Last updated: 16 October 2026 1. Who we are This policy explains what personal data ATIVITAA collects through ativitaa.com, why we collect it, and how you can control it. ATIVITAA is a branding and digital marketing agency operated by Ativitaa Events & Marketing, 84D/3 Selimpur Road, Kolkata 700031, West Bengal, India (“ATIVITAA”, “we”, “us”). For your personal data, we are the Data Fiduciary under India’s Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025. This policy covers our website and its forms, and messages you send us by email or WhatsApp. It does not cover other websites we link to, such as Instagram, Facebook, LinkedIn, Behance or YouTube, which have their own policies. 2. What we collect We collect only what you enter in our forms, what you send us directly, and basic technical data needed to run the website. Contact / project enquiry form: your name, business name, Instagram or website link, WhatsApp number, service of interest, timeline, budget range and message. Careers applications: your name, email, phone number (optional), department of interest, portfolio or LinkedIn link, resume/CV (optional) and introduction. Brand Calendar downloads (when available): your name, brand name, industry, city, email and WhatsApp number. Email and WhatsApp: your name, number or email address, and what you write to us. Every visit: IP address, browser and device type, pages visited, and date and time, recorded in server logs for security. Please do not send us sensitive information such as financial details, health information, government ID numbers or passwords through any form. A resume should contain only what is relevant to a job application. 3. How we use it We use your data only for the purpose you gave it for: Enquiries: to reply to you, understand your needs and send a proposal or quotation. Careers: to assess your application and contact you about current or future roles. Calendar downloads: to send you the calendar and, if you agree, contact you about our services. Clients: to deliver the services you hire us for, send invoices and keep records required by law. Security: to keep the website working, prevent spam and abuse, and investigate misuse. Legal: to comply with Indian law, court orders or requests from authorities. We do not sell your personal data, and we do not use it for automated decisions that significantly affect you. 4. Your consent We process your personal data based on the consent you give when you submit a form or contact us, or where the law otherwise allows it. You can withdraw consent at any time, as easily as you gave it: email mail@ativitaa.com or message us on WhatsApp at +91 99031 63897 with the words “withdraw consent”. You can also reply “STOP” to any marketing message. We will stop the processing within a reasonable time. Withdrawal does not affect processing already done, or records we must keep by law. 5. Who we share it with We share personal data only with service providers who help us run ATIVITAA, and only as much as they need: Website hosting (Hostinger): stores the website, its database and form submissions. Email service ([EMAIL PROVIDER, e.g. Hostinger Email or Google Workspace]): sends and receives our emails, including form notifications. WhatsApp (Meta): when you choose to message us on WhatsApp. Professional advisers: our accountants and lawyers, when needed. These providers act on our instructions and must protect your data. We may also disclose data when required by law, or to protect our rights, our users or the public. If ATIVITAA is merged or sold, your data may pass to the new owner under this same policy. We never share your contact details with other businesses for their marketing. 6. Cookies, embeds and analytics Essential cookies: keep forms secure and remember small preferences, such as turning off festive decorations. The site cannot work properly without them. Analytics: “We use Google Analytics to understand how visitors use the site, in aggregated form.” Embedded content: Some pages show a Google Map or YouTube videos. When these load, Google may collect data such as your IP address under its own privacy policy. You can block or delete cookies in your browser settings. Blocking essential cookies may stop forms from working. 7. How long we keep it Enquiries that don’t become clients: 24 months after our last contact with you. Job applications and resumes: 12 months after you apply, unless you ask us to delete them sooner. Client records, contracts and invoices: as long as Indian tax and company laws require (typically 8 years). Server and security logs: up to 12 months. Records of your consent and its withdrawal: as long as the law requires. If you withdraw consent or ask us to delete your data, we delete it sooner, except what we must keep by law. 8. Security We protect your data with reasonable security safeguards, though no website can be completely secure. These include encrypted connections (HTTPS), password-protected admin access limited to authorised team members, protection against spam and fake submissions, restricted file uploads, and regular backups. If a personal data breach affects you, we will inform you and the Data Protection Board of India as the law requires, explaining what happened, the likely impact and what we are doing about it. 9. Your rights Under the Digital Personal Data Protection Act, you have the right to: Access: get a summary of the personal data we hold about you and how we use it. Correction and completion: fix data that is wrong, incomplete or out of date. Erasure: ask us to delete your data, unless we must keep it by law. Withdraw consent: at any time, as described in section 4. Grievance redressal: complain to us and get a response. Nomination: name another person to exercise these rights for you in case of death or incapacity. To use any of these rights, email mail@ativitaa.com from the email address you gave us. We may ask you to confirm your identity first. We aim to respond within 30 days. If you are not satisfied with our response, you can complain to the Data Protection Board of India. 10. Children, transfers and changes Children: our website and services are meant for adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has sent us their data, contact us and we will delete it. Data outside India: our service providers may store or process data on servers outside India. Any such transfer follows the Digital Personal Data Protection Act and any restrictions the Government of India notifies. Changes: we may update this policy as our website or the law changes. The date at the top shows the latest version. 11. Contact and Grievance Officer For any question, request or complaint about your personal data, contact our Grievance Officer: Name:Subham Chatterjee Email: mail@ativitaa.com WhatsApp / phone: +91 99031 63897 Address: 84D/3 Selimpur Road, Kolkata 700031, West Bengal, India We acknowledge complaints promptly and aim to resolve them within 30 days.