In short: We only collect what's necessary to serve you well. We never sell your data. You can request deletion at any time by writing to hello@peaktreedigital.com.
1. Introduction
PeakTree Digital ("we", "our", "us") operates peaktreedigital.com and provides digital marketing, web & app development, AI automation, and related services. This Privacy Policy describes how we collect, use, store, share, and protect your personal information when you visit our website, contact us, or engage our services.
By using our website or services, you agree to the practices described in this policy. If you do not agree, please discontinue use of our website and services.
This policy is drafted in accordance with the Information Technology Act, 2000, the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, the Digital Personal Data Protection Act, 2023 (India), and — where applicable to international visitors — the EU General Data Protection Regulation (GDPR).
2. Information We Collect
2.1 Information you provide directly
- Identity & contact data: name, email address, phone number, company name, and designation.
- Business information: industry, business type, goals, budget range, and project requirements you share in a consultation form or email.
- Communication data: messages exchanged via our website forms, email, WhatsApp, phone calls, or social media.
- Billing information: if you engage us, we may collect GST number, billing address, and payment transaction references (we do not store full card numbers — payments are processed by PCI-DSS compliant providers such as Razorpay or Stripe).
2.2 Information collected automatically
- Device & browser data: IP address, browser type and version, operating system, screen size, language preference.
- Usage data: pages visited, time spent, referring URL, click patterns, approximate location (city-level).
- Cookies and similar technologies: as described in Section 4 below.
2.3 Information from third parties
- Analytics providers (Google Analytics 4) — aggregated behaviour data.
- Advertising platforms (Google Ads, Meta) — campaign conversion signals.
- Public sources — company information relevant to B2B outreach, only where permitted by law.
We do NOT collect: passwords for any of your social media or website accounts, biometric data, health data, or any data we don't need to deliver our services. If a service provider claims to need your password — it isn't us.
3. How We Use Your Information
We use the information we collect strictly for the following purposes:
- To deliver our services — strategy, marketing, development, and support you've requested.
- To respond to enquiries — replying to consultation requests, quotes, and support tickets.
- To send transactional communication — project updates, invoices, technical alerts.
- To improve our website and services — understanding what content helps visitors.
- To send marketing communication — newsletters, offers, and insights — only where you have opted in, and always with a one-click unsubscribe.
- To meet legal obligations — tax records, regulatory compliance, fraud prevention.
- To protect our rights — defending against legal claims, enforcing our Terms of Service.
Legal basis (for GDPR-covered users)
- Contract: to fulfil services you've engaged us for.
- Legitimate interest: to improve our offerings, prevent fraud, and run our business.
- Consent: for marketing emails, non-essential cookies, and analytics.
- Legal obligation: to comply with applicable Indian and international laws.
6. Data Retention
We retain personal data only as long as necessary:
- Enquiries that don't convert: 24 months from last contact.
- Client project data: duration of engagement + 7 years (for tax and legal compliance).
- Analytics data: 14 months (Google Analytics default).
- Marketing email subscriptions: until you unsubscribe + 30 days.
- Legal records: as required by applicable Indian law.
After the applicable retention period, data is securely deleted or anonymised.
7. Data Security
We take the security of your data seriously and use industry-standard measures:
- Encryption in transit: HTTPS/TLS 1.3 across our entire website.
- Encryption at rest: sensitive data stored encrypted.
- Access control: role-based access with two-factor authentication for all team members.
- Regular audits: periodic security reviews and vulnerability scans.
- Employee training: all staff are trained on data-handling best practices.
While we do our best, no system is 100% secure. In the unlikely event of a data breach affecting your rights, we will notify you and the relevant authorities within the timeframes required by law (72 hours under GDPR; as prescribed under Indian law).
8. Your Rights
Depending on your jurisdiction, you may have the following rights:
- Right to access — request a copy of the personal data we hold about you.
- Right to correction — ask us to fix inaccurate or incomplete data.
- Right to deletion — request erasure of your personal data (subject to legal retention obligations).
- Right to restrict processing — limit how we use your data.
- Right to data portability — receive your data in a structured, machine-readable format.
- Right to object — opt out of marketing or processing based on legitimate interest.
- Right to withdraw consent — at any time, without affecting the lawfulness of prior processing.
- Right to lodge a complaint — with your local data-protection authority.
To exercise any of these rights, email hello@peaktreedigital.com with the subject line "Data Request". We'll respond within 30 days.
9. Third-Party Links
Our website may contain links to third-party websites — client sites, partner platforms, or resources. We are not responsible for their privacy practices. We encourage you to read the privacy policy of any site you visit through our links.
10. Children's Privacy
Our services are intended for businesses and users aged 18 and above. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us data, please contact us and we will delete it promptly.
11. International Data Transfers
Our primary servers are located in India. Some of our service providers (Google, Meta, Vercel, Cloudflare) may process data outside India. When we transfer data internationally, we ensure appropriate safeguards are in place — including Standard Contractual Clauses and equivalent protections — to keep your data safe.
12. Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. When we make material changes, we will:
- Update the "Last updated" date at the top of this page.
- Notify registered clients via email where the change is significant.
- Post a notice on our homepage for 30 days.
Your continued use of our services after changes are posted constitutes acceptance of the updated policy.
13. Contact Us
For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please reach out:
- PeakTree Digital
IST Floor, Office A, Plot No. 9/1, Shiv Vihar, NilotHI Mod, Nangloi, New Delhi — 110041 - Email: hello@peaktreedigital.com
- Phone: +91 7456835819
- Website: peaktreedigital.com
For data-protection matters specifically, please write with the subject line "Data Request" — we'll route your request to our Data Protection Officer within one business day.
This Privacy Policy was last reviewed and updated on 29 September 2026. By using PeakTree Digital's website and services, you acknowledge that you have read and understood this policy.