Privacy policy

Who we are

Exponentialy (“we”, “us”) runs www.exponentialy.com. For the personal data described here we are the Data Fiduciary under the Digital Personal Data Protection Act, 2023 (the “DPDP Act”). Our address is Block M, Old DLF Colony, Sector 14, Gurugram, Haryana 122002, India, and you can reach us at support@exponentialy.com or +91 93060 49784.

What we collect and why

We only collect what you give us, or what your browser sends, for these purposes:

• Enquiry and contact forms — your name, email, phone number and, depending on the form, your company, website, monthly ad spend band, the service you are interested in, how you found us and your message. Used to reply to your enquiry, discuss working together and prepare a proposal.
• Careers form — your name, email, phone number, the area you want to work in, a portfolio link, your message and your CV. Used to assess your application and contact you about current and future openings.
• Email, phone and WhatsApp — whatever you choose to send us, used to reply to you.
• Website analytics — through Google Analytics and Google Tag Manager: pages visited, how you arrived, device and browser type, approximate location and a cookie identifier. Used to understand which pages are useful and improve the site. We do not use it to identify you.
• Security — your IP address, held in memory for up to ten minutes to stop repeated form submissions, and the standard access logs our host keeps.

We do not sell personal data, add enquiries to a marketing list, or use your data for purposes other than those above without asking you first.

The basis for using your data

We process the data you submit through our forms on the basis of your consent, which you give by ticking the consent box before you send it (Section 6 of the DPDP Act). Where you voluntarily share data with us for a specific purpose, such as emailing us a question, we use it for that purpose (Section 7). We may also process data where the law requires it, for example to comply with a court order.

Who we share it with

Only with service providers that process data on our behalf, under our instructions, and only as far as they need to:

• Hostinger, which hosts this website and our email.
• Google, which provides Google Analytics and Google Tag Manager.
• WhatsApp (Meta), if you choose to message us there.

We may also disclose data when the law requires us to, to a government authority acting lawfully, or to protect our legal rights. Some of these providers store data outside India; we only transfer data to countries the Government of India has not restricted under Section 16 of the DPDP Act.

How long we keep it

• Enquiries that do not lead to work: deleted within 12 months of our last contact with you.
• Applications and CVs: kept for up to 12 months so we can contact you about openings, then deleted.
• Client data: kept for the length of the engagement and as long afterwards as our contract and tax and accounting law require.
• Analytics data: kept for the period set in our Google Analytics account, no longer than 14 months.

Your rights

Under the DPDP Act you can:

• Withdraw your consent at any time, as easily as you gave it. This does not affect what we did before you withdrew it, but we will stop and delete the data unless the law requires us to keep it.
• Ask for a summary of the personal data we hold about you and how we have used it, and who we have shared it with (Section 11).
• Ask us to correct, complete, update or erase your data (Section 12).
• Raise a grievance with us about how we have handled your data (Section 13).
• Nominate someone to exercise these rights for you if you die or become unable to (Section 14).

To use any of these rights, email support@exponentialy.com with the subject “Privacy request”. We may ask you to confirm your identity first. We aim to respond within 30 days, and in any case within the time the DPDP Rules allow.

Grievances and complaints

Questions and grievances about your personal data go to our Grievance Officer at support@exponentialy.com or by post to Block M, Old DLF Colony, Sector 14, Gurugram, Haryana 122002. If you are not satisfied with our response, you can complain to the Data Protection Board of India.

Cookies

This site sets cookies only for Google Analytics, to count visits and see how pages are used. You can block or delete cookies in your browser settings, or install Google’s Analytics opt-out add-on. The site works fully without them.

Security and breaches

The site is served only over HTTPS, form submissions go directly to our mailbox, and access to personal data is limited to the people who need it to do the work. If a personal data breach affects you, we will tell you and the Data Protection Board of India as the DPDP Act and Rules require.

Children

This site is not meant for anyone under 18, and we do not knowingly collect their personal data. If you are under 18 and want to apply or enquire, please ask a parent or guardian to contact us first, so we can obtain their verifiable consent as the DPDP Act requires.

Changes to this policy

We will update this page when what we collect or how we use it changes, and change the effective date below. Significant changes will also be shown on the site. This policy should be read with our terms of use.