Privacy Policy

This Privacy Policy explains how Peak Marketing ("we", "us", or "our"), a digital marketing, website development, and e-commerce management agency based at Gola Road, Danapur, Patna — 801503, Bihar, India, collects, uses, stores, and protects the personal data of visitors to peakmarketing.in and our clients.

We process personal data in accordance with the Digital Personal Data Protection Act, 2023 (the "DPDP Act"), the Information Technology Act, 2000, and the applicable rules and regulations issued thereunder (collectively, the "IT Rules"). Where this policy refers to your rights, those rights are as set out under the DPDP Act.

We use the personal data we collect to:

• Respond to your inquiries and consultation requests
• Deliver, manage, and improve the services we have been engaged to provide
• Improve the performance, security, and content of our website
• Send service updates, proposals, or reporting — only where you have consented or where necessary to perform the engagement
• Comply with applicable legal and regulatory obligations

We do not sell your personal data to any third party.

Under the DPDP Act, we process your personal data on the basis of consent given by you at the point of form submission or engagement, and, where applicable, for the performance of a contract (your service agreement with us) or to comply with a legal obligation.

You may withdraw your consent at any time by contacting us using the details in Section 13. Withdrawing consent will not affect the lawfulness of processing carried out before withdrawal, and we may continue to process certain data where required to comply with legal obligations.

Cookies are small text files stored on your device. We use cookies and similar technologies for:

• Site functionality — to keep the website working as expected.
• Analytics — to understand how visitors use the site so we can improve it.
• Advertising platform tracking — where relevant and enabled, ad platform tags (such as Meta Pixel or Google Ads conversion tracking) may be used to measure ad performance.

You can control or disable cookies through your browser settings. Disabling some cookies may affect how the website functions.

We do not sell personal data. In the course of delivering services, we may share or make data accessible to the following categories of third parties, only to the extent necessary:

• Advertising platforms — such as Google Ads and Meta (Facebook/ Instagram) Ads — when running campaigns on a client's behalf
• Marketplace platforms — such as Amazon, Flipkart, and Meesho — when managing a client's seller accounts
• Analytics providers that help us measure website and campaign performance
• Hosting and infrastructure providers that operate our website
• Professional advisors or authorities, where required by law

Each third-party platform applies its own privacy practices and is responsible for how it handles data once received. We limit what we share to what is necessary for the stated purpose.

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, to perform our service engagements, and to meet legal, accounting, or regulatory requirements under Indian law (including the DPDP Act and IT Rules).

Once data is no longer required, we securely delete it or anonymize it so that it can no longer be used to identify you.

We take reasonable technical and organizational measures to protect personal data against unauthorised access, loss, misuse, or disclosure. These include:

• Restricting access to personal data on a need-to-know basis
• Using strong, unique passwords and multi-factor authentication where platforms support it
• Reviewing and revoking account access when an engagement ends
• Storing credentials and client data within reputable, access-controlled platforms

No method of transmission or electronic storage is completely secure. While we strive to protect your data, we cannot guarantee absolute security.

Under the Digital Personal Data Protection Act, 2023, you have the right to:

• Access — request information about the personal data we hold about you and how it is processed
• Correction — request correction of inaccurate or incomplete personal data
• Erasure — request deletion of your personal data, subject to legal retention obligations
• Grievance redressal — raise a grievance with our Grievance Officer (see Section 10)
• Withdraw consent — withdraw consent previously given for processing your personal data

To exercise any of these rights, contact us through the details in Section 13. We will respond in accordance with the timelines set out under the DPDP Act.

In accordance with the Information Technology Act, 2000 and the applicable IT Rules, and as required under the DPDP Act, we have designated a Grievance Officer to address concerns regarding the handling of your personal data.

You may contact the Grievance Officer for privacy-related complaints. We will acknowledge and address grievances within the timelines prescribed under applicable law.

Our website and services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us so we can delete it.

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. When we do, we will revise the "Last Updated" date shown at the top of this page. We encourage you to review this page periodically.

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us.