Privacy Policy

Privacy Policy for Yellow Cat

Effective Date: June 01, 2025

1. Introduction and Scope

This Privacy Policy governs the processing of personal data by Yellow Cat ("we," "our," or "us"), a company specializing in marketing and brand-building services. We are the Data Fiduciary and are responsible for the collection, processing, and protection of your personal data. You, the user of our website and services, are the Data Principal, and this policy outlines your rights and our obligations under the Digital Personal Data Protection Act, 2023 (DPDP Act).

By accessing our website and voluntarily providing your personal data, you consent to its processing in accordance with this policy. We are committed to transparency, and we process your data only for the purposes for which it was collected.

2. Personal Data Collected and Purpose of Processing

We collect the following categories of personal data that you voluntarily provide to us when you interact with our website, including through forms, quizzes, and direct inquiries. The purpose for which each category of data is collected is clearly defined below:

• Name: Collected for the purpose of personalizing communications and addressing you directly in our customer support and marketing interactions.

• Email Address: Collected for the purpose of sending you marketing communications, providing customer support, delivering services, and sending updates on your inquiries or projects.

• Phone Number: Collected for the purpose of direct communication regarding your inquiries or services and for providing customer support.

We do not collect any other categories of personal or sensitive personal data.

3. Lawful Basis for Processing

We process your personal data on the basis of your free, specific, informed, and unambiguous consent, which is provided when you voluntarily submit your data to us. Our data collection process is preceded by a clear notice that includes the purpose of processing.

4. Data Retention and Deletion

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, as outlined in this Privacy Policy. Once these purposes have been met, your data will be securely and permanently deleted from our records and those of our service providers. We will not retain your data beyond the period necessary to fulfill our obligations to you and for any legal or operational requirements.

5. Data Sharing and Disclosure

Your personal data is processed by our employees and is shared with our trusted third-party service providers for the purposes of facilitating our services. These third-party processors are contractually and legally bound to process your data only on our instructions and to implement adequate security measures. The service providers we use include:

• JotForm: For the creation and management of online forms and lead capture.

• Google Sheets: For the organization and storage of collected data.

We do not sell, rent, or trade your personal data with any other parties for marketing or any other purpose without your explicit consent.

6. Cross-Border Transfers

As we utilize service providers such as JotForm and Google, your personal data may be transferred to and stored on servers located outside of India. Where such cross-border transfers occur, we ensure that appropriate and adequate safeguards are in place to protect your data, in compliance with the DPDP Act. These safeguards include entering into standard contractual clauses or other legally recognized mechanisms to ensure the protection of your data.

7. Data Security and Breach Notification

We have implemented reasonable technical and organizational security measures to protect your personal data from unauthorized access, accidental loss, misuse, or alteration. In the unlikely event of a personal data breach, we will notify both you and the Data Protection Board of India (DPBI) without undue delay, as required by the DPDP Act.

8. Rights of the Data Principal

As a Data Principal, you have the following rights under the DPDP Act. To exercise any of these rights, please contact our Data Protection Officer at the email address provided below.

• Right to Access: You have the right to obtain confirmation from us as to whether we are processing your personal data and to request a summary of the data we hold.

• Right to Correction and Erasure: You have the right to request the correction of any inaccurate or incomplete personal data. You also have the right to request the erasure (deletion) of your personal data when the purpose for which it was collected is no longer being served.

• Right to Withdraw Consent: You have the right to withdraw your consent to the processing of your personal data at any time. The withdrawal of consent will not affect the lawfulness of processing that was based on consent before its withdrawal.

• Right to Grievance Redressal: You have the right to have your grievances related to the processing of your personal data redressed by our appointed Data Protection Officer.

• Right to Nominate: You have the right to nominate any individual who can exercise your rights on your behalf in the event of your death or incapacity.

9. Cookies and Other Technologies

Our website may use cookies and other tracking technologies for essential website functionality and analytics, provided through our third-party services. By using our website, you consent to the use of these technologies.

10. Children's Data

Our services are intended for professionals and businesses and are not directed at children. We do not knowingly collect or process the personal data of children under the age of 18. If we become aware that a child under 18 has provided us with personal data, we will take steps to delete that information promptly.

11. Grievance Redressal

If you have any questions, concerns, or grievances regarding the processing of your personal data, please contact our designated Data Protection Officer:

Email: yellowcat.live@gmail.com

12. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by posting the updated policy on our website with a revised effective date. Your continued use of our website and services after the effective date of the revised policy constitutes your consent to the changes.