Evolve Digital
Landing Page - Privacy Policy

 

Last updated: 21 October 2026

 

1. Who We Are

Evolve Digital (“Evolve”, “we”, “our” or “us”) is a brand strategy and creative services agency headquartered in Bengaluru, Karnataka, India.

This Privacy Policy explains how we collect, use, disclose, retain and safeguard your Personal Data when you visit our website, evolvedigitalinc.in (the “Site”), including our landing pages and when you interact with our contact forms, advertisements or other services.

We are committed to respecting your privacy and handling your Personal Data transparently, responsibly and in accordance with applicable data protection laws.

Our Contact Details

Data Controller: Evolve Digital

Registered Office: 12 A, Imperial Court, Cunningham Road, Vasanth Nagar, Bengaluru – 560052, India

Email: admin@evolvedigitalinc.in

For the purposes of applicable data protection legislation, Evolve Digital acts as the Data Controller or Data Fiduciary, as relevant, in relation to Personal Data collected through the Site.

2. The Legal Framework We Follow

We endeavour to comply with applicable privacy and data protection legislation in the jurisdictions in which we operate or where our processing activities are subject to those laws.

India

Our data protection practices are informed by the following legislation:

• The Information Technology Act, 2000

• The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, to the extent applicable

• The Digital Personal Data Protection Act, 2023 (DPDP Act)

• The Digital Personal Data Protection Rules, 2025

The DPDP Act and its accompanying Rules are being brought into effect in phases. We will comply with their relevant requirements as and when those provisions become applicable and enforceable.

Where required under applicable Indian law, we process Personal Data on the basis of consent or other legally permitted grounds, including the specific legitimate uses recognised under the DPDP Act once the relevant provisions are in force.

European Economic Area and United Kingdom

Where applicable, our processing activities are governed by:

• The European Union General Data Protection Regulation (EU GDPR)

• The United Kingdom General Data Protection Regulation (UK GDPR)

• Applicable laws governing electronic communications and cookies

Depending on the purpose of processing, our lawful bases under Article 6 of the GDPR may include:

• Consent – Article 6(1)(a): Where you have expressly agreed to the processing of your Personal Data for a specified purpose.

• Contractual Necessity – Article 6(1)(b): Where processing is necessary to perform a contract or take steps at your request before entering into a contract.

• Legitimate Interests – Article 6(1)(f): Where processing is necessary for our legitimate business interests, provided those interests are not overridden by your fundamental rights and freedoms.

Where legally required, we obtain consent before placing or accessing non-essential cookies or similar technologies.

California, United States

Where applicable, we comply with the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).

This includes applicable requirements relating to transparency, consumer privacy rights and the ability to opt out of the sale or sharing of Personal Data for cross-context behavioural advertising.

Other Jurisdictions

Where the laws of another jurisdiction apply to our processing activities, we endeavour to meet the relevant legal requirements.

3. What Personal Data We Collect

We collect certain categories of Personal Data depending on how you interact with our Site and services.

3.1 Identifiers and Contact Information

This may include:

• Full name

• Email address

• Phone number

• Message Shared

Source: Information you voluntarily provide through our contact forms or other direct communications.

3.2 Marketing and Enquiry Information

This may include:

• Services you are interested in

• Project requirements or briefs

• Business enquiries

• Messages or other information submitted through our contact forms

Source: Information submitted directly by you through the Site or shared during communications with us.

3.3 Technical Information

When you visit our Site, certain technical information may be collected automatically.

This may include:

• Internet Protocol (IP) address

• Browser type and version

• Device identifiers

• Referring website URL

• Time zone

• Clickstream information

• Technical details relating to your interaction with the Site

Source: Cookies, tracking technologies, pixels and server logs.

3.4 Website Usage Information

We may collect information about how visitors navigate and interact with the Site.

This may include:

• Pages viewed

• Time spent on individual pages

• Scrolling behaviour

• Outbound link clicks

• Website interaction patterns

Source: Website analytics and measurement tools, including Google Analytics 4, Meta Pixel and Microsoft Clarity.

3.5 Advertising Identifiers

We may collect or process advertising-related identifiers through third-party platforms.

These may include identifiers associated with:

• Google Ads

• Facebook and Instagram advertising through Meta

• LinkedIn Insight Tag

Source: Third-party advertising platforms and their associated tracking technologies.

3.6 Sensitive Personal Data

We do not intentionally collect Sensitive Personal Data as defined under the applicable Indian SPDI Rules or special category Personal Data under the GDPR.

We request that visitors refrain from submitting sensitive information, including financial credentials, medical information, government identification details or other sensitive information unless specifically requested through an appropriate and secure process.

4. How and Why We Use Your Personal Data

We collect and process Personal Data only for specified and legitimate purposes.

4.1 Responding to Enquiries and Proposal Requests

We use your contact information and enquiry details to respond to communications, understand your requirements, arrange discussions and prepare proposals for our services.

Lawful basis: Performance of a contract, steps taken before entering into a contract or another lawful basis permitted by applicable legislation.

4.2 Sharing Service Updates and Marketing Communications

Where you have provided the required consent, we may use your contact details to send:

• Service updates

• Relevant case studies

• Information about our creative and strategic services

• Promotional offers

• Other communications relating to Evolve Digital

Lawful basis: Consent, where required by applicable law.

You may withdraw your consent or unsubscribe from marketing communications at any time by contacting us at admin@evolvedigitalinc.in or using an unsubscribe mechanism provided in the communication.

4.3 Improving Website Performance and User Experience

We use website analytics and interaction data to better understand visitor behaviour and improve the functionality, performance and usability of our Site.

This may include analytics, user experience evaluation and A/B testing.

Lawful basis: Legitimate interests where permitted, together with consent for non-essential cookies and tracking technologies where legally required.

4.4 Measuring Advertising Campaign Effectiveness

We may use advertising and analytics technologies to:

• Measure the effectiveness of advertising campaigns

• Understand campaign interactions

• Analyse audience engagement

• Personalise advertising experiences

• Conduct remarketing or retargeting activities

Lawful basis: Consent where required, including consent obtained through our cookie management mechanism.

4.5 Detecting and Preventing Misuse

We may process technical information and related Personal Data to protect our Site, prevent fraudulent activity, investigate security incidents and comply with applicable legal requirements.

Lawful basis: Legitimate interests, compliance with legal obligations or other grounds permitted under applicable law.

We do not use Personal Data for purposes that are materially incompatible with those described in this Privacy Policy without providing any further notice or obtaining additional consent where required.

5. Cookies and Similar Technologies

Our Site uses first-party and third-party cookies, pixels and similar technologies to support website functionality, understand visitor interactions and measure advertising performance.

These technologies may include:

• Google Analytics 4: To analyse website traffic and visitor behaviour.

• Google Ads Remarketing: To measure advertising performance and support remarketing campaigns.

• Meta Pixel: To understand engagement with advertisements across Meta platforms.

• LinkedIn Insight Tag: To measure campaign effectiveness and website conversions associated with LinkedIn advertising.

• Microsoft Clarity: To understand website interactions and identify opportunities to improve user experience.

Cookie Consent and Preferences

When you first visit our Site, our cookie consent mechanism is intended to allow you to accept, reject or customise the use of non-essential cookies.

Strictly necessary cookies may be used where they are required for the proper functioning and security of the Site.

Where legally required, analytics, advertising and other non-essential tracking technologies will not be activated until appropriate consent has been obtained.

You may withdraw or modify your consent through the cookie preference controls made available on the Site.

You may also manage, restrict or delete cookies through your browser settings. Please note that disabling certain cookies may affect the functionality or performance of parts of the Site.

Cookie lifespans vary depending on the relevant technology and its configuration. For example, standard Google Analytics 4 browser cookies generally have a default expiration period of up to two years, subject to configuration and browser restrictions. The retention of analytics data within Google Analytics is managed separately from cookie expiration.

6. Who We Share Personal Data With

We may share Personal Data with selected third parties where necessary to operate our Site, communicate with visitors, measure performance or comply with legal obligations.

6.1 Cloud Hosting and Email Service Providers

Service providers: Amazon Web Services (AWS) and Google Workspace.

Purpose: Website hosting, data storage, business communications and operational support.

Safeguards: Where applicable, we use contractual arrangements and Data Processing Agreements designed to establish appropriate data protection responsibilities.

6.2 Analytics and Advertising Service Providers

Service providers: Google, Meta, LinkedIn and Microsoft.

Purpose: Website analytics, audience measurement, advertising personalisation, campaign performance tracking and remarketing.

Safeguards: We apply appropriate contractual and technical protections where required, including relevant data protection terms and international data transfer mechanisms.

6.3 Professional Advisers

Recipients: Legal advisers, tax consultants and auditors.

Purpose: Compliance with legal requirements, professional advice, financial administration and legitimate business operations.

Safeguards: Applicable confidentiality obligations, professional duties and contractual protections.

6.4 Government Authorities and Regulators

We may disclose Personal Data to government authorities, regulators, law enforcement agencies or courts where required by applicable law or a lawful order.

Any such disclosure will be limited to what is legally required or otherwise lawfully permitted.

6.5 Sale and Sharing of Personal Data

We do not sell Personal Data to third parties in exchange for monetary consideration.

However, certain disclosures of technical information, usage data or advertising identifiers to third-party advertising platforms may qualify as the “sharing” of Personal Data for cross-context behavioural advertising under applicable California privacy legislation.

Where applicable, individuals may exercise their right to opt out of such sharing by contacting admin@evolvedigitalinc.in or using the relevant privacy preference controls available on the Site.

We will also honour applicable opt-out preference signals where required by law.

7. International Data Transfers

Our servers are facilitated by service providers and therefore a part of a larger business subscription. These subscriptions have been made from our operational headquarters in India. However, the facilitating providers’ locations and compliance are dependent on the nature of service provided and not in the control of Evolve Digital. That said, certain third-party service providers and technology partners may process Personal Data in other jurisdictions, including the European Economic Area, the United States and Singapore.

Where Personal Data is transferred internationally, we take steps to ensure that appropriate protections are applied in accordance with applicable laws.

Depending on the jurisdiction, these safeguards may include:

• Adequacy decisions recognised under applicable data protection legislation

• Standard Contractual Clauses approved under the GDPR

• Other legally recognised international transfer mechanisms

• Appropriate data processing agreements and contractual safeguards

• Compliance with applicable restrictions or requirements governing international transfers of Personal Data under Indian law

We endeavour to ensure that international transfers do not undermine the privacy protections applicable to the Personal Data concerned.

8. Data Retention

We retain Personal Data only for as long as reasonably necessary to fulfil the purposes for which it was collected, meet applicable legal obligations, resolve disputes or enforce contractual rights.

Our general retention practices are as follows.

8.1 Prospect and Enquiry Data

Information received through contact forms or business enquiries may be retained for up to 24 months after the most recent relevant interaction, unless a shorter period is appropriate, a valid deletion request applies or a longer period is required by law.

Where processing is based on consent, withdrawal of consent will be respected in accordance with applicable legal requirements.

8.2 Client Project Data and Contracts

Client project records, contractual documents and associated business information may be retained for up to 8 years, subject to applicable statutory record-keeping requirements and any longer or shorter period required by law.

8.3 Cookies and Analytics Data

The retention period for cookies, analytics information and advertising-related data depends on the relevant technology, its configuration and applicable legal requirements.

We apply retention settings and other controls appropriate to the purposes for which this information is processed.

8.4 Deletion and Anonymisation

When Personal Data is no longer required, we take reasonable steps to securely delete or anonymise it, unless continued retention is necessary or permitted under applicable law.

9. Your Privacy Rights

Depending on your jurisdiction and the applicable data protection legislation, you may have certain rights relating to your Personal Data.

These may include the following.

9.1 Right of Access

You may request access to Personal Data that we hold about you, subject to applicable legal requirements.

9.2 Right to Rectification

You may request that inaccurate, incomplete or outdated Personal Data be corrected or updated.

9.3 Right to Erasure

You may request the deletion of your Personal Data where applicable law provides such a right.

This is sometimes referred to as the “right to be forgotten”.

9.4 Right to Restrict Processing

In certain circumstances, you may request that we restrict how your Personal Data is processed.

9.5 Right to Object

Where applicable, you may object to certain types of processing, including processing based on legitimate interests or processing for direct marketing.

9.6 Right to Data Portability

Where provided by applicable law, you may request to receive your Personal Data in a commonly used and machine-readable format or request its transfer to another service provider.

9.7 Right to Withdraw Consent

Where we rely on consent, you may withdraw that consent at any time.

Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.

9.8 California Privacy Rights

Where the CCPA and CPRA apply, eligible individuals may have additional rights, including:

• The right to know what Personal Data is collected and how it is used

• The right to request correction or deletion

• The right to opt out of the sale or sharing of Personal Data for cross-context behavioural advertising

• The right to limit certain uses of sensitive Personal Data, where applicable

• The right not to be discriminated against for exercising applicable privacy rights

9.9 Rights Under Indian Data Protection Law

Where applicable and as relevant provisions become enforceable, individuals may exercise rights available under Indian data protection legislation, including applicable rights of access, correction, erasure and grievance redressal.

Such rights may also include the right to nominate another individual to exercise certain rights in circumstances recognised under applicable law.

9.10 Right to Lodge a Complaint

If you believe that your Personal Data has been processed in violation of applicable data protection law, you may have the right to lodge a complaint with the relevant supervisory or regulatory authority.

This may include the Data Protection Board of India, where its relevant jurisdiction and procedures apply, or the appropriate data protection authority in another jurisdiction.

Exercising Your Rights

To exercise any applicable privacy right, please contact us at:

admin@evolvedigitalinc.in

We may request reasonable information to verify your identity before responding to certain requests.

We will review and respond to requests within the timeframes prescribed by applicable law.

10. Children's Privacy

Our services are intended for businesses and working professionals. They are not directed towards children under the age of 18.

We do not knowingly collect or process Personal Data relating to children.

We also do not knowingly sell or share the Personal Data of individuals under the age of 16 for cross-context behavioural advertising.

If you believe that a child has submitted Personal Data to us without the necessary authorisation, please contact us at admin@evolvedigitalinc.in.

We will investigate the matter and take appropriate steps to delete the information where required by applicable law.

11. Security Measures

We are committed to implementing appropriate technical and organisational measures to protect Personal Data against unauthorised access, accidental loss, misuse, alteration or disclosure.

Our security framework is designed to align with recognised information security principles, including those reflected in ISO/IEC 27001.

Security measures identified within our framework include:

• TLS 1.3 encryption in transit: To protect information transmitted between systems.

• AES-256 encryption at rest: To protect stored information.

• Web Application Firewall (WAF) and DDoS protection: To help defend against malicious traffic and certain cyber threats.

• Role-based access controls: To limit access to information based on authorised responsibilities.

• Multi-factor authentication (MFA): To strengthen account and system access security.

• Regular vulnerability scanning and penetration testing: To help identify and address potential security weaknesses.

While we endeavour to implement appropriate safeguards, no method of electronic transmission or data storage can be guaranteed to be completely secure.

We investigate suspected security incidents and will notify affected individuals or relevant regulatory authorities where required by applicable law.

12. Links to Third-Party Websites

Our Site may contain links to external websites, applications or services operated by third parties.

These websites and services may have their own privacy policies, terms of use and data handling practices.

Evolve Digital does not control and is not responsible for the privacy practices or content of third-party websites.

We encourage visitors to review the relevant privacy policies before submitting Personal Data or interacting with external services.

13. Updates to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our services, business operations, technology, legal requirements or data protection practices.

Where changes are material, we will take reasonable steps to notify visitors through the Site or by email where appropriate or legally required.

The “Last updated” date displayed at the beginning of this Privacy Policy indicates when the policy was most recently revised.

We encourage visitors to review this Privacy Policy periodically to remain informed about how their Personal Data is handled.

14. How to Contact Us

If you have any questions, concerns, complaints or requests relating to this Privacy Policy or the processing of your Personal Data, please contact us using the details below.

Evolve Digital

Email: admin@evolvedigitalinc.in

Postal Correspondence:

Attention: Data Protection Officer / Privacy Contact

Evolve Digital

12 A, Imperial Court

Cunningham Road, Vasanth Nagar

Bengaluru – 560052

Karnataka, India

Grievance Contact Email: admin@evolvedigitalinc.in

We are committed to reviewing privacy concerns and resolving grievances within the timeframes prescribed by applicable law.

If we are unable to satisfactorily resolve your concern, you may have the right to escalate the matter to the relevant data protection authority or regulatory body, subject to applicable law.

​

Thank you for trusting Evolve Digital.