Draft for legal review. This policy is being finalised with our legal adviser. It describes the tools and practices in use on digiator.com in plain English.

Trust & Data

Privacy Policy

How Digiator collects, uses, protects and retains your data — explained in plain English.

_Last updated: 6 August 2026_

At Digiator, we’d rather you understand what happens to your data than agree to something you didn’t read. In plain language, this policy covers what we collect and why, who else is involved, and how long we keep it. It also sets out your rights and choices. Unclear on something? Ask us — the contact details are at the end.

This policy covers the Digiator website (digiator.com) and the enquiries, calls and messages that start from it. It works alongside our Cookies Policy and our Terms.

The short version

We collect the details you send us — mainly through our contact and consultation forms, WhatsApp, email and phone — so we can understand your business problem and respond.
Our website uses cookies and analytics/advertising tools (Google, Microsoft and Meta) to measure traffic, improve the experience, and run our marketing. You control the non-essential ones through our cookie banner.
We do not sell your personal data, and we do not use artificial intelligence to process the enquiry data you submit through this website.
We keep website enquiry data for about 18 months unless we have a genuine reason — like an ongoing project or a legal/tax obligation — to keep it longer.
You have rights over your data — including access, correction, deletion, and withdrawing consent — and a straightforward way to reach us or raise a grievance.

The rest of this page is the detail behind that summary.

1. Who we are (the business responsible for your data)

Digiator is a sole proprietorship, trading as “Digiator – Website Development and Digital Marketing Agency,” based in Indore, Madhya Pradesh, India. We help businesses across India, and selected international clients, grow through marketing, technology, data and custom software.

For the purposes of India’s Digital Personal Data Protection Act, 2023, Digiator is the Data Fiduciary for the personal data described here. For visitors in the EEA or UK, Digiator is the data controller. In everyday terms: we are the business that decides what data is collected on this website and why.

You can reach us at:

Email (data & privacy queries): operations@digiator.com
Email (new enquiries): growth@digiator.com
Phone / WhatsApp: +91 93431 17867
Location: Indore, Madhya Pradesh, India

Full contact and grievance details are in Sections 13 and 15.

2. The data we collect

a) Information you give us directly. When you use a contact or consultation form, message us on WhatsApp, email or call us, we collect what you choose to share — typically your name, business or organisation, phone/WhatsApp number, work email, and a description of what you need help with. If a form includes a consent checkbox, we also record that you gave consent.

b) Information collected automatically. When you browse the website, we and our tools collect standard technical and usage data — for example your IP address, device and browser type, pages viewed, links clicked, referring page, approximate location, and how you move through the site. One of our tools (Microsoft Clarity) can capture anonymised session recordings and heatmaps of on-page behaviour to help us improve usability. These are set through cookies and similar technologies — see our Cookies Policy.

c) Marketing and campaign information. If you arrive from one of our ads or campaigns, we may collect campaign, source and click information (for example UTM tags or click identifiers) so we can measure and improve our marketing.

d) Payment information. If you become a client and make a payment, that payment is handled by your bank or a third-party payment provider. We receive confirmation of the transaction but we do not store your full card or bank-account details on our systems (see Section 6).

We do not seek sensitive personal data through this website, and we ask that you do not include health details, identity documents, or other sensitive information in a website enquiry. Client-project data is handled separately under the agreement we sign with each client.

3. Where your data comes from

Most of the data we hold comes directly from you when you submit a form or contact us. Some is collected automatically by cookies and analytics tools as you use the site. A limited amount may come from third-party platforms — for example, aggregated or campaign-level reporting from Google and Meta about how our ads perform, or a lead you submitted through a platform’s own lead form.

4. Why we use your data (purposes)

We use personal data to:

respond to your enquiry and run an initial consultation about your business;
understand where your growth or operations are blocked and prepare a proposal where there’s a genuine fit;
deliver, support and improve the services we’ve agreed with you;
follow up on your enquiry (by phone, WhatsApp or email) within a reasonable time;
operate, secure, measure and improve our website and its usability;
run, measure and optimise our advertising and marketing;
process payments and keep proper business, tax and accounting records; and
meet our legal and regulatory obligations, and protect against fraud or misuse.

We do not sell your personal data. We do not use it to make automated decisions that produce legal or similarly significant effects about you. And, as noted, we do not use AI to process the enquiry data you submit through this website.

5. Our legal basis for using your data

Under India’s DPDP Act, 2023, we rely primarily on your consent — given when you submit a form or agree to non-essential cookies — and on certain legitimate uses permitted by the Act, such as responding to a request you have made to us. You can withdraw consent at any time (Section 12).

For visitors in the EEA/UK, under the GDPR, our lawful bases are:

Consent for non-essential cookies, analytics, advertising, and marketing communications.
Contract / steps taken at your request to respond to your enquiry and to deliver services you’ve engaged us for.
Legitimate interests to secure and improve our website, understand basic site performance, and run our business responsibly, balanced against your rights.
Legal obligation to keep tax, accounting and compliance records.

6. Contact forms, WhatsApp and payments

Contact and consultation forms. Our website forms are simple: when you submit one, the details are routed to our email inbox so a member of our team can read and respond to them. Forms are the start of a conversation, not an automated pipeline. We usually respond within one hour, and enquiries are accepted 24/7.

WhatsApp. If you contact us via the WhatsApp button, your message and number are visible to us in WhatsApp and are subject to WhatsApp’s own privacy terms as well as this policy.

Payments. If you engage us and make a payment, it is handled through your bank or a third-party payment provider under that provider’s own security and privacy standards. We receive only the information needed to confirm and reconcile the payment; we do not store your full card or bank-account details on our systems.

7. Cookies, analytics and advertising tools

Our website uses cookies and similar technologies, managed through Google Tag Manager, to run the following tools:

Tool	What it does
Google Analytics 4 (GA4)	Measures website traffic and how people use the site, so we can improve it.
Microsoft Clarity	Captures anonymised session recordings and heatmaps to help us spot usability problems.
Google Ads	Measures ad performance and supports remarketing so our ads reach relevant audiences.
Meta Pixel	Measures the performance of our Facebook/Instagram ads and supports remarketing.

Essential cookies that make the site work are always on. Non-essential cookies — analytics, advertising and session-recording — are set only where you allow them through our cookie banner, and you can change your choice at any time. For the full list, purposes and durations, and to manage your preferences, see our Cookies Policy.

These tools are provided by Google, Microsoft and Meta. When they collect data through our website they also process it for their own purposes as independent controllers, under their own privacy policies. We choose established providers and configure them responsibly, and we remain responsible as the Data Fiduciary for the personal data we ourselves collect and control — we don’t disclaim that responsibility. We can’t, however, control how these companies operate their own platforms; we encourage you to read their policies (linked in our Cookies Policy).

8. Who else processes your data (service providers)

To run our website and business, we share limited personal data with trusted service providers who process it on our instructions and only for the purposes above. These fall into clear categories:

Website hosting and platform our website runs on WordPress and is hosted by Hostinger.
Analytics, advertising and tag management Google (Analytics, Ads, Tag Manager), Microsoft (Clarity) and Meta (Pixel), as described in Section 7.
Communication and email the email and messaging services that receive and store your enquiry so we can reply.
Payments where a client pays us electronically, a bank or third-party payment provider processes the transaction under its own security standards.
Professional advisers accountants or legal advisers, where necessary.

Where the law requires it, we put appropriate data-processing terms in place with these providers. We do not sell or rent your personal data to anyone. We may disclose data if required by law, court order or a lawful government request, or to protect our rights, our users or the public.

9. International data transfers

Digiator is based in India, and we primarily process data here. Some of our service providers (for example Google, Microsoft and Meta) are global companies and may store or process data on servers outside India, including in other countries. Where personal data of EEA/UK individuals is transferred internationally, we rely on appropriate safeguards such as the providers’ standard contractual clauses or equivalent mechanisms. Any cross-border processing is carried out in line with applicable law, including the DPDP Act and, where relevant, the GDPR.

10. How long we keep your data

We keep personal data only for as long as we need it:

Website enquiry and contact data: about 18 months from your last interaction with us, after which it is deleted or anonymised — unless we have a genuine reason to keep it longer (see below).
Client and project records: for the duration of our engagement and for as long afterwards as we need for support, warranty, dispute resolution and our legal, tax and accounting obligations.
Analytics data: retained according to each platform’s settings and its own retention policies.
Legal, tax and accounting records: for the period required by Indian law.

11. How we protect your data

We use reasonable technical and organisational measures to protect personal data — including access controls, established hosting and third-party platforms, and limiting who inside Digiator can see your enquiry. No website or online service can be guaranteed to be 100% secure, so we cannot promise absolute security; but we take protecting your data seriously and review our practices as our tools and obligations change. If a data breach occurs that affects you, we will act in line with our legal obligations, including notifying the Data Protection Board of India and affected individuals where required.

12. Your rights and how to use them

Depending on where you are, you have rights over your personal data. Under India’s DPDP Act, 2023, as a Data Principal you can ask us to:

Access get a summary of the personal data we hold about you and how we process it;
Correct, complete or update fix data that is inaccurate or out of date;
Erase delete personal data we no longer have a lawful reason to keep;
Nominate nominate another person to exercise your rights if you die or become incapacitated;
Withdraw consent at any time, as easily as you gave it; and
Grievance redressal raise a concern about how we’ve handled your data (Section 15).

For visitors in the EEA/UK, under the GDPR you also have the rights to restrict or object to certain processing, and to data portability.

Withdrawing consent. You can withdraw consent to marketing at any time — reply “STOP”/”unsubscribe,” change your cookie choices via the banner, or email us. Withdrawing consent doesn’t affect processing we already carried out lawfully, and may mean we can no longer provide a particular service.

To exercise any right, email operations@digiator.com with your request. We may need to verify your identity, and we’ll respond within the timeframes required by law. Using these rights is free unless a request is clearly unfounded or excessive.

13. Children’s data

Our website and services are meant for businesses and the adults who run them. They are not directed at children under 18, and we do not knowingly collect the personal data of children. Under the DPDP Act, processing a child’s data requires verifiable consent from a parent or lawful guardian. If you believe a child has provided us with personal data, please contact us and we will delete it.

14. Changes to this policy

We may update this policy as our tools, services or legal obligations change. When we do, we’ll revise the “Last updated” date at the top, and for significant changes we’ll take reasonable steps to make the update clear. Please check back from time to time.

15. Contact us and how to raise a grievance

For any question about this policy or your data, or to exercise your rights, contact us:

Email: operations@digiator.com
Phone / WhatsApp: +91 93431 17867
Location: Indore, Madhya Pradesh, India

Grievance Officer. In line with the DPDP Act, you can raise a data-protection grievance with our Grievance Officer, Kanchan Sonvani, Co-founder, at operations@digiator.com and +91 93431 17867. We aim to acknowledge promptly and resolve grievances within the timeframe required by law.

If you’re not satisfied with our response, you may escalate to the Data Protection Board of India. If you’re in the EEA/UK, you also have the right to complain to your local data-protection supervisory authority.

To discuss working with us, use Contact or Request a Free Consultation — a 20–30 minute call with a co-founder, no pressure, just clarity.

End of public copy.