Draft for professional legal review before production publication.
1. About Crystal Sign Media
This website is operated by Crystal Sign Media Private Limited (“Crystal Sign”, “we”, “us”), a company incorporated in India on 13 August 2013. Registered office: 257, Udyog Kendra Extn-II, Ecotech-III, Greater Noida, Uttar Pradesh 201306 [to be verified]. For the purposes of the Digital Personal Data Protection Act, 2023 (“DPDP Act”), Crystal Sign is the Data Fiduciary for personal data processed through this website.
2. Scope
This policy covers personal data collected through this website, including enquiry and quotation forms, job applications, privacy requests and website technologies. It does not cover personal data processed by our clients during campaigns they commission; those clients’ own notices apply.
3. Personal data we collect
- Enquiries and quotations: name, company, designation (optional), phone, email, the service you are interested in, project details you choose to share and any files you attach.
- Job applications: name, email, phone, a short note and your résumé.
- Privacy and grievance requests: the details needed to identify you and handle your request.
- Website technical data: pages viewed, approximate device type and a truncated or hashed network identifier used for security and rate limiting. Optional analytics only if you allow it.
We do not ask for Aadhaar, government ID numbers, date of birth or other sensitive information through this website. Please do not include such information in messages or attachments.
4. Sources of information
We collect personal data directly from you when you use our forms, and automatically through strictly necessary website technologies.
5. Purposes of processing
- Responding to your enquiry and preparing quotations (on the basis of your consent / your request).
- Assessing job applications.
- Sending marketing communication — only if you separately opt in, and you can withdraw at any time.
- Keeping the website secure, preventing spam and abuse, and meeting legal obligations.
- Understanding website usage in aggregate — only if you enable analytics.
6. Service providers and data sharing
We share personal data only with processors who help us operate (for example hosting, email delivery and, if enabled, analytics), under contracts requiring them to protect it and use it only on our instructions: [list processors]. We do not sell personal data. We may disclose data where required by law.
7. Cross-border processing
Some processors may store data outside India. Any such transfer will be made in accordance with the DPDP Act and any restrictions notified by the Government of India. [Confirm hosting and processor locations.]
8. Retention
We keep enquiry and quotation data for up to [24] months after our last interaction, job applications for up to [12] months, uploaded documents for up to [12] months, and consent records for as long as needed to demonstrate consent. After that, data is deleted or anonymised automatically unless a longer period is required by law.
9. Security
We use encrypted connections (HTTPS), access controls by role, strong authentication for administrators, activity logging, file-type checks on uploads, private storage for documents and regular backups. No system is perfectly secure; if a personal data breach occurs we will act in accordance with the DPDP Act and Rules.
10. Your rights as a Data Principal
Subject to applicable law, you may request a summary of your personal data and processing, correction, completion or updating, erasure, and you may nominate another person to exercise your rights in the event of death or incapacity. You can also raise a grievance. Use the Exercise Your Rights page or email [privacy contact email].
11. Withdrawing consent
Where processing is based on consent, you can withdraw it at any time — as easily as you gave it — through the Privacy Preference Center, the unsubscribe link in any marketing email, or the rights page. Withdrawal does not affect processing done before withdrawal.
12. Grievance redressal
See Grievance Redressal for our grievance contact and process.
13. Children
This is a business-to-business website not directed at children. We do not knowingly collect personal data of children. If you believe a child has submitted data, contact us and we will delete it.
14. Changes to this policy
We will post updates here with a new “Last updated” date and version. Where a change materially affects how we use data collected with consent, we will seek fresh consent where required.
15. Contact
Crystal Sign Media Private Limited · info@crystalsignmedia.in · +91-120-401-5411