Privacy Policy

Last updated: 11 September 2026

Effective date: 11 September 2026

This Privacy Policy explains how VK Creatives Software & Marketing Agency (“VK Creatives”, “we”, “us”) collects, uses, shares and protects personal data when you visit our website, contact us or work with us. It also explains your rights and how to use them.

We have tried to keep it short and in plain English. If anything is unclear, email us at contact@vkcreativesagency.com.

1. Who we are

VK Creatives is a digital marketing, website and software agency based in Tarakeswar, Hooghly, West Bengal, India. It was founded in November 2021 by Akash Bhattacharyya and Abhishek Kar.

For personal data we collect about website visitors, people who enquire, and our clients’ contact persons, we decide why and how that data is used. Under Indian law, this makes us the “Data Fiduciary” for that data.

Our contact details

VK Creatives Software & Marketing Agency
Address: Subhkiran Residency, Padmapukur, Bhimpur Road, Tarakeswar, Hooghly, West Bengal 712410, India
Email: contact@vkcreativesagency.com
Phone: +91 83720 78028
Website: https://vkcreativesagency.com

2. Our official website and former domain

Our only official website is https://vkcreativesagency.com.

Our former domain, vkcreativeagency.com (without the “s”), is no longer live and is no longer operated by us.

This Privacy Policy covers personal data collected through our official website, our official email addresses ending in @vkcreativesagency.com, and our listed phone number. Any website, form, offer or message that claims to come from VK Creatives but uses another domain, including vkcreativeagency.com, is not ours. We are not responsible for how such sources collect or use your data. If you come across one, please tell us at contact@vkcreativesagency.com.

3. Laws we follow

We handle personal data in line with Indian law, including:

the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011; and
the Digital Personal Data Protection Act, 2023 (the “DPDP Act”) and the Digital Personal Data Protection Rules, 2025 (the “DPDP Rules”).

The DPDP Rules were notified in November 2025, and the DPDP Act and Rules are coming into force in phases. We are aligning our practices with them now. Some of the rights described below become legally enforceable when the relevant provisions take effect.

4. Personal data we collect

4.1 Data you give us

Contact and enquiry forms: your name, phone number, email address, business name, city, the service you are interested in, your message, and anything else you choose to include, such as your website.
WhatsApp, email and phone: your phone number, name or profile name, the content of your messages, and any files you send.
Clients: billing name, business name, billing address, GST number, payment records, proposals and agreements, approvals, and project communications.
Job and freelance applications: your CV, contact details and portfolio, if you send them to us.

4.2 Data collected automatically

Server logs: when you visit our website, our hosting provider (Hostinger), including its content delivery network (CDN) and security systems, records technical data such as your IP address, browser type, device and operating system, the pages requested, the referring page, and the date and time.
Analytics: we use Google Analytics 4, set up through Google Site Kit, to understand how visitors use our website. It collects data such as pages visited, time on page, device type, traffic source, approximate location (city or country), and interactions such as clicks and form submissions. Google states that Google Analytics 4 does not log or store IP addresses.
Cookies and similar technologies: see section 7 and our Cookie Policy.
Third-party resources: our website loads Google Fonts and Material Symbols from Google’s servers, an embedded Google Map, and scripts from cdn.jsdelivr.net, code.jquery.com and cdn.tailwindcss.com. When these load, your browser connects directly to those providers, which receive your IP address and basic browser information.
Advertising and remarketing tags, where enabled: if we use tags from advertising platforms such as Google or Meta to measure our own ads, those platforms receive information about your visit and the actions you take on our website.

4.3 Data we receive from others

From our clients: when we run campaigns or build websites for a client, we may handle personal data of that client’s customers or leads. See section 16.
From advertising platforms: if you respond to one of our own ads using a lead form on Meta or Google, we receive the details you submit.
From public sources: business contact details that are publicly available, for example on a business’s website or Google Business Profile, if we reach out to offer our services.

4.4 What we do not ask for

We do not ask for sensitive personal data such as passwords, bank card details, UPI PINs, OTPs, health information or biometric data through our website. Please do not send it to us. When a client gives us access to a platform, we ask for access through that platform’s official access-sharing tools, not login passwords, wherever the platform allows it.

5. How we use your personal data

We use personal data only for these purposes:

to reply to your enquiry and prepare proposals, quotes and audits;
to provide our services, manage projects and communicate with you;
to issue invoices, collect payments, and keep accounting and GST records;
to run, maintain and secure our website, and to prevent spam, fraud and misuse;
to understand how visitors use our website so we can improve it;
to measure how well our own advertising works, where advertising tags are enabled;
to send you updates or marketing about our services, where you have agreed to receive them (you can opt out at any time);
to review job and freelance applications; and
to comply with the law, respond to lawful requests, and establish or defend legal claims.

If we want to use your personal data for a new purpose not covered here, we will tell you first and ask for your consent where the law requires it.

6. Our legal basis: consent and legitimate uses

We process personal data on one of these grounds:

Your consent. For example, when you submit a form, message us, or agree to receive marketing. We ask only for the data we need for the stated purpose.
Legitimate uses allowed by law. For example, where you give us your data voluntarily for a specific purpose, such as asking for a quote, and have not told us you object to its use for that purpose; or where we must process data to comply with a law, a court order or tax requirements.

You can withdraw your consent at any time. See section 14.

7. Cookies (summary)

We use cookies and similar technologies to:

keep the website working and secure (strictly necessary);
understand how visitors use the website through Google Analytics 4 (analytics);
display embedded content such as Google Maps (functional); and
measure our own advertising, where advertising tags are enabled (advertising).

You can block or delete cookies in your browser settings. For the full list of cookies and how to control them, read our Cookie Policy.

8. Who we share personal data with

We do not sell or rent your personal data. We share it only when needed, and only with:

Hosting and infrastructure providers: Hostinger, for website hosting, CDN, security and backups.
Website and analytics services: Google (Google Analytics 4, Site Kit, Google Fonts, Material Symbols and Google Maps), and the providers of cdn.jsdelivr.net, code.jquery.com and cdn.tailwindcss.com, which deliver parts of our website’s code.
Communication tools: WhatsApp (owned by Meta) when you chat with us, and the email and productivity services we use to run our business.
Advertising platforms: Google and Meta, where advertising or remarketing tags are enabled on our website, and when we run campaigns for a client on that client’s instructions.
People who help us deliver your project: team members, freelancers and subcontractors who are bound by confidentiality obligations.
Professional advisers and financial service providers: accountants, auditors, lawyers, banks and payment providers.
Authorities: courts, government bodies, law enforcement, tax authorities and the Data Protection Board of India, when the law requires it.
A buyer or successor: if our business is restructured, merged or sold, subject to this Privacy Policy.

Third-party providers also process data under their own terms and privacy policies. We choose reputable providers and share only what is necessary.

9. Links to other websites

Our website links to other websites and apps, such as WhatsApp and our social media profiles. When you follow those links, the other website’s own privacy policy applies. We are not responsible for how they handle your data.

10. Transfers outside India

Some of our service providers, such as Google, Meta, and CDN and hosting providers, may store or process personal data on servers outside India. The DPDP Act allows this, except to countries or territories that the Government of India restricts by notification. We will follow any such restrictions and share only what is necessary.

11. How long we keep personal data

We keep personal data only for as long as we need it for the purposes above, or as long as the law requires. In general:

Enquiries that do not lead to a project: up to 24 months after our last contact with you.
Client contracts, invoices and payment records: for the period required by GST, income-tax and other laws, usually up to eight years from the end of the relevant financial year.
Project files and communications: for the length of the engagement and up to 3 years after it ends, so we can answer follow-up questions and handle any claims.
Google Analytics data: for the retention period set in our Google Analytics account, currently up to 14 months.
Server and security logs: for at least one year where the law requires it, and not longer than needed.
Marketing preferences: until you opt out. We keep a short record of your opt-out so we do not contact you again.
Client data we process for clients: as set out in section 15.

When we no longer need personal data, we delete it or anonymise it securely.

12. How we protect personal data

We use reasonable security practices, in line with the Information Technology Act, 2000 and its rules. These include:

HTTPS encryption on our website;
strong passwords and two-factor authentication on our business accounts, where available;
access limited to team members who need it for their work;
platform access-sharing tools instead of shared passwords, wherever possible;
keeping WordPress, themes and plugins updated;
regular backups; and
confidentiality obligations for our team, freelancers and subcontractors.

No website or system is completely secure, so we cannot guarantee absolute security.

If there is a data breach: we will act quickly to contain it, and we will inform affected individuals and the Data Protection Board of India as the law requires.

13. Your rights

Subject to the DPDP Act and Rules as they come into force, you have the right to:

Access: ask what personal data we hold about you, how we use it, and who we have shared it with.
Correction and updating: ask us to correct inaccurate data, complete incomplete data, or update it.
Erasure: ask us to delete your personal data when it is no longer needed for the purpose it was collected for, unless the law requires us to keep it.
Withdraw consent: withdraw consent you have given at any time.
Grievance redressal: raise a complaint with our Grievance Officer and get a response.
Nominate: nominate another person to exercise your rights if you die or become unable to act.

How to exercise your rights

Email contact@vkcreativesagency.com with the subject line “Privacy request”.
Tell us which right you want to use, and include enough detail for us to find your data, such as the name, email or phone number you used.
We may ask you to confirm your identity before we act. This protects your data from being released to the wrong person.

We do not charge a fee for these requests. We aim to respond within 30 days, and in any case within the time required by law. If we cannot fully meet your request, for example because the law requires us to keep certain records, we will explain why.

Your duties. The law also asks you to give accurate information, not to impersonate anyone, and not to file false or frivolous complaints.

14. Withdrawing consent

You can withdraw your consent as easily as you gave it:

email contact@vkcreativesagency.com;
use the unsubscribe link in any marketing email; or
reply to our WhatsApp message or email and tell us you do not want further messages.

After you withdraw consent, we will stop processing your data for that purpose within a reasonable time and ask our service providers to do the same, unless the law requires or allows us to keep it. Withdrawal does not affect processing that happened before you withdrew. If you withdraw consent needed to provide a service, we may not be able to continue that service.

15. Children’s personal data

Our website and services are intended for businesses and adults. They are not directed at anyone under 18.

We do not knowingly collect personal data of anyone under 18 without verifiable consent from their parent or lawful guardian. We do not track, monitor the behaviour of, or target advertising at children.

If you believe a child has sent us personal data, please email contact@vkcreativesagency.com and we will delete it.

16. Client data we handle for our clients

When we provide services, a client may give us access to its advertising accounts (such as Meta and Google Ads), Google Business Profile, analytics tools, website, CRM, or lead and customer data.

For personal data in those systems, such as the client’s leads and customers, the client is the Data Fiduciary and we act as its Data Processor. This means:

we use that data only to provide the services the client has asked for, and only on the client’s instructions;
we keep it confidential and limit access to team members who need it;
we do not sell it, use it for our own marketing, or combine it with other clients’ data;
we protect it with reasonable security measures;
we tell the client without undue delay if we become aware of a breach affecting it; and
when our services end, we return or delete it on the client’s request, or within a reasonable time, unless the law requires us to keep it.

The client is responsible for giving its own customers the required notices and getting any required consents, for example before collecting leads, uploading customer lists to ad platforms, or placing tracking tags on its website.

If you are a customer of one of our clients and have a question about your data, please contact that business directly. If you contact us, we will pass your request on to them.

17. Grievance Officer

If you have a complaint or concern about how we handle your personal data, contact our Grievance Officer:

Designation: Grievance Officer, VK Creatives Software & Marketing Agency
Email: contact@vkcreativesagency.com (please use the subject line “Grievance”)
Phone: +91 83720 78028
Address: Subhkiran Residency, Padmapukur, Bhimpur Road, Tarakeswar, Hooghly, West Bengal 712410, India

We will acknowledge your grievance promptly and aim to resolve it within 30 days of receiving it.

18. Data Protection Board of India

If you are not satisfied with how we resolve your grievance, you may file a complaint with the Data Protection Board of India through its official online platform, once the relevant provisions of the DPDP Act apply. The law expects you to use our grievance process first.

19. Changes to this Privacy Policy

We may update this Privacy Policy from time to time, for example when laws change or we start using new tools. When we do, we will change the “Last updated” date at the top. If a change is significant, we will highlight it on our website or tell you by email where appropriate.

20. Contact us

For any question about this Privacy Policy or your personal data:

VK Creatives Software & Marketing Agency
Subhkiran Residency, Padmapukur, Bhimpur Road, Tarakeswar, Hooghly, West Bengal 712410, India
Email: contact@vkcreativesagency.com
Phone: +91 83720 78028
Website: https://vkcreativesagency.com