Last updated:
This Privacy Policy explains how [Debox Consulting — replace with registered legal entity name] (“Debox”, “we”, “us”, or “our”) collects, uses, shares and protects personal information when you visit www.debox.co.in (the “Website”), respond to our advertisements (including Google Ads lead forms), contact us, or engage with our consulting, marketing and technology services (together, the “Services”).
Debox is based in Thane, Maharashtra, India. We serve startups, family businesses and mid-sized companies in India and internationally. Because our Website and advertisements are available worldwide, this policy is written to meet the requirements of India’s Digital Personal Data Protection Act, 2023 and the rules made under it, and to respect other privacy laws that may apply to you, including the EU/UK General Data Protection Regulation (GDPR) and US state privacy laws.
By using our Website or submitting your details to us, you acknowledge that you have read this Privacy Policy. Where we rely on your consent, we will ask for it clearly, and you can withdraw it at any time.
Debox is a business consulting, marketing and technology firm. Our services include:
For this Privacy Policy, Debox is the Data Fiduciary (under Indian law) or Controller (under GDPR) of the personal information described below, unless Section 9 says otherwise.
Contact: connect@debox.co.in
Address: 815, Lodha Supremus – Tower B, Lodha Business District 2, Kolshet Road, Thane, Maharashtra 400607, India
When you fill in a form on our Website, submit a lead form in one of our ads, book a consultation, or write to us, we may collect:
Please do not send us sensitive personal information (such as health, financial account or government ID details) unless we specifically ask for it for a lawful purpose.
We run lead generation ads on platforms such as Google Ads and may also use Meta (Facebook and Instagram) and LinkedIn. When you submit a lead form inside one of these ads, the platform shares with us the details you entered in the form (usually your name, email, phone number, company name and the service you are interested in). We may also receive campaign information, such as which ad or keyword led to your enquiry.
When you visit our Website or interact with our ads, we and our partners may automatically collect:
We may receive information about you from clients or partners who refer you to us, from event organisers, and from publicly available professional sources (such as your company website or LinkedIn profile) when you are a business contact.
We use personal information only for clear, specific purposes:
| Purpose | Examples |
|---|---|
| Respond to your enquiry | Contact you by email, phone or WhatsApp about the service you asked for, schedule calls, and send proposals and quotes. |
| Deliver our Services | Carry out consulting, marketing and technology projects, manage the client relationship, and invoice and collect payments. |
| Qualify and manage leads | Record your enquiry in our CRM, route it to the right team (consulting, marketing or tech), and follow up. |
| Business Health Audit | Analyse your responses and share findings and recommendations with you. |
| Marketing communications | Send case studies, insights, event invitations and service updates, where permitted by law or with your consent. You can opt out at any time. |
| Advertising and measurement | Measure how our ads perform, count conversions, build remarketing and similar audiences, and show you more relevant Debox ads on Google and other platforms. |
| Improve our Website and Services | Understand how visitors use the Website, fix problems, and improve content and user experience. |
| Recruitment | Assess job applications and communicate with candidates. |
| Security and legal compliance | Prevent fraud, spam and misuse; keep records; comply with laws, regulations and lawful requests; and establish or defend legal claims. |
We do not use your information for purposes unrelated to the ones above without telling you first and, where required, asking for your consent.
We use Google Ads to reach businesses that may benefit from our Services.
We never share sensitive information with Google for ad targeting, and we follow Google’s advertising and personalised advertising policies.
Cookies are small text files stored on your device. We and our partners use the following types:
Managing cookies: Where required by law, we ask for your consent before setting non-essential cookies, and you can change your choice at any time through our cookie settings. You can also block or delete cookies in your browser settings, although some parts of the Website may not work properly. To opt out of interest-based ads from many companies, visit aboutads.info/choices (US) or youronlinechoices.eu (EU).
We do not sell your personal information. We share it only as described below:
US state privacy laws: Some US states treat sharing data for cross-context behavioural advertising (such as remarketing) as “sharing” or “targeted advertising”. You can opt out by contacting us at connect@debox.co.in, using our cookie settings, or turning on Global Privacy Control in your browser, which we honour where required by law.
We are based in India. Our service providers (such as Google and Zoho) may store or process data in India, the United States, the European Union or other countries. When your information is transferred outside your country, we take steps to protect it as required by applicable law, including relying on contractual safeguards such as the European Commission’s Standard Contractual Clauses where needed. We will not transfer personal data to any country restricted by the Government of India.
We keep personal information only for as long as we need it for the purpose it was collected, then delete or anonymise it:
We may keep information longer where the law requires it or to resolve disputes.
When we deliver Services such as performance marketing, CRM or ERP implementation, Zoho configuration, or website and app development, we may access or process personal data belonging to our clients’ customers, employees or users. In these cases, we act as a Data Processor (or service provider) on the client’s instructions, and the client is responsible for that data as the Data Fiduciary or Controller. Our handling of that data is governed by our agreement with the client. If your data is held by one of our clients, please contact that client directly to exercise your rights.
We use reasonable technical and organisational security measures to protect personal information from unauthorised access, loss, misuse or alteration. These include encryption in transit, access controls based on role, secure and reputable cloud providers, and confidentiality obligations for our team and partners.
No method of transmission or storage is completely secure. If a personal data breach occurs that affects you, we will notify you and the relevant authorities (including the Data Protection Board of India) as required by law.
Depending on where you live, you have rights over your personal information. To exercise any of them, email connect@debox.co.in or our Grievance Officer (Section 15). We may need to verify your identity before acting on your request, and we will not discriminate against you for exercising your rights.
As a Data Principal, you have the right to:
We will respond to your request within the time set by law, and no later than 90 days.
You have the right to access, correct, delete or restrict the processing of your personal data; to object to processing based on legitimate interests (including direct marketing); to data portability; and to withdraw consent. You also have the right to complain to your local data protection authority. We will respond within one month.
Depending on your state, you may have the right to know what personal information we collect and how we use and disclose it; to access, correct and delete it; and to opt out of the sale or sharing of personal information and of targeted advertising. We do not sell personal information, and we do not use or disclose sensitive personal information for purposes that require an opt-out. You may use an authorised agent to submit a request on your behalf. If we deny your request, you may appeal by replying to our decision.
Calls and text messages: We will only contact you by phone or text message about the enquiry you submitted. We will not send automated or pre-recorded marketing calls or texts without your prior express consent. Reply “STOP” to any text message to opt out.
Our Website and Services are intended for businesses and professionals. They are not directed at anyone under 18, and we do not knowingly collect personal data from children. If you believe a child has given us personal data, please contact us and we will delete it. We do not track children’s behaviour or target advertising at them.
Our Website may contain links to third-party websites, platforms and social media pages (such as Instagram, Facebook and LinkedIn). We are not responsible for their privacy practices, so please read their privacy policies before sharing your information with them.
We may update this Privacy Policy from time to time to reflect changes in our practices, Services or the law. When we do, we will change the “Last updated” date at the top. If the changes are significant, we will notify you by email or through a notice on the Website where appropriate.
If you have questions, requests or complaints about this Privacy Policy or how we handle your personal information, please contact:
Name: Darshan Vyas
Designation: Director
Email: connect@debox.co.in
Address: 815, Lodha Supremus – Tower B, Lodha Business District 2, Kolshet Road, Thane, Maharashtra 400607, India
We will acknowledge your request promptly and resolve it within the time required by applicable law.
