Privacy policy.

Effective date: [date]. Last reviewed: [date].

This Privacy Policy explains how Studio brandstac (“brandstac”, “we”, “us”) collects and uses personal data when you use brandstac.com or contact us. We are based in New Delhi, India.

1. What we collect. When you use our contact form or email us, we collect the name, email address, optional company name and message content you provide. We also collect basic technical and analytics data (such as IP address, device/browser type and pages visited) through cookies and analytics tools.
2. Why we collect it (purpose). To respond to your enquiry, to provide and improve our services, to communicate with you about a potential or ongoing project, and to maintain the security and performance of our website. Each purpose is limited to what is necessary.
3. Legal basis. We process contact-form data on the basis of the consent you give when you submit the form, and to take steps at your request prior to entering into any engagement. Analytics data is processed on the basis of consent where required.
4. Cookies and analytics. We use cookies and third-party analytics to understand site usage. You can control cookies through your browser settings; disabling them may affect site functionality.
5. Third-party processors. We use reputable third-party service providers for hosting, email delivery and analytics. These providers process data only as needed to deliver their service and under their own terms.
6. Data retention. We retain contact-form data only as long as necessary to respond to and manage your enquiry or engagement, and thereafter for a reasonable period for our records, after which it is deleted. Analytics data is retained per our analytics provider's default period.
7. Your rights. Under India's Digital Personal Data Protection Act, 2023 (DPDP Act) you have the right to access a summary of your personal data and its processing, to correction and completion, to erasure, to grievance redressal, and to nominate another person to exercise your rights. To exercise any right, email hello@brandstac.com.
8. DPDP Act awareness. brandstac processes personal data in accordance with the DPDP Act, 2023 and applicable rules. We aim to collect only what is necessary, use it only for stated purposes, and honour withdrawal of consent, which you can request at any time by emailing us. The DPDP Act took partial effect on 13 November 2025, with full compliance expected by 13 May 2027.
9. Security. We apply reasonable technical and organisational measures to protect personal data against unauthorised access, loss or misuse.
10. Changes. We may update this policy; the current version is always published here with its review date.
11. Contact for requests. For any privacy request or grievance, contact hello@brandstac.com, Studio brandstac, New Delhi, India.

This is a plain-language draft for a New Delhi studio collecting contact-form data. It must be reviewed by a lawyer, with your registered address and effective dates inserted, before publishing.