Privacy Policy.

Data Controller & Contact Information

Aura Advert is the data controller (or "Data Fiduciary" under Indian law) responsible for your personal data processed through this Website and our services.

For any privacy-related inquiry, data subject request, or complaint, please contact us at the above details. We shall respond within thirty (30) days of receipt, or within such shorter period as may be required under applicable law.

Information We Collect

We collect information you provide directly, information generated automatically when you use our Website, and, where applicable, information received from third-party sources.

2.1 Information You Provide Directly

When you fill out our contact form, enquire about our services, or otherwise communicate with us, we may collect:

• Identity Data: Full name.
• Contact Data: Email address, phone number.
• Service Preference Data: Your selected service of interest.
• Project Data: Free-text project details, requirements, briefs, or any other information you voluntarily provide.

2.2 Information Collected Automatically

When you access or navigate our Website, we may automatically collect certain technical and usage data, including:

• Device Data: IP address, browser type and version, operating system, device type, screen resolution.
• Usage Data: Pages viewed, time spent on pages, click patterns, referring URL, exit pages.
• Location Data: Approximate geographic location derived from your IP address.
• Cookie & Tracker Data: Data collected via cookies, pixels, web beacons, and similar tracking technologies.

2.3 Information from Third Parties

We may receive information about you from third-party platforms where you engage with our content (such as LinkedIn, Instagram, or Facebook), analytics providers (such as Google Analytics), or advertising networks.

How We Use Your Information

We use the personal information we collect for the following purposes:

Legal Basis for Processing

4.1 Under Indian Law (DPDP Act, 2023 & IT Act, 2000)

• Consent: Where you have provided clear, informed, and affirmative consent.
• Legitimate Uses: For the specified purposes as permitted under the Digital Personal Data Protection Act, 2023.

4.2 Under GDPR (EU/EEA/UK)

• Consent (Article 6(1)(a) GDPR): For marketing and non-essential cookies.
• Contract (Article 6(1)(b) GDPR): Where processing is necessary for contract performance.
• Legitimate Interests (Article 6(1)(f) GDPR): For analytics, security, fraud prevention.
• Legal Obligation (Article 6(1)(c) GDPR): Where required by law.

4.3 Under CCPA / CPRA (California, USA)

We do not "sell" or "share" your personal information as defined under CCPA/CPRA. For California-specific rights, see Section 9.

Cookies & Tracking Technologies

Our Website uses cookies and similar tracking technologies to enhance your experience, analyse usage, and assist in our marketing efforts. For full details, please refer to our Cookie Policy.

• Strictly Necessary Cookies: Required for the Website to function properly.
• Analytics Cookies: Help us understand how visitors interact with our Website.
• Marketing / Advertising Cookies: Used to deliver relevant advertisements.
• Functional Cookies: Enable enhanced functionality and personalisation.

Data Sharing & Third Parties

We do not sell, rent, or trade your personal information. We may share your data only in the following limited circumstances:

6.1 Service Providers & Processors

We engage trusted third-party service providers who assist us in operating our Website and delivering our services.

6.2 Professional Advisors

We may share data with our legal counsel, auditors, accountants, and insurers where reasonably necessary.

6.3 Legal & Regulatory Compliance

We may disclose your personal data where required by law, regulation, or governmental request.

6.4 Business Transfers

In the event of a merger, acquisition, or sale, your personal data may be transferred as part of that transaction.

6.5 With Your Consent

We may share your data where you have provided specific and informed consent.

International Data Transfers

As Aura Advert serves clients globally, your personal data may be transferred to, stored in, and processed in countries outside your country of residence, including India. We ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) and adequacy decisions.

Data Retention

We retain your personal data only for as long as is reasonably necessary:

• Contact form enquiries: Up to 24 months from submission.
• Client project data: Duration of engagement + 5 years.
• Analytics and cookie data: Per our Cookie Policy.
• Legal and compliance records: As mandated by applicable law.

Your Rights

9.1 Universal Rights

• Right to Access: Request confirmation and a copy of your data.
• Right to Correction: Request correction of inaccurate data.
• Right to Deletion / Erasure: Request deletion of your data.
• Right to Withdraw Consent: Withdraw consent at any time.

9.2 Additional Rights under GDPR

• Right to Restriction of processing.
• Right to Data Portability.
• Right to Object.
• Right to Lodge a Complaint with a supervisory authority.

9.3 Additional Rights under CCPA/CPRA

• Right to Know.
• Right to Delete.
• Right to Opt-Out of Sale/Sharing.
• Right to Non-Discrimination.
• Right to Correct.

9.4 Rights under Indian Law (DPDP Act, 2023)

• Right to obtain information about processing.
• Right to correction and erasure.
• Right of grievance redressal.
• Right to nominate another individual.

Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

• SSL/TLS encryption for data in transit.
• Access controls and authentication mechanisms.
• Regular security assessments and vulnerability monitoring.
• Secure data storage with reputable cloud providers.
• Periodic review and updating of security policies.

Children's Privacy

Our Website and services are not directed at individuals under 18. We do not knowingly collect personal data from children. If you believe a child has provided data, please contact us at info.auraadvert@gmail.com.

Third-Party Links

Our Website may contain hyperlinks to third-party websites. This Privacy Policy applies solely to information collected by us. We encourage you to review the privacy policy of every website you visit.

Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. When we make material changes, we will update the "Last Updated" date and provide prominent notice on our Website where practicable.

Grievance Redressal

Governing Law & Dispute Resolution

This Privacy Policy shall be governed by the laws of India. Disputes shall be subject to the exclusive jurisdiction of the courts at Indore, Madhya Pradesh, India, unless otherwise mandated by applicable data protection law.