Privacy Policy

1Who we are

This Privacy Policy explains how Srija R (sole proprietor), trading as Digital Srija ("Digital Srija", "we", "us") collects and uses personal data when you visit our pages on digitalsrija.com or buy the Local SEO & GMB Ranking Toolkit (the "Toolkit").

For the purposes of the Digital Personal Data Protection Act, 2023 ("DPDP Act"), Digital Srija is the Data Fiduciary for the data described below. This policy is also published in line with the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

2Personal data we collect

We do not collect Sensitive Personal Data such as passwords, health information or biometric data, and we do not need it to sell or deliver the Toolkit.

3Why we use it

• To deliver what you bought — send the Toolkit files and download link to your email and/or WhatsApp.
• To support you — answer questions, fix delivery problems and handle refund requests.
• To keep records — invoices and transaction records required under Indian GST and income-tax law.
• To measure our advertising — tell Meta that a page was viewed, a checkout was started or a purchase was made, so we know which ads work and Meta shows them to relevant people (see section 5).
• To prevent fraud and misuse — including verifying that purchase notifications genuinely come from Razorpay.
• To send occasional updates about the Toolkit and related Digital Srija services, only if you have not opted out. Every message tells you how to stop them.

4Legal basis and your consent

We process your data on the basis of your consent (section 6 of the DPDP Act) or for certain legitimate uses permitted by section 7 — for example, when you voluntarily give us your email and phone number to receive a product you purchased.

Analytics and advertising cookies (Meta Pixel and, if enabled, Google Analytics) load only after you click "Accept" on our cookie notice. If you click "Decline", they do not load. You can change your choice at any time by clearing this site's data in your browser; the notice will appear again.

You may withdraw consent at any time by writing to us (section 9). Withdrawal does not affect processing already carried out, or records we must keep by law.

5Meta Pixel and Conversions API

We use the Meta Pixel in your browser and the Meta Conversions API from our server to send the following events to Meta Platforms, Inc.: PageView, ViewContent, InitiateCheckout, Contact (WhatsApp click) and Purchase.

• Browser events include your IP address, browser details and Meta's own browser and click IDs.
• When you complete a purchase, our server receives a signed notification from Razorpay and sends Meta a Purchase event with your email and phone number converted into a one-way SHA-256 hash — Meta receives the hash, not the readable email or number — so the purchase can be matched to an ad.
• Each event carries one shared ID, so Meta counts it once even when both the browser and server report it.

Meta processes this data under its own Privacy Policy. You can control ads based on your activity in Meta Ad Preferences.

6Who we share data with

We do not sell or rent your personal data. We share only what each service needs to do its job:

Some of these providers store data outside India. Such transfers are made only to countries not restricted by the Central Government under section 16 of the DPDP Act.

7How long we keep it

• Purchase and invoice records — for as long as Indian tax and accounting law requires (generally up to 8 years).
• Support conversations — up to 2 years after the last message, then deleted.
• Marketing contact details — until you opt out or withdraw consent.
• Advertising data held by Meta — according to Meta's own retention rules.

8How we protect it

Our pages are served over HTTPS. Personal identifiers sent to Meta are hashed with SHA-256. Payment notifications from Razorpay are verified with a secret signature before we act on them, and our settings files are blocked from public access. Access to buyer records is limited to the proprietor. These are reasonable security practices within the meaning of section 43A of the IT Act, 2000.

No method of internet transmission is 100% secure. If a personal data breach affects you, we will inform you and the Data Protection Board of India as the DPDP Act requires.

9Your rights

Under the DPDP Act you have the right to:

• Access a summary of the personal data we hold about you and how we use it.
• Correct, complete, update or erase your data (erasure is subject to records we must keep by law).
• Withdraw consent as easily as you gave it.
• Grievance redressal — complain to our Grievance Officer (section 11).
• Nominate another person to exercise these rights if you die or become incapacitated.

Write to us from the email or phone number used for your purchase so we can verify it is you. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

10Children

The Toolkit is meant for business owners and professionals. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us their data, contact us and we will delete it.

11Grievance Officer and contact

12Changes to this policy

We may update this policy when our practices or the law change. The "Last updated" date at the top will change, and significant changes will be highlighted on this page. This version is effective from 14 October 2026.