Legal
Privacy Policy
What personal data POSH-INTENT collects, why we collect it, who we share it with, and the rights you have over it.
01Who we are
POSH-INTENT is a content strategy and video production studio based in Uttarakhand, India. For the purposes of India’s Digital Personal Data Protection Act, 2023 (the “DPDP Act”) we are the Data Fiduciary. For visitors in the UK or European Economic Area we are the data controller under the UK GDPR and EU GDPR.
| Trading name | POSH-INTENT |
|---|---|
| Legal entity | [ADD: registered legal / proprietor name] |
| Business type | [ADD: sole proprietorship / LLP / Pvt Ltd] |
| Registered address | [ADD: street address, city, PIN code], Uttarakhand, India |
| GST registration | [ADD: GSTIN, or the words: not GST-registered] |
| bhupesh@poshintent.com | |
| Grievance Officer | [ADD: name of the person handling complaints] · bhupesh@poshintent.com |
02What we collect
We collect only what we need in order to answer you and deliver work. We do not buy personal data, and we do not sell it.
| Data | When | Why |
|---|---|---|
| Name, email, and anything you write to us | You email us | To reply and to scope the work |
| Name, email, and chosen time slot | You book a call through Calendly | To hold and confirm the appointment |
| Billing details — entity name, address, tax registration | You become a client | To raise invoices and keep tax records |
| Server access logs — IP address, browser, pages requested, timestamp | Automatically, on every visit | Kept by our host for security and fault diagnosis |
We run no analytics. There is no Google Analytics, no Meta Pixel, no advertising tag and no visitor-tracking script anywhere on this site. We cannot see who you are unless you tell us.
We do not knowingly collect data from anyone under 18. Under the DPDP Act a child’s personal data must not be used for tracking or targeted advertising — we do neither, for anyone. If you believe a child has sent us personal data, email us and we will delete it.
03Our legal basis
Under the DPDP Act (India) we process personal data on the basis of your consent, which you give by submitting a form, emailing us, or booking a call. Where you are already a client we also rely on the legitimate use of fulfilling the purpose you approached us for.
Under the UK and EU GDPR, where they apply to you:
- Consent (Art. 6(1)(a)) — any optional message you choose to send us.
- Contract (Art. 6(1)(b)) — delivering and invoicing work you engaged us for.
- Legal obligation (Art. 6(1)(c)) — keeping accounting and tax records.
- Legitimate interests (Art. 6(1)(f)) — replying to an enquiry you sent us, and keeping the site secure. You may object to this at any time.
04Who we share it with
We share personal data only with the processors that make the site and the service work. Each is bound by its own contract and privacy terms.
| Processor | What it handles | Where |
|---|---|---|
| Hostinger | Website hosting and server logs | EU / global |
| Calendly | Call bookings and the times you choose | United States |
| Google Workspace | Our email | Global |
| Vimeo | Serves the showreel videos, with tracking disabled | United States |
| Meta / Instagram | One embedded post, loaded only if you click to load it | Global |
We will also disclose data where the law requires it, or to establish or defend a legal claim. We never sell your data and we never share it with advertisers.
05International transfers
Some processors above store data outside India, principally in the United States. Where UK or EU data protection law applies, those transfers rely on the UK International Data Transfer Addendum or the EU Standard Contractual Clauses, together with the provider’s own safeguards. Under the DPDP Act, transfers are permitted to any country the Central Government has not restricted.
06How long we keep it
- Enquiries that do not become projects — 24 months, then deleted.
- Client project files and correspondence — 3 years after the final deliverable.
- Invoices and accounting records — 8 years, as Indian tax law requires.
- Server logs — per our host’s schedule, typically 30 days.
07Your rights
Whichever law applies to you, you can ask us to:
- Access a copy of the personal data we hold about you.
- Correct anything inaccurate, incomplete or out of date.
- Erase your data where we have no continuing legal reason to keep it.
- Withdraw consent at any time. This does not undo processing already carried out.
- Nominate someone to exercise these rights if you die or become incapacitated — a right specific to the DPDP Act.
- Port your data, or restrict or object to processing, where the GDPR applies to you.
Email bhupesh@poshintent.com with the subject line Data request. We respond within 30 days and we do not charge for it.
If you are not satisfied: in India, raise it first with our Grievance Officer above, then with the Data Protection Board of India once it is operational. In the UK, the Information Commissioner’s Office at ico.org.uk. In the EEA, your national supervisory authority.
08How we protect it
The site is served over HTTPS and form submissions are encrypted in transit. Access to our inbox and project files is protected by multi-factor authentication and limited to people who need it. We maintain reasonable security practices as required by the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
No method of transmission is perfectly secure. If a breach affects your personal data we will notify you and the relevant authority as the DPDP Act and, where applicable, the GDPR require.
09Changes
If we change this policy we update the date at the top of the page. Material changes affecting data you have already given us will be notified by email where we hold your address.
Questions about this document?
Email bhupesh@poshintent.com or book a free call. We answer data and billing questions within 7 working days.