Privacy Policy

01Who We Are

Sanrovax Private Limited (“Sanrovax”, “we”, “us”, “our”) is a performance marketing agency registered in India. We run and manage advertising, SEO, website and growth projects for businesses.

This policy covers sanrovax.com, our landing pages, our contact forms, and the information we receive when you speak to us or work with us. For the purposes of Indian data protection law, Sanrovax is the Data Fiduciary for the personal data described here.

02Information We Collect

Information you give us

• Enquiry and contact forms: your name, email address, phone or WhatsApp number, business name, website, industry, budget range and the details you write in your message.
• Calls and meetings: notes from strategy calls you book with us, including information about your business goals and current marketing.
• Client onboarding: billing name, business address, GST details where applicable, and the contact details of the people we work with on your team.
• Emails and messages: anything you send us by email, WhatsApp, LinkedIn or other channels.

Information collected automatically

• IP address, browser type, device type, operating system and approximate location.
• Pages you visit, time spent on pages, the link or ad that brought you to our site, and actions such as form submissions or button clicks.
• Cookie and pixel data described in the Cookies and Tracking section below.

We do not ask for and do not want sensitive information such as bank passwords, card numbers, health information or government ID numbers through our website forms. Please do not send these to us.

03How We Use Your Information

• To reply to your enquiry and arrange a strategy call.
• To prepare proposals, quotes and audits you ask for.
• To deliver the services you hire us for, send invoices and manage our working relationship.
• To send you updates, resources or follow up messages about our services. You can opt out of these at any time.
• To measure how our website and ads perform and improve them.
• To show our ads to people who have visited our website, on platforms such as Facebook, Instagram and Google.
• To keep our website secure and prevent spam or misuse.
• To meet our legal, tax and accounting obligations.

We process your personal data on the basis of your consent, which you give when you submit a form or contact us, and for legitimate uses permitted by law, such as completing a service you asked for or meeting a legal requirement.

04Cookies and Tracking

Our website uses cookies and similar tools to work properly and to measure marketing performance. These include:

• Essential cookies: needed for the website, forms and security features to function.
• Analytics: tools that tell us how visitors use the site, which pages perform well and how people find us through search.
• Meta Pixel and Conversions API: these send website events, such as page views and form submissions, to Meta so we can measure our Facebook and Instagram ads and show relevant ads. The Conversions API sends some of this data from our server rather than your browser. Where we share contact details with Meta for ad matching, they are hashed before they are sent.
• Google services: such as Google Search Console and Google Ads tools, which help us understand search performance and ad results.

You can block or delete cookies in your browser settings. You can also control ad personalisation through your Meta ad preferences and Google ad settings. Blocking cookies may affect how some parts of the site work.

05When We Share Your Information

We do not sell your personal data. We share it only in these situations:

• Service providers who help us run our business, such as website hosting, form and email tools, scheduling tools like Calendly, invoicing tools like Zoho, and cloud storage. They can use your data only to provide their service to us.
• Advertising and analytics platforms such as Meta and Google, as described in the Cookies and Tracking section.
• Professional advisers such as our accountants, auditors or lawyers, where needed.
• Legal requirements: when a law, court order or government authority requires it, or when we need to protect our rights, our clients or the public.
• Business changes: if Sanrovax is merged, acquired or restructured, your data may move to the new entity under the same protections.

06Client Account and Campaign Data

When you hire us, you may give us access to your ad accounts, Business Manager, Google Ads, analytics, website, CRM or lead lists. Data inside these accounts, including the leads and customer information your campaigns collect, belongs to you.

• We access and use this data only to deliver the agreed services.
• We do not use your customer data for our own marketing or for any other client.
• Access is limited to the team members working on your project.
• When our engagement ends, you can remove our access, and we stop using or delete copies of your data we hold, unless the law requires us to keep certain records.

As the owner of that data, you are responsible for having the right consents and notices in place for the people whose data you collect through your campaigns.

07How Long We Keep Data

• Enquiries that do not become projects: kept for up to 24 months, then deleted or anonymised.
• Client records, contracts and invoices: kept for as long as Indian tax and company law requires, generally 8 years.
• Website and tracking data: kept according to the retention settings of the tools that collect it.

If you ask us to delete your data, we will do so unless we need to keep it to meet a legal obligation.

08How We Protect Your Data

We use reasonable security practices to protect your information, including SSL encryption on our website, access controls on our accounts, two factor authentication on key business tools, and limiting access to people who need it.

No website or online service can be fully secure. If we become aware of a data breach that affects your personal data, we will inform you and the relevant authorities as required by law.

09Your Rights

Under the Digital Personal Data Protection Act, 2023 and other applicable Indian law, you have the right to:

• Ask for a summary of the personal data we hold about you and how we use it.
• Ask us to correct, complete or update your data.
• Ask us to delete your data.
• Withdraw your consent at any time. This does not affect anything we did before you withdrew it.
• Raise a grievance with us, and if you are not satisfied with our response, approach the Data Protection Board of India.
• Nominate another person to exercise your rights if you are unable to do so.

To use any of these rights, email sandip@sanrovax.com. We may ask you to confirm your identity before we act on the request.

10Third Party Websites

Our website links to other websites and platforms, such as social media pages and scheduling tools. We are not responsible for how those websites handle your data. Please read their privacy policies before sharing information with them.

11Children's Privacy

Our services are meant for businesses and adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has sent us personal data, contact us and we will delete it.

12Data Stored Outside India

Some of the tools we use, such as advertising platforms, email services and cloud storage, may store or process data on servers outside India. When this happens, we rely on providers that follow recognised security standards, and we follow any restrictions the Government of India places on such transfers.

13Changes to This Policy

We may update this policy when our services, tools or the law change. The latest version will always be on this page with the updated date at the top. If a change is significant, we will make it clear on our website or inform our clients directly.

14Grievance Officer and Contact

If you have a question, complaint or request about your personal data, contact our Grievance Officer. We will acknowledge your request and aim to resolve it within 30 days.