Privacy Policy
Madsun Media • Last Updated: May 2025
At Madsun Media, we are committed to protecting your personal information and being transparent about how we use it. This policy applies to all visitors and customers of madsunmedia.com.
1 Introduction & Scope
This Privacy Policy describes how Madsun Media (“we,” “us,” or “our”), a digital marketing and web development agency headquartered in Ludhiana, Punjab, India, collects, processes, and protects personal data of individuals (“you”) who interact with our website, services, or communications.
This policy is designed to comply with the General Data Protection Regulation (GDPR) for visitors from the European Union, and the Digital Personal Data Protection Act, 2023 (DPDP Act) for individuals in India, along with all applicable data protection laws.
By using our website or services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please discontinue use of our services.
2 What Data We Collect
- Full name
- Email address
- Phone number
- Business name and details
- Service requirements
- Billing information (if applicable)
Provided by you via contact forms, quote requests, email, or consultations.
- IP address (anonymised)
- Browser type & version
- Operating system
- Pages visited & duration
- Referring website
- Device type
Collected automatically via cookies and analytics tools when you visit our site.
We do not collect sensitive personal data (such as health, biometric, financial, or caste data) unless explicitly required for a specific service and with your prior written consent.
3 How We Use Your Data
Service Delivery
To fulfil contracts, respond to inquiries, send proposals, and manage client projects.
Analytics & Improvement
To understand how visitors use our website and improve performance, content, and UX.
Marketing Communications
To send newsletters, offers, and updates — only with your explicit consent.
Legal & Compliance
To comply with applicable laws, resolve disputes, and enforce our terms.
Ad Measurement
To measure the effectiveness of Google Ads and Meta advertising campaigns.
Security
To detect fraud, abuse, and protect the integrity of our systems and users.
4 Cookies & Tracking Technologies
We use cookies and similar technologies to enhance functionality, measure traffic, and run advertising campaigns. You can manage your preferences through our cookie banner or your browser settings at any time.
| Category | Examples | Purpose | Required? |
|---|---|---|---|
| Essential | Session, CSRF tokens | Site functionality & security | Always |
| Analytics | Google Analytics 4 (_ga, _gid) | Traffic measurement, UX improvement | Consent |
| Marketing | Meta Pixel, Google Ads (_gcl_au) | Ad targeting & conversion tracking | Consent |
You may withdraw cookie consent at any time by clearing your browser cookies and revisiting our site. Note: disabling certain cookies may affect site functionality.
5Legal Bases for Processing (GDPR — EU Visitors)
For visitors from the European Economic Area (EEA), we rely on the following legal bases under Article 6 GDPR:
- Consent (Art. 6(1)(a)): Analytics cookies, marketing cookies, newsletter subscriptions.
- Contract Performance (Art. 6(1)(b)): Processing data to deliver agreed services to clients.
- Legitimate Interests (Art. 6(1)(f)): Fraud prevention, security, direct B2B marketing to existing contacts.
- Legal Obligation (Art. 6(1)(c)): Compliance with tax, accounting, and applicable laws.
6Digital Personal Data Protection Act 2023 (India)
As a Data Fiduciary under the DPDP Act 2023, Madsun Media is committed to the following obligations:
Lawful Purpose
We process personal data only for specified, clear, and lawful purposes for which consent has been obtained.
Data Minimisation
We collect only the personal data that is necessary for the stated purpose.
Consent Management
Consent is obtained in a clear, plain-language notice before or at the time of data collection.
Data Principal Rights
We honour all rights of Data Principals including access, correction, erasure, and grievance redressal.
Data Localisation
Where applicable, personal data of Indian residents is stored and processed within India or in compliant jurisdictions.
Breach Notification
In case of a personal data breach, we will notify the Data Protection Board and affected individuals as required.
7 Your Rights Under GDPR
Right of Access
Request a copy of all personal data we hold about you at any time.
Right to Rectification
Ask us to correct inaccurate or incomplete personal data.
Right to Erasure
Request deletion of your personal data ("right to be forgotten") where no legal obligation to retain exists.
Right to Restrict Processing
Ask us to pause the processing of your data in certain circumstances.
Right to Data Portability
Receive your data in a structured, machine-readable format to transfer to another provider.
Right to Object
Object to processing based on legitimate interests or direct marketing at any time.
8 Your Rights Under DPDP Act 2023
Right to Access Information
Obtain a summary of the personal data processed and the processing activities undertaken by us.
Right to Correction & Erasure
Request correction of inaccurate data, or erasure of data no longer needed for its original purpose.
Right to Grievance Redressal
File a grievance with our designated Data Protection Officer. We will respond within 30 days.
Right to Nominate
Nominate another individual to exercise your data rights in the event of death or incapacity.
To exercise any of these rights, email us at privacy@madsunmedia.com. We will respond within 30 days of receiving your request. We may need to verify your identity before fulfilling the request.
9 Data Sharing & Third Parties
We do not sell, rent, or trade your personal data.
We may share data with trusted third-party service providers only to the extent necessary for the services described in this policy:
- Google (Analytics & Ads): Website analytics, ad performance measurement (subject to consent).
- Meta Platforms: Facebook/Instagram ad targeting and conversion tracking (subject to consent).
- HubSpot: CRM and live chat support.
- Hosting & Infrastructure: Cloud providers (e.g., Vercel) who host our website under GDPR-compliant DPAs.
- Legal Authorities: When required by applicable law, court order, or regulatory request.
10 International Data Transfers
Some of our third-party service providers (e.g., Google, Meta) may process data outside of India or the EU. Where such transfers occur, we ensure appropriate safeguards are in place:
- GDPR: Standard Contractual Clauses (SCCs) or adequacy decisions.
- DPDP Act: Transfers only to countries / organisations notified by the Central Government as adequate, or with appropriate contractual obligations.
11 Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected:
| Data Type | Retention Period |
|---|---|
| Contact & enquiry data | 3 years after last interaction |
| Client project data | Duration of engagement + 5 years |
| Analytics data (GA4) | 14 months (Google default) |
| Cookie consent records | 1 year |
| Financial/billing records | 7 years (legal obligation) |
12 Data Security
We implement industry-standard technical and organisational security measures including:
- HTTPS / TLS encryption for all data in transit
- Access controls and role-based permissions for staff
- Regular security reviews and penetration testing
- Secure cloud infrastructure with reputable providers
No method of transmission over the internet is 100% secure. In the event of a personal data breach, we will notify affected individuals and relevant authorities within the timeframes required by applicable law.
13 Children's Privacy
Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. Under the DPDP Act 2023, processing of data of children requires verifiable parental consent. If you believe we have inadvertently collected data from a minor, please contact us immediately at privacy@madsunmedia.com and we will delete it promptly.
14 Third-Party Links
Our website may contain links to external websites. We are not responsible for the privacy practices of those sites. We recommend reading their respective privacy policies before providing any personal information.
15 Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. Material changes will be communicated by updating the “Last Updated” date at the top of this page and, where appropriate, via email or a notice on our website.
Contact Our Privacy Team
For data requests, GDPR / DPDP rights queries, or any privacy concerns, please reach out. We aim to respond within 30 days.
Harkrishan Nagar, Shimlapuri
Ludhiana, Punjab 141003
India
You also have the right to lodge a complaint with the Data Protection Board of India (DPDP Act) or the relevant supervisory authority in your country (GDPR).