Privacy Policy.

1. What this policy covers

This Privacy Policy applies to personal information we collect from you through our website (orisons.in), our marketing emails, our contact and audit request forms, and any service engagements with you or your organisation. It does not cover third-party sites we link to — please review their own policies.

2. Information we collect

We collect information in the following ways:

2.1 Information you give us

• Contact details — name, email address, company name, website, role — when you fill out a contact form, audit request form, or otherwise reach out to us.
• Business context — any information you share about your company, marketing goals, budgets, current agencies, timelines, or creative briefs during the course of an engagement.
• Correspondence — emails, calls, messages, or meeting notes exchanged with our team.

2.2 Information collected automatically

• Technical data — IP address, browser type and version, device type, operating system, referring URLs, and timestamps when you visit our website.
• Usage data — pages visited, time on page, and navigation paths, collected via privacy-respecting analytics.
• Cookies — we use essential cookies to operate the site and may use first-party analytics cookies to measure usage.

3. How we use your information

We use your personal information to:

• Respond to your enquiries and fulfil audit requests
• Deliver the services you have engaged us for
• Send you invoices, contracts, and other service communications
• Improve our website, services, and client experience
• Send occasional updates about our work, if you have opted in
• Comply with our legal and regulatory obligations in India

4. Legal basis for processing

We process personal information on one or more of these legal bases: (a) your consent, (b) the performance of a contract with you, (c) our legitimate business interests (such as responding to enquiries), or (d) compliance with a legal obligation.

5. Sharing and disclosure

We do not sell your personal information. We share it only as needed with:

• Service providers — email (Resend), hosting (Vercel), analytics tools, and similar vendors that help us run the website and business. These providers are contractually bound to handle data securely.
• Legal authorities — if required by applicable law, court order, or government request.
• Business transfers — in the event of a merger, acquisition, or sale of assets, personal data may be transferred, subject to the same protections.

6. Data retention

We keep your personal information only as long as reasonably needed for the purposes described above, including to meet legal, tax, or accounting requirements. Enquiry data from our forms is typically retained for up to 24 months after last contact, unless you ask us to delete it sooner.

7. Your rights

Under applicable Indian data protection laws (including the Digital Personal Data Protection Act, 2023) you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request erasure of your information
• Withdraw consent to marketing communications at any time
• Raise a complaint with the Data Protection Board of India

To exercise any of these rights, email us at hello@orisons.in. We will respond within a reasonable timeframe.

8. Security

We take reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, or misuse — including encryption in transit, access controls, and vendor due diligence. However, no internet transmission or storage is perfectly secure; you acknowledge this residual risk when sharing data with us.

9. Children

Our services are intended for businesses and working professionals. We do not knowingly collect personal information from anyone under the age of 18. If you believe we have such information, please contact us and we will delete it.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with a new "Effective date". We recommend reviewing the policy periodically.

11. Contact us

Questions about this Privacy Policy? Email hello@orisons.in or write to us at: