Privacy Policy

01Introduction & Company Information

BRATA MEDIA PRESS is a full-service digital agency headquartered in Kolkata, West Bengal, India — founded by Mr. Brata Chakraborty, Computer Science Engineer and PhD scholar from the Indian Institute of Technology (IIT) Madras. Our services encompass software development, website design and development, mobile application development, digital marketing, SEO, e-commerce, press release distribution, IoT, blockchain development, and IT consultancy.

For the purposes of data protection law, BRATA MEDIA PRESS is the Data Controller in respect of the personal data we process.

02Personal Data We Collect

We collect personal data from you in the following ways and categories:

2.1 Data You Provide Directly

• Full name, email address, phone number / WhatsApp number, and company name submitted via our contact or quotation form
• Country of residence and preferred language
• Project description, budget range, service requirements, and timeline preferences
• Reference URLs, uploaded files, or other materials shared during project discussions
• Payment and billing information processed through our secure payment partners (we do not store raw card data)
• Communications you send us by email, phone, WhatsApp, or any other channel

2.2 Data Collected Automatically

• IP address, browser type and version, operating system, and device type
• Pages visited, referral URLs, time spent on pages, and click behaviour (via Google Analytics)
• Cookie identifiers and session data (see Section 8 and our separate Cookie Policy)
• Location data derived from IP address (country/region level only)

2.3 Sensitive Personal Data

We do not intentionally collect sensitive personal data (such as health information, biometric data, or financial account details beyond payment processing). Please do not submit such data through our standard forms. Any such submission will be deleted promptly.

03How We Use Your Personal Data

We process your personal data for the following purposes:

We will never sell, rent, or trade your personal data to third parties for their own marketing purposes.

04Legal Basis for Processing

We process your personal data on the following legal bases under applicable Indian data protection law and internationally recognised principles:

• Consent: Where you have explicitly consented, for example by submitting our enquiry form or subscribing to communications.
• Contractual Necessity: Where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract.
• Legal Obligation: Where we must process data to comply with Indian law, tax obligations, or court orders.
• Legitimate Interests: Where we have a legitimate business interest that is not overridden by your rights — for example, website security monitoring, fraud prevention, and improving our services.

05Data Sharing & Third Parties

We may share your personal data with third-party service providers strictly for the purpose of delivering our services:

• Payment Processors: Razorpay, Stripe, or PayPal — for secure payment processing. Each operates under their own privacy and security policies.
• Cloud & Hosting Providers: AWS, Google Cloud, or equivalent — for data storage and processing infrastructure.
• Email Service Providers: For delivering transactional and service emails.
• Analytics Providers: Google Analytics (data anonymised where possible).
• Project Collaboration Tools: Tools used internally (e.g. project management platforms) under strict data handling agreements.
• Legal & Regulatory Authorities: We will disclose data when required by law, court order, or government authority under the IT Act, 2000 or any other applicable law.

All third-party service providers are contractually required to process your data securely and only for specified purposes.

06Data Retention

We retain your personal data for the following periods:

• Client project data: For the duration of the contract and 7 years thereafter, as required for tax and legal records.
• General enquiry data: Up to 2 years from the date of last contact.
• Marketing contact data: Until you withdraw consent or unsubscribe, whichever is earlier.
• Website analytics data: Up to 26 months (Google Analytics default).
• Server logs: Up to 90 days.

Where data is no longer required, we will securely delete or anonymise it in accordance with our data disposal procedures.

07Data Security

We implement appropriate technical and organisational security measures in accordance with Rule 8 of the IT (SPDI) Rules, 2011 and internationally recognised security standards, including:

• SSL/TLS encryption for all data transmitted to and from our website
• Encrypted storage of sensitive data at rest
• Access controls limiting data access to authorised personnel only
• Regular security audits and vulnerability assessments
• Staff training on data protection and information security
• Incident response procedures in the event of a data breach

In the event of a data breach that is likely to result in a risk to your rights, we will notify you and the relevant authority without undue delay.

08Cookies

Our website uses cookies to improve your browsing experience and analyse website traffic. We use the following categories of cookies:

• Strictly Necessary: Essential for the website to function correctly.
• Performance & Analytics: Google Analytics cookies to understand how visitors use our site.
• Functional: Cookies that remember your language preference and other settings.

You can manage your cookie preferences through your browser settings or via our Cookie Policy. Please see our full Cookie Policy for detailed information.

09Your Rights

Under Indian data protection law and internationally recognised principles, you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you.
• Right of Correction: Request correction of inaccurate or incomplete data.
• Right of Erasure: Request deletion of your data where we no longer have a legal basis to retain it.
• Right to Withdraw Consent: Withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
• Right to Object: Object to processing based on legitimate interests, including direct marketing.
• Right to Data Portability: Receive your data in a structured, commonly used format.

To exercise any of these rights, contact us at privacy@bratamedia.press. We will respond within 30 days.

10Third-Party Links

Our website may contain links to third-party websites. These websites have their own privacy policies, and we do not accept any responsibility or liability for those policies or their content. We encourage you to read the privacy policy of every website you visit.

11Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal data without parental consent, we will delete that data promptly. If you believe a child has submitted data to us, please contact us at privacy@bratamedia.press.

12International Data Transfers

BRATA MEDIA PRESS serves clients in India, Mexico, Germany, and internationally. Your data may be processed or stored on servers located outside India. Where data is transferred internationally, we ensure adequate safeguards are in place, including contractual protections with our service providers, consistent with the IT Act, 2000 and applicable international standards.

13Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, technology, or our business practices. When we do, we will revise the "Last Updated" date at the top of this page. We encourage you to periodically review this page to stay informed. Continued use of our website or services after any changes constitutes your acceptance of the revised policy.

14Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, please contact our Data Protection representative:

You also have the right to lodge a complaint with the relevant government authority under the IT Act, 2000 — CERT-In (Indian Computer Emergency Response Team): www.cert-in.org.in