Privacy Policy

This Privacy Policy explains how Aganta Foundry ("the Studio", "we", "us", "our") collects, uses, stores, and protects personal information when individuals ("you", "Client", "visitor", "user") interact with our website at https://agantafoundry.com, our communications, or our brand strategy and identity services. This Policy applies globally and reflects our commitments under the EU General Data Protection Regulation (GDPR), UK GDPR, California Consumer Privacy Act and California Privacy Rights Act (CCPA/CPRA), and India's Digital Personal Data Protection Act, 2023 (DPDP).

1. Information We Collect

1.1 Information You Provide Directly

Name, email address, phone number, company name, and other contact details submitted via contact forms or direct communications.
Project files including brand assets, creative briefs, strategy documents, copy, images, references, and revision feedback.
Billing and payment information processed through third-party payment providers.
Consent records including portfolio usage approvals and AI workflow permissions.

1.2 Automatically Collected Data

When you visit the Website, we may automatically collect:

IP address and approximate geographic location.
Device type, operating system, and browser information.
Pages visited, session duration, and interaction patterns.
Referral sources and navigation paths.

1.3 Cookies and Tracking Technologies

We use essential cookies required for the Website to function, and optional analytics cookies activated only with your consent. Please refer to our Cookie Policy for full details.

1.4 Project and Analytics Data

During brand strategy or identity engagements, we may collect and process project-level context including audience insights, website analytics provided by the Client, market research, stakeholder feedback, and performance context relevant to the agreed scope. This data is used solely for the purpose of delivering contracted Services.

1.5 Third-Party Data

We may receive information about you from third parties such as referral partners, payment processors, or collaboration platforms.

For individuals in the European Economic Area, the United Kingdom, or other jurisdictions requiring a legal basis for processing personal data, we rely on the following bases:

Consent: Where you have given explicit consent, for example by submitting a contact form, granting portfolio usage permission, or accepting analytics cookies.
Contract Performance: Where processing is necessary to deliver Services you have commissioned.
Legitimate Interests: Where processing supports the Studio's legitimate business interests, including communications, security, and service improvement, provided these interests do not override your rights.
Legal Obligation: Where processing is required to comply with applicable law.

3. How We Use Your Information

3.1 Service Delivery

To execute brand strategy, brand positioning, messaging, identity design, visual systems, guidelines, consulting, and related work. To communicate regarding project progress, revisions, approvals, and delivery.

3.2 Business Operations

For project management, scheduling, invoicing, record-keeping, and general business administration.

3.3 Research and Analytics

To produce research summaries, brand audits, strategic recommendations, and project documentation for ongoing service engagements.

3.4 Promotional Communications (Email Marketing)

If you opt-in to receive marketing communications, we may use your contact details to send you newsletters, promotional offers, and updates about our services. You can unsubscribe at any time using the link provided in every email.

With your written approval, we may publish case studies, project summaries, or showcase approved Deliverables in our portfolio, website, and marketing materials.

3.6 Legal and Compliance

To comply with applicable laws, respond to lawful requests, enforce our Terms and Conditions, and protect the rights and safety of the Studio and its clients.

4. Data Storage and Security

Project files, client communications, and personal data are stored using encrypted cloud platforms and secure local storage with restricted access controls. We apply industry-standard security measures including encrypted storage, secure transfer protocols, and access control policies. No method of storage or transmission is completely secure, and while we apply commercially reasonable safeguards, we cannot guarantee absolute security.

4.1 File Retention

Project files are retained for 30 to 90 days following project completion unless a different period is agreed in writing. Contact form submissions, inquiry records, and business communications may be retained for up to seven (7) years for operational, accounting, legal, and record-keeping purposes.

4.2 Security Measures

Encrypted storage and transfer protocols.
Restricted access controls.
Secure file transfer practices.
Periodic review of security procedures.

Aganta Foundry does not sell personal data. However, third-party service providers we use, including form platforms, analytics services, email tools, and scheduling platforms, are governed by their own privacy policies and data practices. We encourage you to review the privacy policies of any third-party services you interact with through our website.

5.1 Trusted Service Providers

We may share limited data with vetted third-party service providers necessary to operate the Studio, including cloud storage platforms, email services, project management tools, payment processors, analytics services, and scheduling platforms. These providers are bound by confidentiality obligations and may only use data to provide the specified services.

5.2 Creative Collaborators

On certain projects, project files may be shared with vetted creative collaborators, strategists, writers, researchers, or designers solely for the purpose of delivering contracted Services. Only essential files are shared.

5.3 Portfolio (With Permission)

Final approved Deliverables may be used in the Studio's marketing and portfolio materials as described in Section 3.5 and as agreed in writing.

5.4 Legal Requirements

We may disclose personal data where required by law, court order, or governmental authority.

6. Client Platform Access

During certain engagements, the Studio may receive temporary access to approved client platforms such as shared drives, analytics dashboards, brand asset libraries, project management tools, or website systems. This access is granted solely for the purpose of delivering contracted Services. We do not store, archive, or use access credentials or data for any purpose beyond the specific engagement. Upon termination of Services, the Studio will confirm removal of its access within 5 business days where applicable.

7. International Data Transfers

As an India-based studio serving global clients, data may be processed or stored in jurisdictions other than your home country. Where personal data is transferred internationally, we apply appropriate safeguards including contractual protections and data processing agreements consistent with applicable law.

8. Your Rights

8.1 General Rights

Depending on your location and applicable law, you may have the following rights:

Right of Access: Request a copy of personal data we hold about you.
Right to Correction: Request correction of inaccurate or incomplete data.
Right to Deletion: Request deletion of your personal data, subject to legal obligations.
Right to Restriction: Request restriction of processing in certain circumstances.
Right to Object: Object to processing based on legitimate interests.
Right to Data Portability: Request transfer of your data in a structured, machine-readable format.

8.2 California Residents (CCPA/CPRA)

California residents have the right to: know what personal information is collected, used, shared, or sold; request deletion of personal information; correct inaccurate personal information; opt out of the sale or sharing of personal information (we do not sell or share personal data for advertising purposes); and not be discriminated against for exercising these rights.

8.3 Indian Residents (DPDP Act, 2023)

Under India's Digital Personal Data Protection Act, 2023, data principals have the right to obtain information about their personal data, correct or erase inaccurate data, nominate another individual to exercise rights in the event of incapacity or death, and file grievances with the Data Protection Board of India.

To exercise any of these rights, contact us at [email protected]. We will respond within the timeframes required by applicable law.

9. AI Usage Disclosure

The Studio may use AI-assisted tools for research, ideation, transcription, content planning, copy development, image enhancement, editing assistance, and workflow automation. AI tools are used with appropriate disclosure and, where applicable, client consent. Personal data and client project files are not intentionally submitted to external AI platforms for model training purposes.

10. Cookies

We use essential cookies required for Website functionality and optional analytics cookies activated only with your explicit consent via our cookie consent mechanism. You may manage or revoke your cookie preferences at any time. For full details, including a list of cookies and how to manage them, please refer to our Cookie Policy at https://agantafoundry.com/cookies/.

11. Children's Privacy

The Studio's services are intended for individuals aged 18 years and older. We do not knowingly collect or process personal data from individuals under the age of 18. If we become aware that we have inadvertently collected data from a minor, we will delete it promptly.

12. Changes to This Policy

This Privacy Policy may be updated periodically to reflect changes in our practices, services, or applicable law. The updated Policy will be posted at https://agantafoundry.com/privacy/ with the revised effective date. For material changes, we will endeavor to provide reasonable notice.

13. Contact and Data Requests

For privacy inquiries, data access requests, or to exercise your rights under applicable law:

Aganta Foundry
Email: [email protected] Website: https://agantafoundry.com
Privacy page: https://agantafoundry.com/privacy/