01Introduction
NCMborz ("we," "us," or "our") is a performance-driven digital marketing agency - Meta & Google Ads, SEO, AI visibility, social, and conversion websites - working with founders, e-commerce brands, and local businesses across India and worldwide. We're committed to protecting the personal data you entrust to us.
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our site, book a strategy call, or work with us. It also covers your rights under India's Digital Personal Data Protection Act, 2023 (DPDP Act) and, where relevant, the EU/UK General Data Protection Regulation (GDPR).
02Information We Collect
We collect information in three ways:
- Contact details - name, email, phone, and company name when you book a call, request an audit, or message us.
- Project information - details about your business, goals, website, and advertising accounts you choose to share.
- Billing information - payment and invoicing details, processed via secure third-party payment providers.
- Communications - messages and correspondence sent via email, chat, WhatsApp, or scheduled calls.
- Usage data - pages visited, time on site, links clicked, and referring URLs.
- Device & technical data - IP address, browser, operating system, device identifiers, and approximate location.
- Cookies & similar technologies - as described in Section 04.
- Analytics and advertising platforms (such as Google and Meta) that provide aggregated performance and audience data.
- Publicly available sources used for research and outreach.
03How We Use Your Data
We use the information we collect to:
- Respond to your enquiries and deliver the services you request.
- Provide audits, strategy calls, proposals, and tailored recommendations.
- Plan, run, and optimise advertising and marketing campaigns.
- Process payments and manage our working relationship.
- Send service updates, reports, and - with your consent - marketing communications.
- Improve our website, services, and overall client experience.
- Detect and prevent fraud, security issues, or misuse.
- Comply with legal, regulatory, and tax obligations.
We process your data on the basis of your consent, the performance of a contract, our legitimate business interests, and compliance with legal obligations, as applicable.
05Advertising & Analytics
As a digital marketing agency, we use industry-standard analytics and advertising tools on our own site and, where engaged, on behalf of clients. These may include:
- Google Analytics - to analyse website traffic and behaviour.
- Google Ads & Google Tag Manager - for conversion tracking and remarketing.
- Meta (Facebook/Instagram) Pixel & Conversions API - to measure ad performance and build audiences.
- LinkedIn, Microsoft, and other ad platforms - where relevant to a campaign.
These third parties may set their own cookies and process data under their own policies. We encourage you to review the privacy practices of Google and Meta.
07Data Retention
We keep personal data only for as long as necessary to fulfil the purposes in this policy, meet our legal and contractual obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we securely delete or anonymise it.
08Data Security
We use reasonable technical and organisational measures - encrypted connections, access controls, and secure third-party infrastructure - to protect your data against unauthorised access, loss, or misuse. That said, no method of transmission over the internet is completely secure, and we can't guarantee absolute security.
09International Transfers
Because we serve clients globally and use international providers, your data may be transferred to and processed in countries outside your own, including outside India or the European Economic Area. Where required, we take appropriate steps to ensure your data receives an adequate level of protection under applicable law.
10Your Rights
Depending on your location and applicable law, you may have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Erase your data ("right to be forgotten") where applicable.
- Withdraw consent at any time, without affecting prior lawful processing.
- Restrict or object to certain processing activities.
- Data portability - receive your data in a structured, machine-readable format.
- Grievance redressal - raise a complaint with our contact below or the relevant data protection authority.
To exercise any of these rights, contact us using the details in Section 14. We'll respond within the timeframes required by applicable law.
11Third-Party Links
Our website may link to external sites we don't operate or control. We're not responsible for the privacy practices or content of those sites. We encourage you to read the privacy policy of every site you visit.
12Children's Privacy
Our services are intended for businesses and individuals aged 18 and over. We don't knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us so we can delete it.
13Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The "Last updated" date at the top shows when it was last revised. We encourage you to review this page periodically.
14Contact Us
Questions, concerns, or requests about this policy or your data? Reach out - a real person will respond.