The short version: we collect the minimum we need to sell and run our products. We do not sell your data, we do not rent it, and we do not trade it. You can ask us to delete it at any time by emailing contact@grandfieldmedia.com.
1. Who is responsible for your data
Grandfield Media Private Limited (CIN U85499TS2026PTC221225, GSTIN 36AANCG3247P1ZY), No 93 Koundinya Nagar, Nr Prathibha High Sch, I.E.Nacharam, Uppal, Hyderabad- 500076, Telangana, India, is the data controller for personal data collected through this website and our products. Contact us about anything in this policy at contact@grandfieldmedia.com.
2. What we collect
| Category | Examples | Why we have it |
|---|---|---|
| Contact details | Name, email address, and where relevant a phone number | To create your account, deliver what you bought, and answer your messages |
| Purchase records | What you bought, when, the amount, the currency, invoice and receipt data | To fulfil the order, provide support, and meet tax and accounting obligations |
| Payment data | A transaction reference and payment status from our payment provider | To confirm payment and process refunds. We never receive or store your full card number |
| Content you provide | Text, images and business details you enter into a product | To build and serve the product you asked us to make |
| Technical data | IP address, browser type, device type, pages visited, timestamps | To keep our services secure, diagnose faults and understand aggregate usage |
| Correspondence | Emails and support messages you send us | To answer you and keep a record of the issue |
We do not knowingly collect sensitive personal data, and we ask that you do not send it to us. We do not collect data from children.
3. Why we are allowed to use it
- To perform our contract with you — delivering the product you bought and supporting it.
- Because you consented — for example, if you sign up for email updates. You can withdraw consent at any time.
- Our legitimate interests — keeping our services secure, preventing fraud and abuse, and improving what we build.
- Legal obligation — tax, accounting and other records we are required by law to keep.
4. Who we share it with
We share personal data only with service providers who need it to make our products work, and only as far as they need it. These include:
- Payment providers to take payment and issue refunds;
- Hosting and infrastructure providers that run our servers and serve our websites;
- Domain registrars where a product includes registering a domain in your name;
- Email and communication providers that deliver our transactional and support email;
- Professional advisers and authorities where the law requires disclosure.
We do not sell, rent or trade personal data to anyone, for any purpose, ever. We do not share your data with advertisers.
5. International transfers
We operate from India and serve customers worldwide, and some of our service providers are located outside your country. Where personal data is transferred internationally, we take reasonable steps to ensure it remains protected to the standard described in this policy and as required by applicable law.
6. How long we keep it
- Account and product data — while your account or subscription is active, and for a reasonable period afterwards in case you return.
- Transaction and invoice records — for as long as tax and accounting law requires us to keep them.
- Support correspondence — normally up to three years, so we have context if you write again.
- Technical logs — normally up to twelve months.
When we no longer need personal data, we delete it or irreversibly anonymise it.
7. How we protect it
Our sites are served over encrypted HTTPS connections. Access to systems holding personal data is restricted to the people who need it, protected by strong authentication. Databases are not exposed to the public internet and backups are encrypted. No system is perfectly secure, but we take these obligations seriously and act promptly if something goes wrong.
8. Your rights
Depending on where you live, you have some or all of the following rights over your personal data:
- Access — ask what personal data we hold about you and get a copy;
- Correction — have inaccurate or incomplete data corrected;
- Deletion — ask us to erase your data, subject to records we must keep by law. See our Data Deletion Instructions;
- Restriction and objection — ask us to limit or stop certain processing;
- Portability — receive your data in a commonly used machine-readable format;
- Withdraw consent — where we rely on consent, withdraw it at any time;
- Complain — raise a concern with your data protection authority.
To exercise any of these, email contact@grandfieldmedia.com from the address associated with your account. We respond within two business days and complete verified requests within 30 days.
9. Cookies
We keep cookie use to the minimum needed to make our sites work and to understand aggregate traffic. Full details are in our Cookie Policy.
10. Automated decisions
We do not make decisions with legal or similarly significant effects about you using automated processing alone.
11. Changes to this policy
We may update this policy. The current version, with the date it was last updated, is always on this page. If a change materially affects how we handle your data, we will tell you by email where we hold your address.
12. Grievance contact
For any privacy question, request or complaint, write to the grievance contact at contact@grandfieldmedia.com or by post to Grandfield Media Private Limited, No 93 Koundinya Nagar, Nr Prathibha High Sch, I.E.Nacharam, Uppal, Hyderabad- 500076, Telangana, India. Every request is acknowledged, and we aim to resolve complaints within 30 days.