Privacy notice

This notice explains what personal data A2Z Digital collects through this website, why we collect it, how long we keep it, and the choices you have. It is written to the Digital Personal Data Protection Act, 2023.

Who we are

A2Z Digital is a digital marketing agency and software company operating from India. For the data described here, we are the Data Fiduciary — we decide why and how it is used. Our registered details and our Grievance Officer are listed at the end of this page.

What we collect, and why

We only ask for what we need to answer you.

Enquiry forms (contact, quote, demo, notify me): your name, mobile number, and optionally your email, company, city, website and what you told us about your requirement. We use this to reply to your enquiry and to prepare a proposal. Your mobile number is required because it is how we reply.
Job applications: your name, email, mobile number, CV, LinkedIn profile and anything you write in your covering note. We use it to assess your application.
Newsletter: your email address, used to send you the newsletter you asked for.
Data rights requests: your name, email, optionally your mobile number, and what you are asking for. We use it to confirm who you are and to act on the request.
Cookies and analytics: only with your permission. See our cookie policy.
Server logs: your IP address and browser details are recorded briefly for security, to detect abuse of our forms. These are kept for 30 days.

The basis on which we use it

We rely on your consent, given when you submit a form or choose your cookie settings. Where consent is needed to contact you at all, you cannot submit the form without it — we say so on the form. Consent for marketing is always a separate, optional tick box, never pre-ticked, and you can withdraw it at any time without affecting anything else.

Who else sees it

We do not sell your personal data, and we do not share it for anyone else's marketing. It is handled by these processors, on our instructions:

OneHub — our own customer relationship system, where enquiries are worked on by our sales team.
Zoho (Zoho Mail, ZeptoMail and Zoho Campaigns) — email delivery and our newsletter list.
Our hosting provider — runs the servers this site and its database sit on.
Google and Meta — analytics and advertising measurement, and only if you allowed those cookies.

We may also disclose data where the law requires it, for example to a court or a regulator.

How long we keep it

What	How long
Enquiry details on this website	Deleted 30 days after the enquiry reaches our CRM
Enquiries inside our CRM	While we are in contact with you about your requirement, and for our records afterwards
Job applications and CVs	12 months after the role closes; 24 months if you asked us to keep your profile on file
Newsletter subscription	Until you unsubscribe
Records of consent	As long as the data it covers, plus one year
Data rights requests	Three years, as evidence that we handled them
Server logs	30 days

How we protect it

Enquiry details, applications and rights requests are encrypted where they are stored. Phone numbers and email addresses are also stored as one-way hashes, so we can find your records without holding a readable copy. CVs are stored outside the public part of the site and can only be downloaded by our hiring team through a link that expires in minutes, and every download is logged. Access to our admin requires two-factor authentication.

Your rights

Under the DPDP Act you can ask us to:

tell you what personal data we hold about you and what we have done with it;
correct anything that is wrong or incomplete;
delete your data;
stop using it for marketing, by withdrawing your consent;
nominate someone to exercise these rights for you if you are unable to;
raise a complaint about how your data has been handled.

Use our data rights request form. We will email you a link to confirm the request is really from you — we do not act until you confirm, because otherwise anyone could ask us to delete somebody else's data. We answer access, correction, deletion and nomination requests within 15 days, act on a withdrawal of consent within 3 days, and resolve complaints within 30 days.

If you are not satisfied with how we have handled a complaint, you may escalate it to the Data Protection Board of India.

Children

This website is meant for businesses and is not directed at children. We do not knowingly collect data from anyone under 18. If you believe a child has sent us personal data, tell our Grievance Officer and we will delete it.

Changes to this notice

If we change how we use personal data, we will update this page and the date shown at the top. Where the change affects something you consented to, we will ask you again.