Privacy Policy

1. Introduction

This Privacy Policy describes how Clickretina Private Limited ("Clickretina", "we", "our", or "us") collects, uses, stores, and shares information about you when you visit our website at https://clickretina.com, use our services, or interact with us in any other way.

Clickretina Private Limited is a Private Limited company incorporated under the Companies Act, 2013 and registered under the Goods and Services Tax Act with GSTIN 09AAKCC4313K1ZJ. Our registered office is at 2/82, Vineet Khand, Gomti Nagar, Lucknow – 226010, Uttar Pradesh, India.

This Policy applies to all personal data we process about visitors to our website, prospective clients who contact us through our contact form, and clients who engage our services. By using our website or services, you acknowledge that you have read and understood this Policy.

This Policy is compliant with the Digital Personal Data Protection Act, 2023 (DPDPA 2023) and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

2. Information We Collect

We collect the following categories of personal data:

Contact information from our enquiry form: When you submit our contact form, we collect your name, email address, phone number (if provided), the service you are enquiring about, and your message. This information is provided voluntarily by you.

Usage data and analytics: We collect information about how you interact with our website, including pages visited, time spent on pages, referring URLs, and general navigation patterns. This data is collected via Google Analytics 4 and is aggregated and anonymised where possible.

Technical data: When you visit our website, our servers and analytics tools may collect your IP address (which may be truncated or anonymised), browser type and version, device type, operating system, and time-zone setting.

Cookies and local storage: We use session cookies, analytics cookies (via Google Analytics 4), and browser localStorage to remember your theme preference (light/dark mode). See Section 5 for more details.

Communication records: If you email us or we correspond with you via email, we retain copies of that correspondence including your email address and message content.

What we do not collect: We do not directly collect credit or debit card numbers, UPI PINs, bank account details, or any other sensitive financial credentials. Payment processing is handled entirely by our payment processor partners (see Section 4).

3. How We Use Your Information

We use the personal data we collect for the following purposes:

Service delivery: To respond to your enquiries, provide quotations, onboard you as a client, deliver agreed services (SEO retainers or Android app development), and manage our ongoing client relationship with you.

Communication: To send you service-related emails such as onboarding confirmations, monthly reports, project milestone updates, invoices, and responses to your queries.

Marketing communications: With your consent, we may send you information about our services, case studies, or promotions. You may opt out of marketing communications at any time by replying to any such email with the word "Unsubscribe" or by contacting us at [email protected].

Analytics and improvement: To understand how visitors use our website so we can improve its content, structure, and performance.

Legal and compliance: To comply with applicable Indian laws and regulations, including maintaining records required under the Companies Act, 2013, the Income Tax Act, 1961, and the GST framework.

4. Sharing With Third Parties

We do not sell, rent, or trade your personal data to any third party. We share data only with the following categories of service providers strictly necessary for delivering our services:

Resend (email delivery): We use Resend to process and deliver transactional emails. Your email address and message content are transmitted to Resend's servers to enable delivery. Resend operates under appropriate data processing agreements.

Google Analytics (website analytics): We use Google Analytics 4 to understand website usage. Google may process your IP address and usage data on servers outside India. We have configured GA4 with IP anonymisation where possible.

Vercel (website hosting): Our website is hosted on Vercel's infrastructure. Your requests to our website pass through Vercel's servers. Vercel maintains appropriate security standards.

Payment processors: Where applicable, payments may be processed via Cashfree, Razorpay, or PhonePe. These processors handle your payment data under their own privacy policies and PCI-DSS compliance frameworks. We do not receive or store your card or banking credentials.

Legal authorities: We may disclose your personal data to government authorities, courts, or law enforcement agencies if required to do so by applicable Indian law or a valid legal order.

5. Cookies

Our website uses the following types of cookies and local storage:

Session cookies: Temporary cookies that expire when you close your browser. Used for basic website functionality.

Google Analytics 4 cookies: GA4 places analytics cookies (such as _ga and _ga_*) on your browser to distinguish users and sessions, enabling us to analyse website usage. These cookies may persist for up to 2 years.

localStorage (theme preference): We store your light/dark theme preference in your browser's localStorage. This data stays on your device and is not transmitted to our servers.

How to disable cookies: You can configure your browser to refuse all cookies or to indicate when a cookie is being set. You may also opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on. Note that disabling cookies may affect the functionality of certain parts of our website.

6. Data Retention

We retain your personal data for the following periods:

Contact form enquiries: Data submitted through our contact form is retained for 2 years from the date of submission. If you become a client, your data is retained as described below.

Client project data: Data related to active and completed client engagements (including correspondence, project files, invoices, and reports) is retained for 5 years from the end of the engagement, as required for tax and legal compliance under Indian law.

Analytics data: Google Analytics 4 data is retained per our GA4 settings, which we have configured to the default retention period of 14 months. After this period, GA4 automatically deletes user and event data.

After the applicable retention period, we securely delete or anonymise your personal data.

7. Your Rights Under DPDPA 2023

Under the Digital Personal Data Protection Act, 2023, you have the following rights with respect to your personal data processed byClickretina Private Limited:

Right to access: You have the right to obtain a summary of the personal data we hold about you and the processing activities we perform on it.

Right to correction: You have the right to correct any inaccurate or incomplete personal data we hold about you.

Right to erasure: You have the right to request that we erase your personal data, subject to any legal obligations we have to retain it (for example, accounting and tax records).

Right to withdraw consent: Where we process your personal data on the basis of your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Right to nominate: Under DPDPA 2023, you have the right to nominate another individual to exercise your data rights in the event of your death or incapacity.

Right to grieve: You have the right to raise a grievance with our Grievance Officer (see Section 10) regarding our handling of your personal data.

To exercise any of these rights, please contact our Grievance Officer using the details in Section 10.

8. Children's Data

Our website and services are not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected personal data from a person under 18, please contact us immediately at [email protected] and we will take prompt steps to delete such data.

9. Security

We implement reasonable technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include SSL/TLS encryption for all data in transit, access controls limiting data access to authorised personnel only, and periodic security reviews of our systems and processes.

However, no method of transmission over the internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security. In the event of a data breach that is likely to result in a risk to your rights, we will notify you and the relevant authorities as required under applicable law.

10. Grievance Officer

In accordance with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000, the details of our Grievance Officer are provided below. You may contact the Grievance Officer to exercise your data rights, raise a complaint, or seek redressal for any privacy concern.

11. International Transfers

Some of our service providers (such as Google Analytics and Vercel) may process your personal data on servers located outside India. We only transfer your data to processors who maintain adequate safeguards, such as Standard Contractual Clauses (SCCs) or operate under adequacy decisions recognised under applicable data protection frameworks. By using our website and services, you consent to such transfers subject to these safeguards.

12. Policy Changes

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. The "Last updated" date at the top of this page indicates when the Policy was last revised. We encourage you to review this page periodically.

For material changes that significantly affect how we use your personal data, we will make reasonable efforts to notify active clients via email before the changes take effect.

13. Contact

For any questions, requests, or concerns regarding this Privacy Policy or our data handling practices, please contact our Grievance Officer using the details provided in Section 10 above. We are committed to addressing your concerns promptly and transparently.