Privacy Policy

Alllyphant (“we”, “us”, “our”) is a growth partner based in Mumbai, Maharashtra, India. This policy explains what personal data we collect through alllyphant.com (the “website”), why we collect it, and the choices and rights you have.

For the purposes of India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”), we are the Data Fiduciary for the personal data described here. You can reach us about anything in this policy at team@alllyphant.com.

Information you give us. When you fill in the enquiry form, we collect:

• your name and email address (required);
• your phone or WhatsApp number, and your business name or website (optional);
• the services you select and anything you write in your message;
• the page of the website you sent the form from.

If you email, call or message us on WhatsApp or social media, we keep a record of that conversation and the contact details you used.

Information collected automatically. We use Google Analytics to understand how visitors use the website (pages viewed, time on page, approximate location at city level, device and browser type, and how you arrived, for example from a search or a social media link). See Cookies and analytics.

Our servers briefly process your IP address to protect the enquiry form from spam and abuse. We do not store it with your enquiry.

We do not ask for, and ask you not to send us, sensitive information such as financial account details, health records or government ID numbers through the website.

We use your personal data only to:

• reply to your enquiry and arrange a conversation or growth audit;
• send you an automatic confirmation that we received your enquiry;
• keep a record of our conversations so either founder can pick them up;
• prepare a proposal if you ask for one;
• understand which pages and channels bring enquiries, so we can improve the website;
• keep the website secure and comply with the law.

We do not sell your personal data, rent it, or add you to bulk marketing lists. We will not send you promotional messages by WhatsApp, SMS or phone unless you have asked us to.

By submitting the enquiry form, you consent to us using the details you provide for the purposes listed above. You can withdraw this consent at any time by emailing team@alllyphant.com. Withdrawing consent does not affect anything we did with your data before you withdrew it, but it does mean we may no longer be able to respond to your enquiry.

If you become a client, we also process your data to perform our agreement with you. That processing is covered by the agreement itself.

Your enquiry is seen only by Alllyphant’s founders and, where needed for your project, by people working with us under a written confidentiality agreement. We use a small number of trusted service providers (Data Processors) to run the website:

• Website hosting: Vercel, which serves the website and processes form submissions.
• Database: Neon, which stores enquiries in our private CRM.
• Email: our email provider, which delivers enquiry alerts and confirmations.
• Analytics: Google Analytics (Google LLC).

These providers process data on our instructions and are not allowed to use it for their own purposes. We may also disclose data when required by law, a court order or a government authority, or to protect our rights or someone’s safety.

Some of our service providers store or process data on servers outside India. Where this happens, we choose providers with strong security practices and only transfer data as permitted under the DPDP Act and any restrictions notified by the Government of India.

• Enquiries that do not become clients: deleted or anonymised within 24 months of our last contact, or sooner if you ask.
• Clients: for the length of our engagement and afterwards for as long as needed for accounting, tax and legal obligations.
• Analytics data: kept by Google Analytics for up to 14 months.

Our CRM is private and protected by a login. Data travels over encrypted (HTTPS) connections, access is limited to people who need it, and accounts are protected with strong passwords and two-factor authentication where available. No system is perfectly secure, but if a personal data breach affects you, we will inform you and the Data Protection Board of India as the law requires.

Under the DPDP Act, you have the right to:

• Access a summary of the personal data we hold about you and how we use it;
• Correct or update data that is inaccurate or incomplete;
• Erase data that we no longer need, or after you withdraw consent;
• Withdraw consent at any time;
• Nominate another person to exercise your rights if you die or are unable to;
• Raise a grievance with us, and then with the Data Protection Board of India if you are not satisfied.

To use any of these rights, email team@alllyphant.com. We may ask you to confirm your identity before acting on a request.

Cookies are small files a website stores in your browser. Our public website uses Google Analytics cookies to count visits and see which pages are useful. They do not tell us who you are, and we do not use them for advertising.

Our private CRM uses one essential login cookie for our own team. It is never set for website visitors.

You can block or delete cookies in your browser settings, or install Google’s Analytics opt-out add-on. The website works normally without analytics cookies.

The website is meant for businesses and adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has sent us their details, email team@alllyphant.com and we will delete them.

The website links to our social media pages and other sites. Those sites have their own privacy policies, and we are not responsible for how they handle your data.

We may update this policy as our services or the law change. The “Last updated” date at the top shows the latest version. If a change significantly affects how we use data you have already given us, we will tell you before it applies.

For any question, request or complaint about your personal data, contact our Grievance Officer:

Shubham Kadam, Grievance Officer, Alllyphant
Email: team@alllyphant.com
Mumbai, Maharashtra, India

We will acknowledge your message within 7 days and aim to resolve it within 30 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

See also our Terms of Use.