Privacy Policy
Last updated
In short: we collect your name, email and project details when you contact us, and your brief and materials when we make your video. To make a video, those materials are processed by third-party AI tools. Analytics only runs if you accept it. We do not sell your data, and you can ask us to correct or delete it at any time.
Who we are
Nazia Digital is a sole proprietorship owned and run by Nazia, registered with Udyam (MSME) and based in India. We work with clients in India and internationally. In this policy, "we" and "us" mean Nazia Digital.
We decide why and how the personal data described here is used. That makes us the "data fiduciary" under India’s Digital Personal Data Protection Act, 2023 (DPDP Act), and the "controller" under the GDPR.
For anything in this policy, including privacy questions and complaints, contact Nazia at support@naziadigital.com.
What we collect
1. When you contact us
If you fill in the quote form, email or message us, or book a call, we collect:
- Your name and email address
- Your project details, and any product links you send
- Your budget range and project type, if you choose to select them (both optional)
- Your phone number, only if you contact us by phone or WhatsApp
The form asks for name, email and project details. Everything else is optional. Please do not send us financial details, identity documents or other sensitive personal information through the form.
2. When we work together
To make and deliver your video, we handle:
- Your brief, scripts, product details and feedback
- Materials you supply: product images, logos, footage, audio, brand assets
- Billing details you give us for invoices, such as a business name, address and tax number
- Correspondence with us
If the video features a real person, we also hold that person’s signed consent form.
3. When you browse this site
If you accept analytics, Google Analytics collects:
- Your approximate location (city or region level, from your IP address)
- Your device type, browser and screen size
- Which pages you viewed, in what order, and for how long
- How you arrived at the site, for example from a search engine or a link
This is used in aggregate to see which pages are useful. We do not use it to identify you, and we do not combine it with the details you send through the form.
Whatever you choose about analytics, the server that delivers this website keeps short-lived technical logs (IP address, browser, pages requested) for security and fault-finding, as web servers normally do.
Why we use it
| What we collect | Why | Our basis |
|---|---|---|
| Name, email, project details | To reply to your enquiry and prepare a quote | Your consent, given when you submit the form |
| Budget and project type | To give you a more accurate quote | Your consent. Both fields are optional |
| Product link and project details | To enter you in the free sample video draw and, if you win, to make your sample | Your consent, given when you submit the form with a product link |
| Brief, scripts and materials | To produce and deliver the video you commissioned | To perform our contract with you |
| Billing details, invoices and payment records | To invoice you and meet tax and accounting obligations | Our contract with you, and legal obligation |
| Analytics data | To understand which pages are useful and fix problems | Your consent |
| Server logs | To keep the site secure and working | Our legitimate interest in running a secure website |
We do not make decisions about you by automated means, and we do not build profiles of you for advertising.
AI tools and your materials
We make videos using AI. To do that, your brief, scripts, product images and any footage, voice or photos you supply are submitted to third-party AI services for video, image and voice generation and editing, such as Google Veo, Runway, ElevenLabs and Kling.
- These providers are based in several countries outside India, and each has its own terms. Depending on the provider and the plan, they may keep submitted material for a period or use it to operate or improve their services. We do not control their practices.
- We do not ourselves train AI models on your materials. Where a tool builds a custom avatar or voice from material you supply, it is made only for your project and only with the written consent of the person it is based on.
- If your materials are confidential, include other people’s personal data, or must not go to a particular tool or country, tell us before we start. We will work within that, or tell you plainly if we cannot.
Who else handles your data
We do not sell your data and we do not share it for advertising. We use third-party services to run the business, and your data passes through them:
| Service | What it handles | Where |
|---|---|---|
| AI generation services | Your brief and materials, to generate and edit your video (see above) | Several countries outside India |
| Formspree | Processes the website contact form and forwards it to our inbox | United States |
| Google (Gmail) | Our email, where your enquiry arrives and is stored | United States and other Google locations |
| Google Analytics | Website usage statistics, only if you accept analytics | United States and other Google locations |
| Calendly | Booking calls. Collects your name, email and chosen time | United States |
| Google Drive / Dropbox | Storing and delivering project files | United States |
| Messaging, only if you choose to contact us that way | Operated by Meta | |
| YouTube (Google) | Our portfolio videos. Your browser loads their preview images from YouTube when a page with videos opens, and pressing play loads YouTube’s player | United States and other Google locations |
| Our website hosting provider | Delivers this website and keeps the technical logs described above | May be outside India |
| Payment gateway (if you pay online) | Processes online payments. We do not see or store your card details or banking credentials | Depends on the provider |
Each has its own privacy policy governing what it does with data. We may also use freelance editors or other subcontractors on a project. They are bound to keep your materials confidential and we remain responsible for them.
We will disclose personal data where the law requires it, for example to a court or authority.
Transfers outside India
Because these providers are based outside India, your data is stored and processed outside India. By sending us your details, you agree to this. We choose established providers and rely on the data-protection commitments in their own terms, but we cannot control their systems.
How long we keep it
| What | How long |
|---|---|
| Enquiries that did not become projects | 2 years from our last contact with you, then deleted |
| Client project files, briefs and correspondence | 3 years after the project ends, so we can make edits for you, unless you ask us to delete sooner |
| Signed consent forms for a real person’s likeness | For as long as the video is in use, plus 3 years |
| Invoices and payment records | 8 years, as expected for tax and accounting purposes |
| Analytics data | Up to 14 months, then deleted automatically by Google |
Marketing emails
We do not currently send marketing emails or a newsletter. If you contact us, we use your email only to reply to you about your enquiry and your project.
If we start sending marketing emails in future, we will ask for your consent separately and clearly first. We will not add you to a mailing list just because you once asked for a quote. Every marketing email would carry a one-click unsubscribe link.
Your rights
Wherever you are, you can ask us to:
- Tell you what personal data we hold about you and how we use it
- Correct anything that is wrong or out of date
- Delete your data (unless we are legally required to keep it, such as invoices)
- Stop using your data, or withdraw a consent you gave us earlier. Withdrawing is as easy as giving it: email us
- Send you a copy of your data in a portable format
- Nominate someone to exercise these rights on your behalf if you are unable to
To do any of this, email support@naziadigital.com saying what you want. We will confirm we received it within 48 hours and act on it within 30 days. We may ask you to confirm your identity first, so we do not act on a request from someone pretending to be you. There is no charge. If we cannot do what you ask, for example because the law requires us to keep a record, we will tell you why.
If you are outside India
We work with clients worldwide and apply one standard to everyone: we collect the minimum we need, tell you what we do with it, and delete it when you ask. Depending on where you are, the law may give you more:
- India: the Digital Personal Data Protection Act, 2023 gives you rights of access, correction, erasure, grievance redressal and nomination, and the right to complain to the Data Protection Board of India.
- UK and European Economic Area: data protection law there (the UK GDPR and EU GDPR) adds the right to object to or restrict processing, and the right to complain to your data protection authority, in the UK the Information Commissioner’s Office. We honour these rights whether or not that law strictly applies to a small business based in India.
- United States: some states give residents privacy rights. We do not sell personal information or share it for cross-context behavioural advertising. You can use the rights listed above by emailing us.
Cookies
Google Analytics sets cookies in your browser to recognise a returning visit and to measure how the site is used. These are not necessary for the site to work, so we ask first.
When analytics is switched on, a notice at the bottom of the page asks for your choice, and Google Analytics does not load unless you accept. Declining is as easy as accepting, and the site works the same either way. You can change your mind at any time with the "Cookie settings" link at the bottom of every page.
Our portfolio videos use YouTube’s privacy-enhanced mode, which does not set YouTube cookies until you press play. You can also refuse or delete cookies in your browser settings at any time.
Keeping your data safe
This site is served over an encrypted connection (HTTPS). Accounts holding your data are protected by strong passwords and, where the provider supports it, two-factor authentication. Access is limited to people who need it to do the work.
No system is perfectly secure. If a breach affects your data, we will tell you and the relevant authority without delay, and explain what happened and what we are doing about it.
Children
This is a business-to-business service and is not directed at children. We do not knowingly collect data from anyone under 18. If you believe a child has sent us personal data, contact us and we will delete it.
Complaints and grievances
If you are unhappy with how we have handled your data, contact our Grievance Officer, Nazia, at support@naziadigital.com with "Grievance" in the subject line. We will acknowledge within 48 hours and aim to resolve it within 30 days, and we will tell you the outcome.
If you are not satisfied with our response, you can complain to the Data Protection Board of India or, if you are in the UK or EEA, to your data protection authority.
Links to other websites
This site links to other websites, including our social media profiles, our booking page on Calendly, and the sources we cite in our articles. Those sites have their own privacy policies, and we are not responsible for how they handle your data.
Changes to this policy
If we change how we handle data, we will update this page and the "last updated" date at the top. For significant changes affecting people who have already contacted us, we will email them. Earlier versions are available on request.
Contact
Nazia Digital, India. Email: support@naziadigital.com.