Privacy Policy

1. Who we are

GrowNagar is a business technology company based in Ahilyanagar, Maharashtra, India. The website and services are operated by GrowNagar, with its registered office at Ahilyanagar, Maharashtra, India.

For the personal data described in this policy, GrowNagar decides why and how the data is used. Under India's Digital Personal Data Protection Act, 2023 (the "DPDP Act"), that makes us the Data Fiduciary. You, the person the data is about, are the Data Principal.

Note: When we build or run systems for a client (for example a CRM or WhatsApp automation), the client usually decides how their customers' data is used. In that case the client is the Data Fiduciary and GrowNagar processes that data only on the client's instructions, under our agreement with them. Questions about that data should go first to the business you dealt with.

2. What this policy covers

Visitors to the GrowNagar website.
People who send us an enquiry, book a consultation or write to us by email.
Business contacts of our clients, partners and suppliers.
Users of GrowNagar products and services, to the extent GrowNagar is the Data Fiduciary. Product-specific terms are in our Terms of Service.

3. Personal data we collect

Data you give us

Our website is a static site with no user logins. You share data with us only when you choose to fill in a form or write to us. Depending on the form, this may include:

Your name, business or work email, company name and industry.
Business details such as business size, website, required service, current WhatsApp setup, advertising platforms, marketing goals, monthly budget range or project requirements.
Your preferred contact method and anything you write in the message box.
Your consent choice (the checkbox confirming you have read this policy).

We do not ask for payment card details, bank passwords, Aadhaar numbers or other sensitive identifiers through website forms. Please do not include them in your message.

Data collected automatically

Lead source details sent with a form: the page you submitted it from and campaign tags in the link (UTM parameters), so we know how you found us.
Technical logs kept by our hosting and security providers, such as IP address, browser type, date and time of the request. These help keep the site secure and working.
Consent preference stored in your browser so the cookie banner remembers your choice.
Analytics data, only if analytics is enabled and only after you opt in through the cookie banner. See our Cookie Policy.

Data from other sources

If a colleague or partner introduces you to us, or you contact us through a business platform, we may receive your name and business contact details from them.

4. Why we use your data

We use personal data only for clear purposes:

To reply to your enquiry, prepare a proposal or quote, and schedule a consultation.
To deliver services and products you have signed up for, including support and billing.
To keep the website and our systems secure, prevent spam and abuse (for example, honeypot and time-trap checks on forms).
To understand which pages and campaigns bring enquiries, so we can improve the site.
To send occasional updates or offers, only if you have agreed to receive them. You can stop these at any time.
To meet legal duties, such as tax, accounting and responding to lawful requests from authorities.

We do not sell your personal data. We do not use it for purposes unrelated to the ones above without telling you and, where needed, asking for fresh consent.

When you submit a form, you tick a box to agree that we may use the details you share for the purpose of that form. Optional uses, such as analytics cookies or marketing updates, need a separate choice from you.

You can withdraw consent at any time by writing to hello@grownagar.in, or for cookies, by changing your choice in the cookie settings on the site.
Withdrawing is as easy as giving consent. It does not affect anything we did lawfully before you withdrew.
After withdrawal we stop the related processing within a reasonable time, unless the law requires us to keep certain data.
If withdrawing means we can no longer provide a service (for example, we cannot reply without your email), we will tell you.

In some cases the DPDP Act allows processing without consent for certain legitimate uses, such as meeting a legal obligation. We rely on these only where the law permits.

We share personal data only when needed, and only the part that is needed. The people who may receive it are:

Data Processors who work for us under contract: website hosting and content delivery, form-processing services that pass your enquiry to our email, email and workspace providers, and, with your consent, analytics and advertising measurement tools from Google.
Our team members who need the data to respond to you or deliver your project. They are bound by confidentiality.
Professional advisers such as accountants, auditors and lawyers, under confidentiality.
Government or law enforcement authorities, when the law requires it.
A buyer or successor, if GrowNagar's business is reorganised, merged or sold, subject to the same protections.

We choose processors carefully and expect them, through contracts, to use the data only on our instructions and to protect it properly. A current list of key processors is available on request at hello@grownagar.in.

7. Transfers outside India

Some of our service providers (for example, cloud hosting or email providers) may store or process data on servers outside India. When this happens, we transfer data only to countries not restricted by the Government of India under the DPDP Act, and we expect the provider to protect it with suitable safeguards.

8. How long we keep data

We keep personal data only as long as it is needed for the purpose it was collected, or as long as the law requires. As a general guide:

Enquiries that do not lead to a project: up to 24 months from the last contact, then deleted.
Client and project records: for the duration of the engagement and afterwards as long as needed for contracts, tax and accounting laws.
Technical and security logs: for a short period set by our hosting and security providers.
Marketing contact preferences: until you unsubscribe or withdraw consent, after which we keep only a note of your opt-out so we do not contact you again.

When data is no longer needed, we delete it or make it anonymous so it can no longer identify you.

9. How we protect data

We take reasonable security safeguards to protect personal data from misuse, loss and unauthorised access. These include:

Encrypted connections (HTTPS) for the website and forms.
Access only for people who need it, with strong passwords and two-step login where available.
Reputable hosting, email and form providers with their own security controls.
Spam protection on forms and minimal data collection, so there is less to protect.
Regular review of who has access and removal of access that is no longer needed.

No system is completely secure, but we work to keep risks low. More detail is in our Data Protection and Security Policy.

10. If a data breach happens

If we become aware of a personal data breach, we will act quickly to contain it, find out what happened and reduce the harm. Where the DPDP Act and its rules require, we intend to inform the Data Protection Board of India and affected Data Principals, explaining what happened, the likely impact, the steps we are taking and what you can do to protect yourself.

11. Your rights

As a Data Principal under the DPDP Act, you have the right to:

Access: ask for a summary of the personal data we hold about you, how we use it, and who we have shared it with.
Correction and updating: ask us to correct inaccurate or misleading data, complete incomplete data, or update it.
Erasure: ask us to delete your data when it is no longer needed for the purpose, or after you withdraw consent, unless the law requires us to keep it.
Withdraw consent: at any time, as explained above.
Grievance redressal: complain to us about how we handle your data and get a response.
Nominate: name another person who can exercise these rights on your behalf if you die or become unable to do so.

To use any of these rights, email hello@grownagar.in with the subject "Data request". We may ask you to confirm your identity before acting, so that we do not share or delete someone else's data by mistake. We aim to respond within 30 days, or within any shorter time set by law.

The DPDP Act also places some duties on Data Principals: please give accurate information, do not impersonate anyone, and do not file false or frivolous complaints.

12. Children's data

Our website and services are meant for businesses and adults. We do not knowingly collect personal data from anyone under 18 through this website.

If we ever need to process a child's data (for example, in a school system we run directly), we will first obtain verifiable consent from a parent or lawful guardian, as the DPDP Act requires. We will not track or monitor children's behaviour or show them targeted advertising. If you believe a child has sent us personal data, write to hello@grownagar.in and we will delete it.

Note: Where GrowNagar builds a school or college system for a client, the institution is responsible for collecting parental consent from its students' families. GrowNagar supports the institution with features that help record that consent.

13. Grievance Officer and complaints

If you have a concern about how your personal data is handled, please contact our Grievance Officer:

Designation: Grievance Officer, GrowNagar
Email: hello@grownagar.in (subject: "Privacy grievance")
Location: Ahilyanagar, Maharashtra, India

We will acknowledge your complaint within 48 hours and aim to resolve it within 30 days, or any shorter period set by law. See also our Grievance Redressal page.

If you are not satisfied with our response, you can escalate your complaint to the Data Protection Board of India after using our grievance process, as provided under the DPDP Act.

14. Cookies and similar technologies

By default, the site uses only essential storage needed to run the site and remember your cookie choice. We use Google Tag Manager with Google Consent Mode. Analytics and advertising cookies are used only after you opt in through the cookie banner; before that, Google tags may send limited cookieless signals only. Details are in our Cookie Policy.

15. Links to other websites

Our site may link to other websites or platforms, such as WhatsApp, Google or Meta. Their privacy practices are their own, and we encourage you to read their policies.

16. Changes to this policy

We may update this policy when our practices, services or the law change. The date at the top shows when it was last updated. If a change is significant, we will highlight it on the website and, where appropriate, inform you directly or ask for fresh consent.

17. Contact us

For any privacy question or request, write to hello@grownagar.in. For questions about an existing service or bill, write to support@grownagar.in.