Privacy Policy

01Who we are

This Privacy Policy explains how ThelaunchProtocol ("we", "us", or "our") collects, uses, stores, shares, and protects your personal data when you visit our website or engage our services. We are the data fiduciary responsible for your personal data under India's Digital Personal Data Protection Act, 2023, and, where applicable, we act as a data controller under other privacy laws such as the EU General Data Protection Regulation.

• Legal entity: [LEGAL ENTITY NAME]
• Registered address: [ADDRESS]
• Contact for privacy matters: [PRIVACY EMAIL]

By using our website or services, you agree to the practices described in this policy.

02What personal data we collect

We collect only the data we need to run our business and deliver our services. Depending on how you interact with us, this may include:

Information you give us directly:

• Identity and contact details such as your name, company name, email address, phone number, and role.
• Information you share when you book a call, fill in a form, or communicate with us by email or message.
• Details about your product, launch goals, target audience, and campaign KPIs that you provide so we can scope and run your launch.
• Billing and payment details necessary to invoice and receive payment for our services.

Information we collect automatically:

• Technical data such as your IP address, browser type, device information, and operating system.
• Usage data such as the pages you view, links you click, time spent on the site, and referring source.
• Cookie and analytics data, as described in the Cookies section below.

Information from third parties:

• Analytics providers and advertising platforms that give us aggregated or anonymized audience insights.
• Payment processors that confirm your transactions. We do not store full card details.

We do not knowingly collect data from anyone under the age of 18. If you are under 18, please do not use this site or submit any personal data.

03How we use your personal data

We use your personal data for the following purposes:

• To respond to your enquiries and communicate with you.
• To scope, plan, and deliver launch services you engage us for.
• To coordinate with creators, KOLs, and partners as part of running your launch.
• To send you service updates, proposals, and, where you have opted in, marketing communications.
• To process payments and maintain our business and accounting records.
• To operate, maintain, secure, and improve our website.
• To comply with legal obligations and enforce our agreements.

04The legal basis for processing

Where the Digital Personal Data Protection Act, 2023 applies, we process your personal data based on your consent, or where the processing qualifies as a legitimate use permitted under the Act, such as where you have voluntarily provided your data for a specified purpose.

Where the GDPR applies, we rely on one or more of the following: your consent, the performance of a contract with you, our legitimate interests in operating and growing our business, or compliance with a legal obligation.

You may withdraw your consent at any time. Withdrawing consent will not affect the lawfulness of any processing carried out before the withdrawal. To withdraw consent, contact us at [PRIVACY EMAIL].

05How we share your personal data

We do not sell your personal data. We may share it with:

• Service providers and processors who help us run our business, such as hosting, analytics, email, scheduling, and payment providers, who are bound by confidentiality and security obligations.
• Creators, KOLs, and partners strictly as needed to coordinate and deliver your launch.
• Professional advisers such as lawyers and accountants where necessary.
• Authorities or regulators where we are required to do so by law.
• A successor entity in the event of a merger, acquisition, or sale of assets.

Where we engage processors, we put appropriate contractual and security terms in place as required under the applicable law.

06International data transfers

We operate with clients and partners in multiple countries, so your personal data may be processed outside your country of residence, including outside India. Where we transfer data internationally, we take reasonable steps to ensure it remains protected in line with this policy and applicable law. Under the Digital Personal Data Protection Act, 2023, personal data may be transferred outside India except to jurisdictions restricted by the Government of India. Where the GDPR applies, we rely on appropriate safeguards for such transfers.

07How long we keep your personal data

We keep your personal data only for as long as necessary for the purposes described in this policy, including to satisfy any legal, accounting, or reporting requirements. When your data is no longer needed, we delete or anonymize it. In some cases we retain limited records for a minimum period as required by law.

08Your rights

Subject to applicable law, you have the following rights over your personal data:

• The right to access the personal data we hold about you.
• The right to correct inaccurate or incomplete data.
• The right to request deletion of your data.
• The right to withdraw consent where processing is based on consent.
• The right to grievance redressal.
• The right to nominate another person to exercise your rights in the event of death or incapacity, where provided under the Digital Personal Data Protection Act, 2023.

Where the GDPR applies, you may also have the right to restrict or object to processing, the right to data portability, and the right to lodge a complaint with your local supervisory authority.

To exercise any of these rights, contact us at [PRIVACY EMAIL]. We will respond within a reasonable time and in line with applicable law.

09How we protect your personal data

We implement reasonable technical and organizational measures to protect your personal data against unauthorized access, loss, misuse, or disclosure. These may include access controls, encryption or masking where appropriate, and regular review of our security practices. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a data breach affects your personal data, we will notify you and the relevant authority as required by law.

10Cookies and analytics

Our website uses cookies and similar technologies to make the site work, understand how it is used, and improve it. You can control cookies through your browser settings. Some features of the site may not function properly if you disable cookies. Where required, we will ask for your consent before setting non essential cookies.

11Third party links

Our website may contain links to third party sites, including X and other platforms. We are not responsible for the privacy practices of those sites. We encourage you to read their privacy policies.

12Grievance redressal

If you have any questions, concerns, or complaints about how we handle your personal data, you can contact our grievance contact:

• [GRIEVANCE CONTACT NAME OR ROLE]
• [GRIEVANCE EMAIL]

We take all such matters seriously and will work to resolve them promptly.

13Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top. Significant changes will be communicated where appropriate. Please review this page periodically.