information

  • Full name (first and last name);
  • Date of birth (if required for age verification);
  • Government-issued ID numbers (only for KYC/verification if required);
  • Photographs or profile images (if you upload them);
  • Username and account credentials.

6.2 Contact Information

  • Email address;
  • Phone number (mobile and landline);
  • WhatsApp number;
  • Mailing address and billing address;
  • Company name and business address;
  • Social media handles (if provided).

6.3 Business and Professional Information

  • Job title and role;
  • Company name and industry;
  • Professional credentials or certifications;
  • LinkedIn profile or professional website;
  • Business requirements and project details;
  • Technical specifications and preferences.

6.4 Account Registration Data

  • Username and password (encrypted);
  • Security questions and answers;
  • Account preferences and settings;
  • Subscription tier and plan details;
  • Account creation date and last login;
  • Two-factor authentication data.

6.5 Payment and Billing Information

  • Credit/debit card details (processed by payment gateways, not stored by us);
  • Bank account information for wire transfers;
  • Billing address and tax information;
  • GST number or tax identification number;
  • Transaction history and invoices;
  • Payment method preferences;
  • Purchase orders and contracts.

6.6 Technical Data and Device Information

  • IP address and geolocation data;
  • Browser type, version, and language;
  • Operating system and device type;
  • Screen resolution and display settings;
  • Unique device identifiers;
  • Mobile network information;
  • Referral source and UTM parameters.

6.7 Usage and Interaction Data

  • Pages visited and time spent on pages;
  • Features used and frequency of use;
  • Click patterns and navigation paths;
  • Search queries within our Services;
  • Files uploaded or downloaded;
  • API calls and usage metrics;
  • Error logs and crash reports;
  • Session duration and frequency;
  • Engagement with emails and notifications.

6.8 Cookies and Tracking Technologies

  • Session cookies and persistent cookies;
  • First-party and third-party cookies;
  • Pixel tags and web beacons;
  • Local storage and session storage;
  • Analytics identifiers;
  • Advertising and remarketing tags.

See Section 9 for detailed cookie information.

6.9 Third-Party Data Sources

  • Information from social media platforms (if you connect accounts);
  • Data from business partners and affiliates;
  • Publicly available information (e.g., company websites, LinkedIn);
  • Data enrichment services for B2B contacts;
  • Credit check agencies (for enterprise payment terms).

6.10 Publicly Available Information

  • Information you make publicly available (e.g., public social media profiles);
  • Company information from public registries;
  • News articles or press releases mentioning you or your company;
  • Content you publish on our platform (if public features exist).

6.11 Sensitive Personal Data (If Applicable)

We generally do NOT collect sensitive personal data unless:

  • You voluntarily provide it (e.g., health data for accessibility accommodations);
  • Required by law or contractual necessity;
  • With your explicit consent for specific purposes;
  • Necessary for legal claims or compliance.

Financial Information: Payment card details, bank account numbers, and financial data are considered sensitive and are handled with enhanced security. We use PCI-DSS compliant payment processors and do not store full card details.

6.12 Information from Customer Communications

  • Email content and attachments;
  • Support ticket messages and chat transcripts;
  • Phone call recordings (with notice and consent);
  • WhatsApp or messaging platform conversations;
  • Survey responses and feedback;
  • Meeting notes and project documentation;
  • Testimonials and reviews.

7. How We Use Your Information

7.1 Service Delivery and Operations

  • Provide, operate, and maintain our Services;
  • Process your orders and deliver projects;
  • Create and manage your account;
  • Authenticate your identity and prevent unauthorized access;
  • Customize Services based on your preferences;
  • Monitor and improve Service performance;
  • Develop new features and functionality;
  • Ensure technical compatibility and optimize user experience.

7.2 Account Management

  • Create and maintain user accounts;
  • Verify account ownership and credentials;
  • Manage subscription plans and renewals;
  • Track usage and enforce account limits;
  • Enable features based on subscription tier;
  • Synchronize data across devices;
  • Facilitate account recovery and password resets.

7.3 Customer Support

  • Respond to inquiries and support requests;
  • Troubleshoot technical issues;
  • Provide guidance and best practices;
  • Track and resolve customer complaints;
  • Improve support processes and response quality;
  • Train support staff using anonymized case studies.

7.4 Business Communications

  • Send service announcements and updates;
  • Notify you of account changes or security issues;
  • Provide transaction confirmations and receipts;
  • Send renewal reminders and billing notifications;
  • Communicate about projects and deliverables;
  • Request feedback or reviews;
  • Respond to your questions and requests.

7.5 Marketing and Promotions

  • Send promotional emails and newsletters (with your consent);
  • Provide information about new services and features;
  • Offer discounts, special offers, and promotions;
  • Invite you to events, webinars, or training programs;
  • Conduct market research and surveys;
  • Display targeted advertisements;
  • Measure effectiveness of marketing campaigns.

7.6 Personalization of Services

  • Customize user interface and experience;
  • Recommend relevant features or content;
  • Remember your preferences and settings;
  • Provide location-based services;
  • Suggest relevant services or upgrades;
  • Personalize marketing messages and offers.

7.7 Analytics and Product Improvement

  • Analyze usage patterns and trends;
  • Measure feature adoption and engagement;
  • Identify bugs, errors, and performance issues;
  • Conduct A/B testing and experiments;
  • Research user behavior and preferences;
  • Develop new products and features;
  • Optimize user experience and workflows;
  • Create aggregated, anonymized reports and statistics.

7.8 Legal and Compliance Purposes

  • Comply with applicable laws and regulations;
  • Respond to legal requests, court orders, and subpoenas;
  • Meet tax, accounting, and audit requirements;
  • Establish, exercise, or defend legal claims;
  • Enforce our Terms and Conditions;
  • Protect our legal rights and interests;
  • Comply with Know Your Customer (KYC) and anti-money laundering regulations.

7.9 Fraud Prevention and Security

  • Detect and prevent fraud, abuse, and unauthorized access;
  • Verify identity and authenticate users;
  • Monitor for security threats and vulnerabilities;
  • Investigate suspicious activity;
  • Protect against cyberattacks and data breaches;
  • Maintain system integrity and availability;
  • Block malicious users and IP addresses.

7.10 Contractual Obligations

  • Fulfill our obligations under service agreements;
  • Manage project timelines and deliverables;
  • Process payments and invoices;
  • Provide agreed-upon support and maintenance;
  • Comply with service level agreements (SLAs);
  • Document project requirements and specifications.

8. AI and Automated Data Processing

8.1 Use of AI Models

We use artificial intelligence and machine learning in our Services for purposes including:

  • Natural language processing and text analysis;
  • Predictive analytics and recommendations;
  • Automated content generation;
  • Image and document processing;
  • Fraud detection and anomaly detection;
  • Chatbots and automated customer support;
  • Personalization and user segmentation;
  • Performance optimization and resource allocation.

8.2 Automated Decision-Making

Automated Decisions: We may use automated systems to make decisions about:

  • Fraud risk assessment and account verification;
  • Content moderation and filtering;
  • Spam detection and filtering;
  • Service access and rate limiting;
  • Personalized recommendations;
  • Pricing and promotional offers (in some cases).

Significant Automated Decisions: We do NOT make solely automated decisions that significantly affect you (e.g., contract formation, termination, major account changes) without human review.

Right to Human Review: If you believe you've been subject to an unfair automated decision, you may request human review by contacting us at hello@debmediatechnologies.com.

8.3 Training and Improvement of Systems

Your data may be used to train and improve our AI models and systems:

  • Improving accuracy and performance of AI features;
  • Training machine learning models on usage patterns;
  • Developing new AI capabilities;
  • Quality assurance and testing;
  • Benchmarking and performance evaluation.

Data Used for Training:

  • Usage data and interaction patterns (anonymized where possible);
  • Aggregated statistical data;
  • Content you create using AI tools (subject to your privacy settings);
  • Feedback and corrections you provide;
  • Error logs and failure cases.

8.4 Human Review and Intervention

AI outputs may be reviewed by human staff for:

  • Quality assurance and accuracy verification;
  • Detecting inappropriate or harmful content;
  • Improving AI system performance;
  • Responding to user-reported issues;
  • Compliance with content policies;
  • Training and calibration purposes.

Staff Training: Staff reviewing AI outputs are trained on data privacy and confidentiality and are bound by strict confidentiality obligations.

8.5 Data Anonymization and Aggregation

We create anonymized and aggregated datasets that cannot identify individuals for:

  • Analytics and business intelligence;
  • Industry research and reports;
  • Product development;
  • Performance benchmarking;
  • Public sharing of usage statistics.

Re-identification Prevention: We implement technical measures to prevent re-identification of anonymized data. Anonymized data is not subject to the same privacy protections as personal data.

9. Cookies and Tracking Technologies

9.1 What Are Cookies

Cookies are small text files stored on your device when you visit our website. They help us recognize your device, remember your preferences, and improve your experience.

9.2 Types of Cookies We Use

Essential Cookies (Strictly Necessary):

  • Authentication and session management;
  • Security and fraud prevention;
  • Load balancing and performance;
  • Shopping cart functionality;
  • Form submission and data processing;
  • Cookie consent preferences.

These cookies are required for website functionality and cannot be disabled.

Performance and Analytics Cookies:

  • Google Analytics (page views, session duration, bounce rate);
  • Hotjar or similar heatmap tools;
  • Error tracking and debugging;
  • Performance monitoring;
  • A/B testing and experimentation.

Functional Cookies:

  • Language and region preferences;
  • Theme and display settings;
  • Accessibility preferences;
  • Remember me functionality;
  • Notification preferences.

Advertising and Marketing Cookies:

  • Facebook Pixel and conversion tracking;
  • Google Ads remarketing;
  • LinkedIn Insight Tag;
  • Email campaign tracking;
  • Affiliate tracking and attribution.

9.3 Third-Party Cookies

Third parties may set cookies through our website, including:

  • Google: Analytics, Ads, Tag Manager, reCAPTCHA;
  • Facebook: Pixel for advertising and analytics;
  • LinkedIn: Insight Tag for B2B advertising;
  • Payment Processors: Stripe, PayPal, Razorpay for transaction processing;
  • CDN Providers: Cloudflare for performance and security;
  • Video Platforms: YouTube, Vimeo for embedded content;
  • Support Tools: Intercom, Zendesk, or similar platforms.

These third parties have their own privacy policies governing their use of data.

9.4 Cookie Management and Controls

Managing Cookie Preferences:

  • Use our cookie consent banner to accept/reject non-essential cookies;
  • Access cookie settings through our website;
  • Configure browser settings to block cookies;
  • Use browser privacy/incognito mode;
  • Install browser extensions for cookie management.

Browser Settings:

  • Chrome: Settings → Privacy and security → Cookies and other site data;
  • Firefox: Settings → Privacy & Security → Cookies and Site Data;
  • Safari: Preferences → Privacy → Manage Website Data;
  • Edge: Settings → Privacy, search, and services → Cookies.

Impact of Disabling Cookies: Blocking essential cookies may prevent website functionality. Blocking analytics/marketing cookies affects personalization but not core Services.

9.5 Do Not Track Signals

Some browsers support "Do Not Track" (DNT) signals. We currently do not respond to DNT signals, but you can manage tracking through cookie preferences and browser settings.

For more details, see our Cookie Policy at [Cookie Policy URL].

10. How We Share Your Information

We Do Not Sell Your Personal Data. We will never sell, rent, or trade your personal information to third parties for their marketing purposes.

10.1 With Service Providers

We share data with trusted service providers who assist in delivering our Services:

  • Cloud Hosting: AWS, Google Cloud, Azure (data storage and infrastructure);
  • Payment Processing: Stripe, Razorpay, PayPal (transaction processing);
  • Email Services: SendGrid, Mailchimp (email delivery and marketing);
  • Analytics: Google Analytics, Mixpanel (usage analytics);
  • Customer Support: Zendesk, Intercom (support ticketing);
  • Communication: Twilio (SMS), WhatsApp Business API;
  • CDN: Cloudflare (content delivery and security);
  • Monitoring: Sentry, LogRocket (error tracking).

Data Processing Agreements: Service providers are bound by data processing agreements and may only use your data to provide services to us, not for their own purposes.

10.2 With Business Partners

  • Technology partners for integrations (with your consent);
  • Resellers or distributors (for enterprise sales);
  • Affiliates or subsidiaries (if applicable);
  • Co-marketing partners (with your consent).

10.3 With Legal Authorities

We may disclose your information to government authorities, law enforcement, or courts when:

  • Required by law, regulation, or legal process;
  • Responding to valid court orders, subpoenas, or warrants;
  • Complying with tax or regulatory requirements;
  • Cooperating with law enforcement investigations;
  • Protecting our legal rights or defending against claims;
  • Preventing fraud, security threats, or illegal activity;
  • Protecting safety of users or the public.

Government Transparency: Where legally permitted, we will notify you of government data requests and may challenge overly broad requests.

10.4 During Business Transfers

If we are involved in a merger, acquisition, sale of assets, bankruptcy, or other business transaction, your personal data may be transferred to the acquiring entity, provided they agree to honor this Privacy Policy or obtain your consent for changes.

10.5 With User Consent

We may share your information with third parties when you explicitly consent or direct us to do so, such as:

  • Connecting third-party integrations;
  • Sharing portfolio case studies;
  • Publishing testimonials;
  • Participating in partner programs.

11. International Data Transfers

11.1 Cross-Border Data Processing

Your personal data may be transferred to and processed in countries outside India, including:

  • Cloud hosting in AWS/Google Cloud/Azure regions (US, EU, Singapore, etc.);
  • Service providers with international operations;
  • Payment processors with global infrastructure;
  • Analytics and marketing platforms based abroad.

Data Protection Standards: Countries outside India may have different data protection laws. We ensure appropriate safeguards are in place for international transfers.

11.2 Data Transfer Safeguards

For international data transfers, we implement safeguards including:

  • Standard Contractual Clauses (SCCs): EU-approved model clauses for GDPR compliance;
  • Adequacy Decisions: Transfers to countries deemed adequate by authorities;
  • Data Processing Agreements: Contractual protections with processors;
  • Encryption: Data encrypted in transit and at rest;
  • Access Controls: Limited access to data by location and role;
  • Your Consent: Explicit consent where required by law.

11.3 Compliance with Local Laws

Data Localization: If Indian regulations require data to remain in India:

  • We will comply with data localization requirements;
  • Critical personal data may be stored exclusively in India;
  • Enterprise clients can request India-only hosting;
  • We will update practices as regulations evolve.

EU-US Data Transfers: For EU users, we comply with GDPR requirements for cross-border transfers, including use of SCCs or other approved mechanisms.

12. Data Retention Policy

12.1 Retention Periods

We retain personal data only as long as necessary for the purposes described in this Privacy Policy or as required by law:

Active Users:

  • Account data: Duration of account plus 90 days;
  • Usage data: 24 months;
  • Support communications: 24 months;
  • Marketing data: Until consent withdrawn plus 12 months;
  • Session data: 30 days.

Closed Accounts:

  • Most data deleted within 30 days of account closure;
  • Backups purged within 90 days;
  • Aggregated anonymized data may be retained indefinitely.

Financial and Legal Records:

  • Payment records: 7 years (tax compliance);
  • Contracts and agreements: 3 years after termination;
  • Invoices and receipts: 7 years;
  • Legal correspondence: Duration of matter plus 3 years;
  • Dispute records: Indefinitely if litigation involved.

Marketing Communications:

  • Opt-in records: 3 years from consent;
  • Opt-out records: Indefinitely (to honor your preference);
  • Campaign data: 2 years.

12.2 Legal and Regulatory Requirements

We may retain data longer when required by:

  • Tax laws (typically 7 years);
  • Companies Act or LLP Act requirements;
  • Ongoing legal proceedings or investigations;
  • Regulatory audits or examinations;
  • Potential legal claims (statute of limitations);
  • Contractual obligations or data retention clauses.

12.3 Secure Disposal of Data

When data is no longer needed, we securely dispose of it through:

  • Permanent deletion from active databases;
  • Secure erasure from storage systems;
  • Purging from backup systems;
  • Destruction of physical media (if applicable);
  • Anonymization or pseudonymization for retained analytics.

Backup Retention: Deleted data may persist in automated backups for up to 90 days before permanent deletion.

13. Data Security Measures

We implement comprehensive technical, administrative, and physical security measures to protect your personal data from unauthorized access, loss, misuse, alteration, or disclosure.

13.1 Technical Safeguards

  • Encryption: Data encrypted in transit using TLS/SSL (HTTPS) and at rest using AES-256 or equivalent;
  • Access Controls: Role-based access control (RBAC) limiting data access to authorized personnel only;
  • Authentication: Multi-factor authentication (MFA) for sensitive systems;
  • Network Security: Firewalls, intrusion detection/prevention systems (IDS/IPS);
  • Vulnerability Management: Regular security scans and penetration testing;
  • Secure APIs: API keys, OAuth 2.0, token-based authentication;
  • Database Security: Encrypted databases, query parameterization, SQL injection prevention;
  • Logging and Monitoring: Security event logging, anomaly detection, real-time alerts.

13.2 Administrative Safeguards

  • Security Policies: Written information security policies and procedures;
  • Employee Training: Regular security awareness and data protection training;
  • Background Checks: Verification of employees with data access;
  • Confidentiality Agreements: All staff bound by confidentiality obligations;
  • Access Reviews: Periodic review of user access rights;
  • Incident Response Plan: Documented procedures for security incidents;
  • Business Continuity: Disaster recovery and backup procedures;
  • Vendor Management: Security assessments of third-party providers.

13.3 Physical Safeguards

  • Data Center Security: Use of certified data centers with physical access controls;
  • Office Security: Secure office premises with access restrictions;
  • Equipment Protection: Locked storage for devices containing data;
  • Disposal Procedures: Secure destruction of physical media.

13.4 Incident Response Procedures

In the event of a security incident:

  • Immediate containment and investigation;
  • Assessment of impact and affected data;
  • Notification to affected users as required by law;
  • Remediation and preventive measures;
  • Documentation and post-incident review;
  • Cooperation with regulatory authorities.

13.5 Data Breach Notification

Notification Timeline: If a data breach affects your personal data, we will:

  • Notify you within 72 hours of becoming aware (as required by GDPR and Indian IT Rules);
  • Describe the nature of the breach and data affected;
  • Explain the likely consequences and risks;
  • Detail the measures taken to address the breach;
  • Provide steps you can take to protect yourself;
  • Offer assistance such as credit monitoring (if appropriate).

Reporting to Authorities: We will notify relevant data protection authorities as required by applicable law.

No Guarantee of Security: Despite our security measures, no system is 100% secure. We cannot guarantee absolute security against all threats.

14. Your Rights and Choices

You have important rights regarding your personal data. You may exercise these rights by contacting us at hello@debmediatechnologies.com.

14.1 Right to Access

What You Can Request:

  • Confirmation of whether we process your personal data;
  • Copy of your personal data in our possession;
  • Information about how we use and share your data;
  • Categories of data we collect and process;
  • Sources from which we obtained your data;
  • Purposes of processing;
  • Recipients or categories of recipients.

How to Request: Email hello@debmediatechnologies.com with "Data Access Request" in subject line. We will respond within 30 days.

Free Access: First request is free. Subsequent excessive or repetitive requests may incur reasonable administrative fees.

14.2 Right to Rectification

You have the right to correct inaccurate or incomplete personal data:

  • Update your account information through account settings;
  • Request correction by contacting support;
  • Provide evidence supporting the correction;
  • We will update data within 15 days of verification.

14.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data when:

  • Data is no longer necessary for the purposes collected;
  • You withdraw consent and there's no other legal basis;
  • You object to processing and there are no overriding legitimate grounds;
  • Data has been unlawfully processed;
  • Deletion is required for legal compliance.

Exceptions: We may refuse deletion if we need the data for:

  • Compliance with legal obligations (e.g., tax records);
  • Establishment, exercise, or defense of legal claims;
  • Fulfillment of contractual obligations;
  • Fraud prevention and security.

14.4 Right to Restrict Processing

You may request restriction of processing when:

  • You contest accuracy of data (restricted until verified);
  • Processing is unlawful but you prefer restriction over deletion;
  • We no longer need the data but you need it for legal claims;
  • You object to processing (restricted pending verification of legitimate grounds).

14.5 Right to Data Portability

You have the right to:

  • Receive your personal data in structured, commonly used, machine-readable format (CSV, JSON);
  • Transmit your data to another service provider;
  • Request direct transmission where technically feasible.

Scope: Applies to data you provided and we process based on consent or contract, in automated systems.

14.6 Right to Object

You may object to processing based on legitimate interests, including:

  • Direct marketing (we will stop immediately);
  • Profiling for marketing purposes;
  • Processing based on legitimate interests (we will cease unless compelling grounds exist);
  • Automated decision-making.

14.7 Withdrawal of Consent

Where processing is based on consent, you may withdraw consent at any time:

  • Through account settings;
  • Via unsubscribe links in emails;
  • By contacting us directly;
  • Through privacy preference center.

Effect of Withdrawal: Withdrawal does not affect lawfulness of processing before withdrawal. We may continue processing on other legal bases if applicable.

14.8 Managing Communication Preferences

Marketing Communications:

  • Opt out via unsubscribe link in emails;
  • Update preferences in account settings;
  • Reply "STOP" to SMS messages;
  • Contact us to remove from all marketing lists.

Transactional Communications: You cannot opt out of essential service communications (account notifications, security alerts, payment receipts) as these are necessary for the Services.

15. Rights Under Indian Law

15.1 Information Technology Act, 2000

We comply with the Information Technology Act, 2000 and Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

Your Rights Include:

  • Right to review personal information collected;
  • Right to correct or update personal information;
  • Right to withdraw consent for certain processing;
  • Right to opt-out of marketing communications;
  • Right to file complaints with the Grievance Officer.

15.2 SPDI Rules Compliance

Sensitive Personal Data or Information (SPDI): Under Indian law, SPDI includes:

  • Passwords and financial information (bank accounts, credit/debit cards);
  • Physical, physiological, and mental health condition;
  • Sexual orientation;
  • Medical records and history;
  • Biometric information;
  • Any other information deemed sensitive under IT Rules.

SPDI Protection: We collect SPDI only with your consent and for lawful purposes. SPDI is protected with enhanced security measures.

Disclosure of SPDI: We do not disclose SPDI to third parties without your consent, except:

  • When required by law;
  • To government agencies with legal authority;
  • For fraud prevention with your interest in mind.

15.3 Grievance Officer Information

Grievance Redressal Mechanism: In accordance with IT Rules 2011, we have designated a Grievance Officer to address privacy concerns:

Grievance Officer

Name: [Designated Officer Name]

Email: grievance@debmediatechnologies.com

Alternative Email: legal@debmediatechnologies.com

Address: Debmedia Technologies LLP, Hooghly, West Bengal, India

Filing a Complaint:

  • Email the Grievance Officer with detailed complaint;
  • Include your contact information and account details;
  • Describe the privacy concern or data protection issue;
  • Provide supporting evidence if applicable;
  • We will acknowledge within 24 hours and resolve within 30 days.

16. Rights Under GDPR (For EU Users)

If you are located in the European Union (EU), European Economic Area (EEA), or United Kingdom (UK), you have additional rights under the General Data Protection Regulation (GDPR):

16.1 Lawful Processing

We process your personal data only when we have a lawful basis (see Section 5):

  • Consent for marketing and cookies;
  • Contract performance for service delivery;
  • Legal obligation for tax and regulatory compliance;
  • Legitimate interests for analytics, security, and improvement;
  • Vital interests for emergency situations.

16.2 Data Protection Rights

Your GDPR Rights:

  • Right to Information: Be informed about data collection and use;
  • Right of Access: Obtain copy of your data (within 1 month);
  • Right to Rectification: Correct inaccurate data (within 1 month);
  • Right to Erasure: Request deletion in certain circumstances;
  • Right to Restrict Processing: Limit processing in certain situations;
  • Right to Data Portability: Receive data in portable format;
  • Right to Object: Object to processing based on legitimate interests;
  • Rights Related to Automated Decision-Making: Not be subject to solely automated decisions with significant effects without human involvement.

16.3 Complaints with Supervisory Authorities

If you believe we have violated your GDPR rights, you have the right to lodge a complaint with:

  • Your local data protection supervisory authority in the EU/EEA/UK;
  • The lead supervisory authority where we have our main establishment (if applicable);
  • Contact details for EU supervisory authorities: https://edpb.europa.eu/about-edpb/board/members_en

GDPR Representative: If required, we will appoint an EU representative. Contact details will be provided upon request.

Data Protection Officer (DPO): We may appoint a DPO as required by GDPR. Contact: dpo@debmediatechnologies.com

17. Rights Under CCPA/CPRA (For California Users)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

17.1 Right to Know

You have the right to request disclosure of:

  • Categories of personal information collected;
  • Specific pieces of personal information we hold;
  • Categories of sources from which we collected data;
  • Business or commercial purposes for collecting data;
  • Categories of third parties with whom we share data;
  • How long we retain each category of information.

Request Process: Submit request via email to privacy@debmediatechnologies.com or through our web form. We will respond within 45 days (extendable to 90 days with notice).

17.2 Right to Delete

You may request deletion of personal information we collected, subject to exceptions for:

  • Completing transactions or providing requested services;
  • Detecting and resolving security incidents;
  • Debugging and repairing functionality;
  • Complying with legal obligations;
  • Internal uses reasonably aligned with your expectations;
  • Exercise of free speech or research purposes.

17.3 Right to Opt-Out

Sale of Personal Information: We do NOT sell your personal information. If this changes, we will update this policy and provide opt-out mechanisms.

Sharing for Cross-Context Behavioral Advertising: You may opt out of sharing for targeted advertising through:

  • Cookie preference center on our website;
  • Global Privacy Control (GPC) signal (we honor GPC);
  • Email request to privacy@debmediatechnologies.com.

Sensitive Personal Information: You may limit use of sensitive personal information to purposes necessary for service delivery.

17.4 Non-Discrimination Policy

No Discrimination for Exercising Rights: We will not discriminate against you for exercising CCPA/CPRA rights, including:

  • Denying goods or services;
  • Charging different prices or rates;
  • Providing different quality of services;
  • Suggesting you will receive different prices or quality.

Permissible Differences: We may offer financial incentives (discounts, rewards) for providing data or charge different prices for different service tiers, provided the difference is reasonably related to the value of the data.

Authorized Agents: You may designate an authorized agent to make CCPA/CPRA requests on your behalf. We may require verification of authorization.

Verification Process: To protect your privacy, we will verify your identity before processing rights requests using:

  • Email confirmation to registered email;
  • Account login verification;
  • Matching information you provide with our records;
  • Additional verification for sensitive requests.

18. Children's Privacy

18.1 Age Restrictions

Age Requirement: Our Services are not intended for individuals under the age of 18 years (or the age of majority in your jurisdiction, whichever is higher).

No Knowing Collection: We do not knowingly collect personal information from children under 18. If you are under 18, please do not:

  • Use our Services;
  • Create an account;
  • Provide any personal information;
  • Subscribe to newsletters;
  • Make purchases.

18.2 Parental Consent

Educational Use by Minors: If you are a parent or guardian who has authorized your child (13-17 years) to use our educational Services:

  • You must provide verifiable parental consent;
  • You are responsible for monitoring your child's use;
  • You agree to these Terms on behalf of your child;
  • You may review and delete your child's data at any time;
  • Enhanced privacy protections apply to minors.

COPPA Compliance: For users in the United States, we comply with the Children's Online Privacy Protection Act (COPPA) and do not collect data from children under 13.

18.3 Data Removal Requests

If You Believe We Have Child Data:

  • Contact us immediately at privacy@debmediatechnologies.com;
  • Provide details about the suspected minor account;
  • We will investigate within 48 hours;
  • If confirmed, we will delete the account and all associated data within 72 hours;
  • We will take steps to prevent future underage use.

19. Third-Party Links and Services

19.1 External Websites

Our Services may contain links to third-party websites, applications, or services. This Privacy Policy does not apply to those third parties.

Your Responsibility:

  • Review privacy policies of third-party sites before providing data;
  • Understand that we are not responsible for third-party practices;
  • Exercise caution when clicking external links;
  • Be aware that third parties may have different privacy standards.

No Endorsement: Links to third-party sites do not imply endorsement. We are not responsible for content, products, or practices of linked sites.

19.2 Embedded Content

We may embed content from third parties (YouTube videos, Twitter feeds, maps, etc.). These embeds may:

  • Set cookies on your device;
  • Track your interactions;
  • Collect usage data;
  • Use your data per their privacy policies.

19.3 Social Media Plugins

Social media buttons/widgets (Facebook Like, Twitter Share, LinkedIn Share) may:

  • Send data to social networks even if you don't click them;
  • Track your browsing across sites;
  • Associate your visit with your social media account;
  • Use cookies and tracking technologies.

Refer to privacy policies of Facebook, Twitter, LinkedIn, Instagram for their data practices.

20. Business Clients and Enterprise Data

20.1 Client Confidential Information

When providing Services to business clients, we may access or process client data, including personal data of their customers or employees.

Data Controller vs. Processor:

  • We are Controller: For data we collect about our clients (contact info, billing, usage);
  • We are Processor: For client customer data we process on behalf of clients;
  • Client is Controller: For their customer/employee data we process per their instructions.

20.2 Data Processing Agreements

For enterprise clients, we enter into Data Processing Agreements (DPAs) or Data Processing Addendums that specify:

  • Scope, nature, and purpose of processing;
  • Types of personal data processed;
  • Categories of data subjects;
  • Rights and obligations of each party;
  • Security measures required;
  • Sub-processor authorization;
  • Data breach notification procedures;
  • Assistance with data subject rights;
  • Data deletion or return upon termination.

20.3 Sub-Processors

We may engage sub-processors (cloud providers, analytics tools) to assist in processing client data:

  • Sub-processors are bound by equivalent data protection obligations;
  • We conduct due diligence on sub-processor security;
  • Enterprise clients may request list of sub-processors;
  • Clients may object to new sub-processors (contractually agreed process);
  • We remain liable for sub-processor actions.

21. Marketing Communications

21.1 Email Marketing

Consent: We send marketing emails only to those who:

  • Explicitly opted in to receive marketing;
  • Provided email during account creation (with consent checkbox);
  • Are existing customers (soft opt-in for similar products/services);
  • Attended our events or webinars with consent.

Content: Marketing emails may include:

  • Product updates and new features;
  • Promotional offers and discounts;
  • Educational content and resources;
  • Event invitations and webinars;
  • Company news and announcements;
  • Case studies and success stories.

Frequency: Typically 2-4 marketing emails per month. You control frequency preferences in account settings.

21.2 SMS and Messaging Platforms

SMS Marketing: We send SMS only with your explicit opt-in consent:

  • You provided phone number with consent checkbox;
  • You texted a keyword to opt in;
  • Message and data rates apply;
  • Frequency: varies but not excessive;
  • Opt-out: Reply STOP to any message.

WhatsApp Marketing: Promotional messages via WhatsApp only with your consent. You can block or opt-out anytime.

21.3 Opt-Out Mechanisms

Easy Unsubscribe: Every marketing email includes:

  • Prominent "Unsubscribe" link at bottom;
  • One-click unsubscribe (no login required);
  • Immediate processing (within 48 hours);
  • Confirmation of unsubscribe.

Preference Center: Manage subscriptions through your account:

  • Choose topics of interest;
  • Set email frequency;
  • Opt in/out of specific campaigns;
  • Update communication preferences anytime.

Suppression Lists: Once you unsubscribe:

  • Your email is added to suppression list;
  • No future marketing emails sent;
  • Your preference is honored indefinitely;
  • Transactional emails still sent (necessary for service).

22. Cookies for Advertising and Retargeting

22.1 Behavioral Advertising

We use cookies and tracking to display targeted advertisements based on your interests and behavior:

  • Pages visited on our website;
  • Services viewed or searched;
  • Time spent on pages;
  • Actions taken (downloads, signups, inquiries);
  • Demographic and interest data from third parties.

Why We Do This: To show relevant ads instead of random ads, making marketing more useful to you and more effective for us.

22.2 Remarketing Technologies

We use remarketing/retargeting to show ads to people who visited our website:

  • Google Ads Remarketing: Ads on Google Search, Display Network, YouTube;
  • Facebook Pixel: Ads on Facebook and Instagram;
  • LinkedIn Insight Tag: Ads on LinkedIn;
  • Twitter Pixel: Ads on Twitter;
  • AdRoll or similar: Cross-platform retargeting.

How It Works:

  • You visit our website;
  • Remarketing code places cookie on your browser;
  • When you visit partner sites (Google, Facebook, etc.), you may see our ads;
  • Ads are customized based on pages you visited;
  • You can opt out through cookie preferences or ad settings.

22.3 Ad Partner Policies

Third-Party Ad Networks: Our advertising partners have their own privacy policies:

  • Google Ads: https://policies.google.com/privacy
  • Facebook: https://www.facebook.com/privacy/explanation
  • LinkedIn: https://www.linkedin.com/legal/privacy-policy
  • Twitter: https://twitter.com/privacy

Opting Out of Interest-Based Ads:

  • Google: Visit Google Ad Settings (adssettings.google.com);
  • Facebook: Ad Preferences in Facebook settings;
  • LinkedIn: Account → Settings & Privacy → Data Privacy → Advertising;
  • Industry Opt-Out: Network Advertising Initiative (optout.networkadvertising.org), Digital Advertising Alliance (optout.aboutads.info);
  • Mobile: iOS - Limit Ad Tracking, Android - Opt out of Ads Personalization.

23. Logs, Monitoring, and Audits

23.1 System Logs

We automatically collect and store system logs including:

  • Access logs (IP address, timestamp, pages accessed);
  • Error logs (application errors, stack traces);
  • Security logs (authentication attempts, access control events);
  • API logs (API calls, request/response data);
  • Database logs (queries, performance metrics);
  • Application logs (feature usage, transactions).

Purpose: Logs are used for troubleshooting, security monitoring, performance optimization, compliance, and fraud detection.

Retention: Logs typically retained for 90 days unless longer retention is required for security, legal, or regulatory purposes.

23.2 Performance Monitoring

We monitor system performance using tools that may collect:

  • Page load times and rendering performance;
  • API response times and latency;
  • Database query performance;
  • Server resource usage (CPU, memory, disk);
  • Error rates and crash reports;
  • User session recordings (anonymized, with consent where required).

Tools: Google Analytics, New Relic, Datadog, Sentry, LogRocket, or similar performance monitoring services.

23.3 Security Audits

We conduct regular security audits and assessments:

  • Vulnerability scans and penetration testing;
  • Code reviews and static analysis;
  • Access control reviews;
  • Third-party security audits;
  • Compliance audits (ISO 27001, SOC 2, etc. if applicable).

Audit findings may result in changes to security practices or this Privacy Policy.

24. Data Accuracy and Updates

Our Commitment: We strive to maintain accurate, complete, and up-to-date personal data.

Your Responsibility: You are responsible for:

  • Providing accurate information when creating account or using Services;
  • Updating your information when it changes;
  • Reviewing your account data periodically for accuracy;
  • Notifying us of errors or outdated information;
  • Correcting data through account settings or by contacting us.

How to Update Information:

  • Log into your account → Settings → Profile;
  • Update contact information, billing details, preferences;
  • Changes take effect immediately;
  • Contact support for data you cannot update yourself.

Data Verification: We may periodically request that you verify or update your information to ensure accuracy.

25. Confidentiality Obligations

Our Commitment to Confidentiality: We treat your personal information as confidential and implement strict controls to protect it from unauthorized disclosure.

Employee and Contractor Obligations:

  • All employees and contractors sign confidentiality agreements;
  • Access to personal data is limited to those with a legitimate need;
  • Staff are trained on data protection and confidentiality;
  • Violations of confidentiality result in disciplinary action including termination;
  • Confidentiality obligations survive employment termination.

Third-Party Confidentiality: Service providers, partners, and sub-processors are bound by contractual confidentiality obligations equivalent to ours.

Exceptions to Confidentiality: We may disclose information when:

  • Required by law or legal process;
  • Necessary to protect our rights or property;
  • Needed to prevent fraud or illegal activity;
  • You provide explicit consent for disclosure;
  • Data is already public or aggregated/anonymized.

26. Limitation of Liability Regarding Data

NO GUARANTEE OF SECURITY: While we implement reasonable security measures, we cannot guarantee absolute security of your personal data against all possible threats.

Limitation of Liability: To the maximum extent permitted by law:

  • We are not liable for unauthorized access to data resulting from factors beyond our reasonable control;
  • We are not liable for your failure to protect account credentials;
  • We are not liable for third-party actions (e.g., hackers, service provider breaches);
  • We are not liable for data loss due to force majeure events;
  • Our liability for data-related claims is limited as set forth in our Terms & Conditions (maximum: ₹100,000 or 12 months fees).

Your Responsibilities: You agree to:

  • Use strong passwords and protect your credentials;
  • Enable two-factor authentication where available;
  • Maintain security on your devices and networks;
  • Promptly report suspected security incidents;
  • Back up your important data;
  • Not share account access with unauthorized persons.

No Waiver of Legal Rights: This limitation does not waive your statutory rights under applicable data protection laws or consumer protection laws.

27. Compliance with Industry Standards

Security Standards: We align our security practices with recognized industry standards, including:

  • ISO/IEC 27001 (Information Security Management);
  • ISO/IEC 27701 (Privacy Information Management);
  • SOC 2 Type II (Service Organization Controls) - for enterprise services;
  • PCI DSS (Payment Card Industry Data Security Standard) - for payment processing;
  • NIST Cybersecurity Framework;
  • CIS Controls (Center for Internet Security).

Certifications: We pursue relevant security and privacy certifications to demonstrate compliance. Current certifications are available upon request.

Regular Assessments: We conduct periodic assessments to ensure ongoing compliance with industry standards and best practices.

28. Regulatory Disclosures

Compliance with Regulations: We comply with applicable data protection and privacy regulations, including:

Indian Regulations:

  • Information Technology Act, 2000;
  • IT (Reasonable Security Practices) Rules, 2011;
  • IT (Intermediary Guidelines) Rules, 2021;
  • Personal Data Protection Act (when enacted);
  • Reserve Bank of India (RBI) guidelines (for payment data);
  • Telecom Regulatory Authority of India (TRAI) guidelines (for SMS/telemarketing).

International Regulations:

  • General Data Protection Regulation (GDPR) - EU/EEA/UK;
  • California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA) - California, USA;
  • Other applicable state and international privacy laws.

Industry-Specific Compliance: If providing services to regulated industries (healthcare, finance), we comply with sector-specific regulations (HIPAA, GLBA, etc.) as contractually required.

29. Government Requests and Law Enforcement

Legal Obligations: We may disclose your personal data in response to lawful requests from government authorities, law enforcement, or regulatory agencies.

Types of Requests:

  • Court orders, subpoenas, or warrants;
  • Legal process under Indian law or applicable foreign law;
  • National security or defense requests;
  • Tax authority inquiries;
  • Regulatory investigations or audits;
  • Law enforcement investigations of crimes.

Review Process: Before complying, we:

  • Verify the legitimacy of the request;
  • Review the scope and legal basis;
  • Assess whether the request is overly broad;
  • Disclose only the minimum data necessary;
  • May seek legal counsel for complex requests;
  • Challenge requests we believe are invalid or excessive (where permitted).

User Notification: Where legally permitted and practical, we will:

  • Notify you of government requests for your data;
  • Provide you opportunity to challenge the request;
  • Delay notification if legally prohibited or would obstruct justice;
  • Notify you after legal restrictions expire (e.g., after investigation concludes).

Transparency Reporting: We may publish transparency reports disclosing aggregate statistics about government data requests (number received, complied with, challenged) to the extent permitted by law.

Emergency Disclosures: We may disclose data without legal process in emergencies involving imminent danger of death or serious physical injury, in accordance with applicable law.

30. Merger, Acquisition, or Sale of Assets

Business Transfers: If Debmedia Technologies LLP is involved in a merger, acquisition, bankruptcy, reorganization, sale of assets, or other business transaction, your personal data may be transferred or disclosed as part of that transaction.

What Happens to Your Data:

  • Personal data may be shared with potential acquirers (under confidentiality agreements);
  • Data may be transferred to the acquiring entity;
  • The acquiring entity becomes responsible for protecting your data;
  • This Privacy Policy continues to apply unless you receive notice of changes;
  • Your rights under this policy are transferred to the new entity.

Your Rights During Transfer:

  • We will notify you of any material changes to data handling practices;
  • If the acquiring entity has different privacy practices, we will notify you and obtain consent if required;
  • You may have the right to object or delete your data before transfer (depending on circumstances and applicable law);
  • The new entity must honor opt-out preferences and privacy choices you made with us.

Due Diligence: During due diligence, potential acquirers may access aggregated, anonymized data or limited personal data under strict confidentiality agreements.

31. Data Localization (If Applicable)

Current Data Storage Locations: Your personal data may be stored in data centers located in:

  • India (primary data storage);
  • United States (cloud infrastructure - AWS, Google Cloud, Azure);
  • European Union (for EU customers);
  • Singapore and other Asia-Pacific regions;
  • Other locations where our cloud providers operate.

India Data Localization: In compliance with Indian data localization requirements:

  • Critical personal data (as defined by Indian regulations) is stored exclusively in India;
  • Payment data is processed and stored in India per RBI guidelines;
  • Sensitive personal data may have a copy stored in India;
  • We comply with any sector-specific localization mandates.

Future Regulatory Compliance: If future Indian regulations require additional data localization:

  • We will comply with data localization requirements within specified timelines;
  • May establish India-only data residency options for enterprise clients;
  • Will update this Privacy Policy to reflect changes;
  • May need to modify Services or pricing to accommodate localization.

Data Residency Options: Enterprise clients may request data to be stored exclusively in India. Contact our sales team for data residency options and pricing.

32. Accessibility of This Policy

Easy Access: This Privacy Policy is available at:

  • Our website footer (link labeled "Privacy Policy");
  • During account registration (checkbox with link);
  • In account settings;
  • Direct URL: www.debmediatechnologies.com/privacy-policy;
  • Upon request via email.

Multiple Formats: This Privacy Policy is available in:

  • Web page format (primary version);
  • PDF download (for offline reading);
  • Plain text version (upon request);
  • Accessible format for screen readers.

Language: This Privacy Policy is provided in English. Translations may be available for convenience, but the English version is the official and controlling version in case of conflicts.

Print-Friendly: You may print this Privacy Policy for your records using your browser's print function.

33. Changes to This Privacy Policy

33.1 Notification of Updates

Right to Modify: We reserve the right to modify this Privacy Policy at any time to reflect changes in our practices, Services, legal requirements, or for other operational, legal, or regulatory reasons.

How We Notify You: When we make changes, we will:

  • Update the "Last Updated" date at the top of this Privacy Policy;
  • Post the revised Privacy Policy on our website;
  • For material changes: Send email notification to your registered email address;
  • For material changes: Display prominent notice on our website or in your account;
  • For significant changes: Obtain your consent where required by law.

Material Changes Include:

  • New purposes for processing personal data;
  • Sharing data with new categories of third parties;
  • Changes to data retention periods;
  • Changes to your rights or how to exercise them;
  • Changes to security practices;
  • Changes in data transfer practices;
  • New types of data collected.

Review Period: Material changes will not take effect until 30 days after notification, giving you time to review and decide whether to continue using Services.

33.2 Effective Date of Changes

When Changes Take Effect:

  • Non-material changes: Immediately upon posting;
  • Material changes: 30 days after notification (or longer if required by law);
  • Changes requiring consent: Upon your consent;
  • Legal compliance changes: As required by law (may be immediate).

Continued Use Constitutes Acceptance: Your continued use of Services after changes become effective constitutes acceptance of the updated Privacy Policy.

Disagreement with Changes: If you do not agree with changes:

  • You may stop using Services before changes take effect;
  • You may delete your account;
  • You may exercise your data deletion rights;
  • You may contact us to discuss concerns.

Version History: Previous versions of this Privacy Policy are archived and available upon request at legal@debmediatechnologies.com.

34. Governing Law and Jurisdiction

GOVERNING LAW: This Privacy Policy and all matters relating to your privacy and our data processing practices shall be governed by and interpreted in accordance with the laws of India, without regard to conflict of law principles.

EXCLUSIVE JURISDICTION:

  • Any disputes, claims, or legal proceedings arising out of or in connection with this Privacy Policy, your personal data, data breaches, privacy violations, or data protection matters shall be subject to the exclusive jurisdiction of the competent courts located in Hooghly, West Bengal, India.
  • You expressly agree that you shall not initiate or pursue any legal action, claim, or proceeding related to privacy or data protection in any other jurisdiction, whether domestic or international.
  • This exclusive jurisdiction applies regardless of where you are located, where you access our Services from, or where your data is processed.

WAIVER OF JURISDICTION OBJECTIONS:

  • By using our Services and providing your personal data, you irrevocably waive any objection to the jurisdiction of courts in Hooghly, West Bengal, India;
  • You waive any claim that such courts are an inconvenient forum;
  • You waive any claim of lack of personal jurisdiction;
  • You consent to personal jurisdiction in Hooghly, West Bengal for all privacy and data protection matters;
  • You agree not to challenge venue or jurisdiction on any grounds.

INTERNATIONAL USERS:

  • Users located outside India acknowledge and agree that any privacy disputes will be resolved exclusively in India;
  • No lawsuits may be filed in your home country or any other jurisdiction;
  • Foreign court judgments related to privacy matters will not be recognized unless first submitted to courts in Hooghly, West Bengal;
  • We will not submit to jurisdiction of any foreign courts for privacy matters.

REGULATORY AUTHORITY JURISDICTION:

  • For regulatory complaints (not lawsuits), you may contact relevant data protection authorities in your jurisdiction (e.g., EU supervisory authorities for GDPR, California AG for CCPA);
  • However, any legal proceedings or court actions must be brought exclusively in Hooghly, West Bengal, India;
  • Regulatory investigations may proceed in parallel with Indian court jurisdiction.

LANGUAGE OF PROCEEDINGS: All legal proceedings related to privacy matters shall be conducted in the English language.

SEVERABILITY: If any court holds that the exclusive jurisdiction provision is unenforceable for certain claims (e.g., mandatory consumer protection rights in your jurisdiction), such claims may proceed in the required jurisdiction, while all other claims remain subject to Hooghly, West Bengal jurisdiction.

ESSENTIAL TERM: This jurisdiction clause is an essential, non-negotiable element of this Privacy Policy. The Services are offered only on the condition that you accept exclusive Indian jurisdiction for privacy matters.

35. Contact Information for Privacy Concerns

35.1 Data Protection Contact

For questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

Debmedia Technologies LLP

Privacy & Data Protection Team

📧 Email: privacy@debmediatechnologies.com

📧 Alternative: hello@debmediatechnologies.com

📧 Legal/DPO: legal@debmediatechnologies.com

📍 Registered Address: Debmedia Technologies LLP, Hooghly, West Bengal, India

🌐 Website: www.debmediatechnologies.com

Response Times:

  • Privacy inquiries: 3-5 business days;
  • Data access requests: Within 30 days (GDPR/CCPA compliant);
  • Data deletion requests: Within 30 days;
  • Data breach notifications: Within 72 hours (if you are affected);
  • Urgent privacy concerns: 1-2 business days.

35.2 Grievance Redressal Mechanism

Grievance Officer (As Required by Indian IT Rules):

Grievance Officer for Privacy Matters

Name: Debasis Bhattacharjee (Founder & CEO)

Designation: Grievance Officer

📧 Email: grievance@debmediatechnologies.com

📧 Alternative: legal@debmediatechnologies.com

📍 Address: Debmedia Technologies LLP, Hooghly, West Bengal, India

Working Hours: Monday-Friday, 10:00 AM - 6:00 PM IST

Filing a Grievance:

  1. Send email to grievance officer with "PRIVACY GRIEVANCE" in subject line;
  2. Include your name, contact information, and account details;
  3. Describe the privacy concern in detail;
  4. Attach supporting evidence if applicable;
  5. State the resolution you are seeking;
  6. We will acknowledge receipt within 24 hours;
  7. We will investigate and respond within 30 days.

Escalation: If you are not satisfied with the Grievance Officer's response, you may:

  • Request escalation to senior management;
  • File complaint with Indian data protection authorities (when designated);
  • For EU users: Contact your local supervisory authority;
  • For California users: Contact California Attorney General;
  • Seek legal remedies through courts in Hooghly, West Bengal, India (Section 34).

Data Subject Rights Requests: Use the contact information above to exercise your rights under Section 14, 15, 16, or 17.

36. Acceptance of This Policy

BY USING OUR SERVICES, CREATING AN ACCOUNT, OR PROVIDING YOUR PERSONAL INFORMATION, YOU ACKNOWLEDGE THAT YOU HAVE READ, UNDERSTOOD, AND AGREE TO BE BOUND BY THIS PRIVACY POLICY.

You acknowledge and agree that:

  • You have read this entire Privacy Policy;
  • You understand how we collect, use, and share your personal data;
  • You consent to our data processing practices as described herein;
  • You understand your rights and how to exercise them;
  • You accept the governing law and jurisdiction provisions (Hooghly, West Bengal, India);
  • You have had the opportunity to ask questions or seek clarification;
  • You have the authority to provide personal data (yours or on behalf of your organization);
  • You are at least 18 years of age (or age of majority in your jurisdiction).

If you do not agree to this Privacy Policy, you must immediately cease all use of our Services and not provide any personal information.

Methods of Acceptance: You accept this Privacy Policy by:

  • Clicking "I Accept" or "I Agree" during registration;
  • Checking a consent checkbox during account creation;
  • Using our Services after being presented with this Privacy Policy;
  • Providing personal information through our website or communications;
  • Continuing to use Services after changes to this Privacy Policy take effect.

Binding Agreement: This Privacy Policy forms a binding agreement between you and Debmedia Technologies LLP regarding the processing of your personal data.

📅 Privacy Policy Information

Version: 1.0

Effective Date: January 25, 2026

Last Updated: January 25, 2026

Next Review: July 2026 (or as needed)

Governing Law: India (Laws of India)

Jurisdiction: Hooghly, West Bengal, India (Exclusive)

Contact: privacy@debmediatechnologies.com

⚖️ Your Privacy Rights

YOU HAVE THE RIGHT TO:

  • Access your personal data
  • Correct inaccurate information
  • Request deletion of your data
  • Opt-out of marketing communications
  • Withdraw consent at any time
  • File complaints with authorities
  • Contact our Grievance Officer

TO EXERCISE YOUR RIGHTS: Email privacy@debmediatechnologies.com

FOR GRIEVANCES: Email grievance@debmediatechnologies.com

Debmedia Technologies LLP | Hooghly, West Bengal, India

D
Debmedia

Engineering Intelligent Software for Modern Businesses

📧 hello@debmediatechnologies.com

Services

  • AI Software Solutions
  • SaaS Platform Development
  • Enterprise Web Applications
  • Automation & Data Engineering
  • WordPress & E-commerce
  • Custom Software Development

Company

  • About Us
  • Blog & Insights
  • Contact Us

Get In Touch

  • 📧 hello@debmediatechnologies.com
  • ⚖️ Legal Inquiries

🌍 Debmedia House,7/E/B Vivekananda Road, West Bengal, India

Serving clients globally

© 2026 Debmedia Technologies LLP Official Website. All rights reserved.

Privacy Policy | Terms & Conditions | Cookie Policy | Refund Policy