Privacy Policy
Transparency, purpose limitation, and user sovereignty in handling your personal data.
01. Overview & Role as Data Fiduciary
Clicqs (“we”, “us”, or “our”) is a creative digital studio providing bespoke web development and cinematic video editing services. In the collection and processing of personal information provided through our website and enquiry forms, Clicqs acts as a Data Fiduciary as defined under Section 2(i) of the Digital Personal Data Protection Act, 2023 (DPDP Act).
This Privacy Policy explains what digital personal data we collect from you, why we collect it, the legal grounds for doing so, how long we retain it, how we safeguard it, and the rights you hold under applicable Indian data protection laws.
02. Statutory Context & Applicable Commencement Timeline
The Parliament of India enacted the Digital Personal Data Protection Act, 2023 (Act No. 22 of 2023) to regulate the processing of digital personal data while respecting individuals' right to privacy.
Regulatory Note: DPDP Rules 2025 Commencement Schedule
The Digital Personal Data Protection Rules, 2025 were formally notified by the Ministry of Electronics and Information Technology (MeitY), Government of India, in November 2025.
In accordance with statutory notification principles, different provisions under the Act and Rules (including specific operational timelines, standardized notification schemas, and Data Protection Board adjudication procedures) have phased commencement dates.
Clicqs has proactively implemented substantive DPDP requirements—including affirmative non-pre-ticked consent, purpose limitation, transparent notice, data minimization, and an instant consent withdrawal mechanism. We actively maintain and adapt our data governance to adhere to the respective commencement dates rather than claiming instantaneous, blanket certification ahead of applicable statutory windows.
03. What Data We Collect (Data Minimization)
We adhere strictly to the principle of Data Minimization (collecting only data that is necessary for the specified purpose). When you choose to initiate a conversation through our intake or contact forms, we collect only:
| Data Category | Specific Fields Collected | Necessity & Stated Purpose |
|---|---|---|
| Contact Information | Your Name, Phone / WhatsApp number, and/or Email address | To directly address and communicate with you regarding your creative project enquiry. |
| Project Context | Business/Company Name (optional), Service needed (Web Dev / Video Editing), Message brief | To evaluate feasibility, prepare scoping discussions, and provide tailored technical quotes. |
| Consent Metadata | Affirmative consent checkbox status, ISO timestamp, local timestamp, notice version | To maintain a verifiable compliance audit log demonstrating affirmative consent. |
What we do NOT collect: We do not collect government identification, financial credentials, biometric data, precise geolocation, browsing history across third-party websites, or sensitive personal data.
04. Purpose of Processing & Purpose Limitation
In strict accordance with Section 6(1) of the DPDP Act 2023, your personal data is collected and processed solely for the specified purpose of contacting you regarding your enquiry and discussing a potential project collaboration.
We do not sell, rent, monetize, broker, or trade your personal information. We do not use your contact information for unsolicited automated telemarketing, third-party newsletters, or cross-platform advertising retargeting.
05. Affirmative Consent & Consent Notice
Your personal data is processed on the lawful basis of your free, specific, informed, unconditional, and unambiguous consent, accompanied by an affirmative action.
Prior to submitting any form on Clicqs, you are presented with an explicit, unchecked consent notice requiring your active action:
“I agree to Clicqs collecting and using the personal information provided above to contact me regarding my enquiry, in accordance with the Privacy Policy.”
Forms cannot be submitted without actively checking this box. Pre-ticked checkboxes and passive consent mechanisms are strictly forbidden across our infrastructure.
06. Data Retention & Secure Erasure
We retain personal data only for as long as is necessary to satisfy the purpose for which it was collected. For enquiries that do not result in a commercial service engagement, personal contact records are permanently erased from active systems within 180 days. If you enter into a client contract with Clicqs, project-related records are retained for the duration of the engagement and any statutory tax/accounting limitation periods.
Should you withdraw your consent at any point prior to the retention limit, your data will be immediately marked for deletion and securely purged.
07. Security & Technical Safeguards
We implement reasonable security safeguards to protect digital personal data in our custody from unauthorized access, collection, disclosure, copying, modification, or disposal, in compliance with Section 8(5) of the DPDP Act. These safeguards include:
- End-to-end transport layer security (HTTPS with modern TLS 1.3 encryption).
- Restricted role-based access to studio staff handling direct project enquiries.
- No unencrypted plain-text storage on public-facing networks.
- Regular security reviews and vulnerability assessments.
08. Your Rights as a Data Principal
As a Data Principal under Chapter III of the DPDP Act 2023, you enjoy statutory rights regarding your digital personal data:
Right to Access
Obtain confirmation and a summary of personal data being processed and identities of any data fiduciaries shared with.
Right to Correction & Erasure
Request correction of inaccurate or misleading data, completion of incomplete data, or erasure of no longer necessary data.
Right of Grievance Redressal
Access to an accessible, responsive grievance mechanism with our designated Grievance Officer.
Right to Nominate
Nominate any other individual to exercise your data rights in the event of death or incapacity.
09. Withdrawal of Consent (Comparable Ease Mechanism)
Under Section 6(4) of the DPDP Act 2023, you have the right to withdraw your consent at any time. The statute mandates that the ease of withdrawing consent must be comparable to the ease with which consent was given.
Because giving consent on Clicqs takes just one click on our contact form, withdrawing your consent is just as effortless. You can revoke your consent instantly using the tool below, or by contacting our team via email.
Instant Consent Revocation Tool
Enter the email address or phone number you previously used when submitting an enquiry. Submitting will immediately record your revocation in our audit log and suppress all future communication.
10. Grievance Redressal & Contact Information
In accordance with Section 8(9) of the DPDP Act 2023, Clicqs has designated a Grievance Officer to address any questions, feedback, or requests regarding personal data processing:
Designation: Data Protection & Grievance Redressal Officer
Studio: Clicqs Creative Digital Studio
Email: privacy@clicqs.studio / hello@clicqs.studio
Response Time: Within 30 days of verified receipt (or applicable expedited timeline under notified DPDP Rules).
If you are unsatisfied with our grievance redressal, you retain the statutory right under the DPDP Act 2023 to submit a complaint before the Data Protection Board of India in the manner prescribed once the Board's complaint filing provisions become operative under the notified Rules.