Privacy Policy

Lee-On Digital ("we", "us" or "our") is committed to protecting the privacy of individuals who visit our website at leeondigital.com ("Website") and who use our services. This Privacy Policy explains what personal data we collect, how we use it, who we share it with and what rights you have in relation to your data.

By using our Website or engaging our services, you agree to the practices described in this policy. If you do not agree, please discontinue use of the Website.

We collect personal data in the following ways:

• Contact forms — your name, email address, phone number and the message or project brief you submit.
• Enquiry and callback requests — name, phone number and business details provided when you request a consultation.
• Newsletter sign-ups — your email address and, optionally, your name.
• Analytics — anonymised data about how visitors navigate our Website, collected via Google Analytics 4 (IP anonymisation is enabled).
• Cookies — small text files placed on your device to remember your preferences and improve your experience. See Section 7 for details.
• Business data provided during project delivery — documents, brand assets, credentials and other materials you share with us to complete contracted work.

We use the personal data we collect to:

• Respond to enquiries and provide quotations or proposals.
• Deliver the services you have contracted us to perform.
• Send project updates, invoices and contractual communications.
• Send marketing newsletters where you have opted in (you can unsubscribe at any time).
• Improve and optimise our Website and service offerings.
• Comply with applicable legal and regulatory obligations.
• Prevent fraud and protect the security of our systems.

We process your personal data on the following legal bases under applicable data protection law (including India's Digital Personal Data Protection Act 2023 and, where applicable, the EU GDPR):

• Contract — processing necessary to perform a contract with you or take steps at your request before entering a contract.
• Legitimate interests — where our interests in operating and improving our business do not override your rights (e.g. internal analytics).
• Consent — where you have explicitly agreed, such as subscribing to marketing emails.
• Legal obligation — where we must process data to comply with a legal requirement.

We do not sell, rent or trade your personal data. We may share it with the following trusted third parties only to the extent necessary:

• Service providers — cloud hosting, email delivery, analytics and project management tools (e.g. Google Workspace, Vercel, Razorpay). These providers process data on our behalf under data processing agreements.
• Professional advisors — accountants or lawyers where necessary for legal or compliance purposes.
• Law enforcement or regulators — where required by applicable law or a valid court order.

All third parties are required to handle your data securely and in accordance with applicable law.

We retain personal data for as long as necessary to fulfil the purposes described in this policy, or as required by law:

• Client project data — retained for 7 years after project completion for accounting and legal purposes.
• Enquiry and contact data — retained for 2 years if no engagement follows.
• Marketing consent records — retained until you withdraw consent plus 1 year.
• Website analytics — aggregated data retained for 26 months (Google Analytics default).

When data is no longer needed, it is securely deleted or anonymised.

We use the following types of cookies on our Website:

• Essential cookies — required for the Website to function (e.g. session management). These cannot be disabled.
• Analytics cookies — Google Analytics 4 with IP anonymisation, helping us understand how visitors use the site. You can opt out via your browser settings or the Google Analytics opt-out browser add-on.
• Preference cookies — remember choices you make (e.g. language or chat preferences).

You can control or delete cookies through your browser settings at any time. Disabling analytics cookies will not affect your ability to use the Website.

Depending on where you are located, you may have the following rights regarding your personal data:

• Right of access — request a copy of the personal data we hold about you.
• Right to rectification — request correction of inaccurate or incomplete data.
• Right to erasure — request deletion of your data where it is no longer necessary.
• Right to restriction — request that we limit how we process your data.
• Right to data portability — request your data in a structured, machine-readable format.
• Right to object — object to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent — where processing is based on consent, withdraw it at any time without affecting prior processing.

To exercise any of these rights, please contact us at leeondigitals@gmail.com. We will respond within 30 days.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or alteration. These include SSL/TLS encryption, role-based access controls, regular security reviews and encrypted data storage.

While we take reasonable precautions, no data transmission over the internet is completely secure. You transmit data to us at your own risk.

Lee-On Digital is based in India. If you access our Website from outside India, your data may be transferred to and processed in India. We also use third-party services that may process data in other countries (including the EU and US). Where such transfers occur, we ensure appropriate safeguards are in place (e.g. Standard Contractual Clauses or equivalent mechanisms).

Our Website and services are not directed at children under the age of 18. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will post the updated policy on this page with a revised "Last Updated" date. For significant changes, we will provide a more prominent notice (e.g. email notification to active clients).

Continued use of the Website after changes are posted constitutes your acceptance of the updated policy.

For any questions, concerns or requests regarding this Privacy Policy or your personal data, please contact us:

• Email: leeondigitals@gmail.com
• Address: Lee-On Digital, Bhubaneswar, Odisha, India
• Response time: within 2 business days for general queries; within 30 days for data rights requests.