Privacy Policy.

This notice explains what personal data GigaBizZone collects, how we use it, and the rights you have under the Digital Personal Data Protection Act, 2023.

Last updated: 21 May 2026 · Version 1.0 · Applies to www.gigabizzone.com

Working draft This Privacy Policy is a structured draft prepared for review by qualified legal counsel before launch. It reflects the Digital Personal Data Protection Act, 2023 framework but should be tailored to GigaBizZone's final operating practices and signed off by counsel before being treated as a binding notice.

About this notice

This notice describes how GigaBizZone — operated by GigaWebZone LLP (LLPIN AAV-4776), with its registered office in Maharashtra, India — handles personal data when you visit www.gigabizzone.com, complete the configurator, contact us, or engage us as a paying customer.

References to "GigaBizZone", "we", "us" or "our" mean GigaWebZone LLP acting as the data fiduciary for personal data described in this notice. Capitalised terms not defined here have the meaning given in the DPDP Act, 2023.

Data we collect

We collect only what we need to respond to you, deliver our services, and meet our regulatory obligations.

You provide directly

Contact details — name, email, WhatsApp number, organisation, role.
Configurator inputs — your industry, business profile and selected modules.
Enquiry content — the questions and context you share by form, email or call.
Engagement data — once you become a customer: invoices, signed scope documents, account preferences.

We collect automatically

Site analytics — anonymous, privacy-friendly usage data via Plausible / PostHog, where you have opted in.
Technical logs — IP address, device/browser type, request timestamps, kept for security and rate-limiting.

From third parties

Public business signals — for AI-Driven Outbound prospects, publicly available information (e.g., company registrations, funding announcements).
Verified business directories — only as permitted by their terms.

How we use your data

We process personal data only for the purposes for which you have provided it, including:

To respond to your enquiry, configurator submission or call booking.
To prepare and deliver custom proposals, agreements and onboarding documents.
To deliver the AI services you have contracted — voice, chat, CRM, outbound, content and operations modules.
To send transactional communications (proposal delivery, scheduling, billing) and, where consented, periodic newsletters.
To comply with applicable law, including GST, TDS and TRAI commercial communication rules.
To improve our service quality, secure our systems and prevent abuse.

Lawful basis & consent

We rely on the following lawful bases under the DPDP Act, 2023:

Consent — when you submit a form, opt in to a newsletter, accept cookies, or otherwise expressly agree.
Legitimate uses — to perform a contract with you, respond to your direct request, meet legal obligations, or provide a service you have explicitly asked for.

You may withdraw consent at any time by emailing privacy@gigawebzone.com. Withdrawal is prospective — it does not affect processing that already happened lawfully.

Sharing & sub-processors

We do not sell personal data. We share it only with carefully selected sub-processors who help us deliver the service, and only to the extent necessary for that purpose. Current categories include:

CRM and pipeline tooling (GoHighLevel agency licence)
Voice and conversational platforms (WhatsApp Business API providers, telephony providers)
Hosting and infrastructure (our self-managed VPS, Cloudflare CDN, MinIO object storage)
Email delivery and analytics (transactional email providers, self-hosted Plausible/PostHog)
LLM and model providers used in delivering AI features

Each sub-processor is bound by a written agreement requiring at least the same level of data protection as set out in our Data Processing Agreement.

Retention

We retain personal data only for as long as we need it for the purpose it was collected:

Enquiry and configurator data — up to 24 months from your last interaction, or until you ask us to delete it sooner.
Customer engagement records — for the duration of the engagement and for the period required by Indian tax, accounting and statutory laws after termination.
Technical logs — typically up to 12 months for security and audit purposes.

Your rights

Under the DPDP Act, 2023 you have the right to:

Access — confirm whether we hold your personal data and obtain a summary.
Correction and completion — request that inaccurate or incomplete data is corrected.
Erasure — request deletion, subject to our retention obligations.
Withdraw consent — for any processing relying on your consent.
Grievance redressal — escalate concerns to our grievance officer (see section 13).
Nominate — appoint another person to exercise your rights in case of incapacity or death.

To exercise any right, write to privacy@gigawebzone.com from the email address associated with your data. We will respond within the timelines required by law.

Cookies & analytics

By default, this site sets only strictly necessary cookies required for it to function. We use Plausible (or PostHog) for privacy-friendly analytics, configured to run only with your explicit opt-in via the cookie banner — and to avoid setting tracking pixels from third-party advertising networks.

You can change your analytics preference at any time from the cookie banner or by clearing site data in your browser.

Children

Our services are not directed at children below 18 years of age. We do not knowingly collect personal data from a child without verifiable parental consent. If you believe we have inadvertently done so, please contact us so we can delete it.

Cross-border transfers

Our infrastructure is primarily hosted within India. Where any sub-processor transfers personal data outside India (for example, model inference performed by a provider hosted abroad), we rely on contractual safeguards and process only the minimum data necessary, in accordance with the DPDP Act and notifications by the Central Government.

Security

We apply reasonable technical and organisational measures to protect personal data — HTTPS-only transport with HSTS, encrypted storage on a Company-owned VPS, role-based access, daily backups, rate-limiting on forms and a Web Application Firewall. Further detail is set out in Annex A of our DPA.

Changes

We may update this notice from time to time. Material changes will be highlighted at the top of this page and, where appropriate, communicated directly. The "Last updated" date at the top always reflects the current version.

Grievance officer

If you have a concern about how we handle your personal data, please contact our Grievance Officer:

Name: To be appointed in writing by GigaWebZone LLP prior to public launch.
Email: grievance@gigawebzone.com
Postal address: GigaWebZone LLP, Maharashtra, India.

We will acknowledge your grievance within the timelines required by the DPDP Act, 2023 and applicable rules.

Contact

For any other privacy-related question, please email privacy@gigawebzone.com or visit our contact page.