Privacy Policy

Glodias ("Glodias", "we", "us", "our") is deeply committed to the responsible and transparent handling of personal data. This Privacy Policy explains how we collect, use, store, share, and protect information about you when you visit our website at glodias.com, interact with us digitally, or engage us to provide Services.

This policy is written in compliance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules"), and the Digital Personal Data Protection Act, 2023 ("DPDP Act") of India, as well as international best practices including the General Data Protection Regulation ("GDPR") of the European Union where applicable to EU data subjects.

Please read this Policy carefully. By using our website or engaging our Services, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy. If you do not agree, please refrain from using our website or Services.

1. Who We Are & Data Controller Identity

The data controller for your personal information is Glodias Private Limited, a digital transformation studio operating in India. Glodias is responsible for determining the purposes and means of processing your personal data.

For all data protection enquiries, requests, or complaints, reach out to support@glodias.com. We aim to respond to all substantive enquiries within seventy-two (72) hours on business days.

2. What Personal Data We Collect

We collect different categories of personal data depending on how you interact with us. The categories include:

• Identity Data: Full name, title, job designation, and company name provided when you contact us, register for services, or sign a contract.
• Contact Data: Email address, telephone number, physical address, LinkedIn profile URL, and other contact details you provide.
• Project & Business Data: Information about your business, project requirements, brand assets, briefs, strategy documents, and any other content you share with us in the course of a commercial engagement.
• Financial Data: Invoice details, bank account or payment card information (where applicable), billing address, and payment history. Note: we do not store full credit card numbers; payment card data is processed by PCI-DSS-compliant payment providers.
• Technical Data: IP address, browser type, browser version, operating system, referring URLs, page paths visited, time spent on pages, clickstream data, device identifiers, and cookie identifiers collected automatically through your use of our website.
• Usage Data: Information about how you use and interact with our website, including which pages you visit, which resources you download, and which forms you complete.
• Marketing & Communications Data: Your preferences for receiving marketing and insights from us, subscription status, and records of your correspondence with us.
• Sensitive Personal Data: Glodias does not intentionally collect sensitive personal data (such as health information, financial account details beyond billing needs, biometric data, or information about children) unless strictly necessary for the performance of a specific contracted Service and only with your explicit consent.

3. How We Collect Personal Data

We collect personal data through the following means:

• Direct Interactions: When you fill in our contact form, submit a project enquiry, register for Membership, subscribe to our newsletter, attend a discovery call, or engage in email or social media correspondence with us.
• Automated Technologies: When you visit our website, we automatically collect Technical Data using cookies, web beacons, pixel tags, and similar tracking technologies. Please refer to our Cookie Policy section below for full details.
• Third-Party Sources: We may receive data about you from publicly available sources such as LinkedIn, company websites, and business directories for the purpose of outreach or partnership discussions. We may also receive referrals from existing clients or partners. We process data from analytics providers (such as Google Analytics), advertising networks, and social media platforms (such as LinkedIn, Instagram, and X/Twitter).
• Clients and Partners: In the course of providing our Services to a business client, that client may provide us with personal data about their own employees, customers, or stakeholders. In such cases, Glodias acts as a data processor on behalf of the client, and the client is responsible for the lawfulness of that data sharing.

4. Legal Basis for Processing

We process your personal data only where we have a lawful basis to do so. Our legal bases are:

• Consent: Where you have freely given, specific, and informed consent — for example, signing up for our newsletter or agreeing to the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
• Contractual Necessity: Where processing is necessary for the performance of a contract to which you are a party, or to take steps at your request prior to entering into a contract — for example, processing project briefs and communicating with you to deliver our Services.
• Legal Obligation: Where processing is necessary for compliance with a legal or regulatory obligation to which Glodias is subject, such as maintaining financial records or complying with tax requirements.
• Legitimate Interests: Where processing is necessary for the purposes of our legitimate business interests, provided these interests are not overridden by your privacy rights. Our legitimate interests include: maintaining business relationships, improving our website and services, securing our systems, preventing fraud, and direct marketing to existing clients for closely related services.

5. How We Use Your Personal Data

We use the personal data we collect for the following purposes:

• To provide, perform, and improve our Services, including design, development, marketing, and content production.
• To manage our relationship with you, including onboarding, project management, invoicing, and client support.
• To send you relevant communications, including project updates, proposals, invoices, and responses to your enquiries.
• To send you marketing communications about our services, case studies, insights, and industry events, where you have opted in or where we have a legitimate interest to do so. You can opt out at any time.
• To personalise your experience on our website and to serve you relevant content and advertisements.
• To analyse website usage, measure performance, and improve our digital presence using analytics tools.
• To comply with applicable legal and regulatory requirements, including tax, accounting, and anti-money-laundering obligations.
• To protect the security of our website, systems, and business, and to detect and prevent fraud, unauthorised access, or misuse.
• To exercise or defend our legal rights in the event of a dispute.

6. Cookies & Tracking Technologies

6.1 Our website uses cookies and similar technologies to enhance your browsing experience, analyse website traffic, and serve personalised content. A cookie is a small text file placed on your device by a website server.

6.2 We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the website to function. They cannot be switched off. They are usually set in response to actions you take, such as setting privacy preferences or filling in forms.
• Performance / Analytics Cookies: These allow us to measure and improve the performance of our website. They collect anonymised data about which pages are visited most frequently and how visitors navigate the site. We use Google Analytics and similar services.
• Functionality Cookies: These enable enhanced functionality and personalisation, such as remembering your language preferences.
• Marketing / Targeting Cookies: These may be set through our website by advertising partners (such as Meta Pixel, LinkedIn Insight Tag, or Google Ads) to build a profile of your interests and show you relevant advertisements across the web.

6.3 When you first visit our website, you will be presented with a cookie consent banner. You may accept all cookies, reject non-essential cookies, or customise your preferences. You may also manage cookies through your browser settings at any time; however, disabling certain cookies may affect the functionality of the website.

6.4 We use Google Analytics to analyse website traffic. Google Analytics may transfer data to servers outside India. Google's Privacy Policy is available at policies.google.com/privacy.

7. Data Sharing & Disclosure

We do not sell, rent, or trade your personal data to third parties for their marketing purposes. We share your data only in the following limited circumstances:

• Service Providers & Processors: We share data with carefully selected third-party vendors who provide services on our behalf, including cloud hosting providers (e.g. AWS, Google Cloud), project management platforms, email delivery services, CRM software, and payment processors. These providers are contractually bound to process data only on our instructions and to maintain appropriate security measures.
• Subcontractors & Collaborators: In delivering certain project work, we may share project-related data with trusted subcontractors or freelance collaborators, subject to confidentiality agreements.
• Professional Advisors: We may share data with our legal counsel, accountants, insurers, or auditors where necessary for compliance, dispute resolution, or risk management.
• Corporate Transactions: If Glodias undergoes a merger, acquisition, restructuring, or sale of assets, personal data may be transferred as part of that transaction, subject to equivalent privacy protections.
• Legal Requirements: We may disclose data if required by law, court order, regulatory authority, or to protect the rights, property, or safety of Glodias, our clients, or the public.
• With Your Consent: We may share data with third parties for any other purpose with your prior explicit consent.

8. International Data Transfers

• 8.1 Glodias is headquartered in India. However, some of our service providers and subcontractors are located outside India, including in the United States and European Union. Where we transfer your personal data outside India, we take steps to ensure that appropriate safeguards are in place.
• 8.2 For transfers to countries not recognised as providing an adequate level of protection, we rely on standard contractual clauses, processor agreements, or other appropriate safeguards as required by applicable law.
• 8.3 If you are a resident of the European Economic Area ("EEA"), we process your data in compliance with the GDPR. We rely on adequacy decisions, standard contractual clauses, or other GDPR-compliant transfer mechanisms for cross-border transfers.

9. Data Retention

• 9.1 We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.
• 9.2 Client data related to contracted projects is retained for a period of seven (7) years following project completion, to comply with Indian accounting and tax obligations. After this period, data is securely deleted or anonymised.
• 9.3 Marketing communications data (e.g. newsletter subscriptions) is retained until you unsubscribe or request deletion, after which it will be removed from active marketing lists within thirty (30) days.
• 9.4 Website analytics data collected via cookies is retained in accordance with the retention policies of the relevant analytics providers (typically up to 26 months for Google Analytics).
• 9.5 Where we are required by law to retain data for a longer period, we will comply with such requirements. We periodically review our data retention schedules.

10. Data Security

• 10.1 Glodias implements appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:
  • Encryption of data in transit using TLS/SSL protocols.
  • Access controls and role-based permissions ensuring data is accessible only to personnel who need it.
  • Regular security assessments, vulnerability testing, and penetration testing of our systems.
  • Employee training on data protection and cybersecurity awareness.
  • Use of reputable, security-certified cloud infrastructure providers.
  • Physical security controls for any on-premises data storage.
• 10.2 Notwithstanding these measures, no method of data transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security, but we are committed to maintaining industry-standard protections.
• 10.3 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority and, where required, affected individuals in accordance with applicable law and without undue delay.

11. Your Rights as a Data Subject

Depending on your jurisdiction, you may have the following rights with respect to your personal data. We are committed to upholding these rights under applicable Indian law and, where applicable, the GDPR:

• Right of Access: You have the right to request a copy of the personal data we hold about you, together with information about how it is processed.
• Right to Rectification: You have the right to request that inaccurate or incomplete personal data be corrected or completed.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing was unlawful. This right may be subject to exceptions, including where data is needed for legal compliance.
• Right to Restriction of Processing: You may request that we restrict the processing of your data in certain circumstances, such as where you contest its accuracy or object to our processing.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller, where technically feasible and where processing is based on consent or contract.
• Right to Object: You have the right to object to the processing of your data where we rely on legitimate interests as the legal basis, and in particular to object to direct marketing at any time.
• Rights Related to Automated Decision-Making: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal or similarly significant effects. Glodias does not currently use automated decision-making of this nature.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the relevant data protection authority. In India, the applicable authority under the DPDP Act is the Data Protection Board of India. EU residents may lodge a complaint with their national supervisory authority.

To exercise any of these rights, please contact us at support@glodias.com. We will respond to verifiable requests within thirty (30) days. We may need to verify your identity before processing your request.

12. Children's Privacy

Our website and Services are not directed at children under the age of eighteen (18). We do not knowingly collect personal data from children. If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at support@glodias.com and we will take prompt steps to delete such information from our systems.

13. Social Media & Third-Party Integrations

• 13.1 Our website may include social media sharing buttons and links to our profiles on LinkedIn, Instagram, X (Twitter), Dribbble, and Facebook. Clicking these may allow those platforms to collect information about you. We encourage you to review the privacy policies of these platforms.
• 13.2 If you engage with Glodias via social media messaging, the content of those communications may be subject to the terms of the relevant platform.
• 13.3 Where we embed third-party content on our website (such as video players or interactive tools), those third parties may set their own cookies and collect data about your interaction with their content.

14. Marketing Communications

• 14.1 With your consent, we may send you marketing emails, newsletters, and updates about our Services, projects, insights, and events. You can unsubscribe from marketing communications at any time by clicking the "unsubscribe" link in any email or by contacting us at support@glodias.com.
• 14.2 We may also conduct targeted advertising through third-party advertising networks and social media platforms based on your interaction with our website (using cookies and pixels). You can opt out of interest-based advertising through industry opt-out tools such as the Digital Advertising Alliance or the Network Advertising Initiative.

15. Changes to This Privacy Policy

• 15.1 We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will update the effective date at the top of this policy and, where the changes are material, notify you by email or by a prominent notice on our website.
• 15.2 We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website or Services after the effective date of any update constitutes your acceptance of the revised Privacy Policy.

16. Contact

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

General Enquiries: hello@glodias.com

Customer Support & Complaints: support@glodias.com

Financial & Invoicing Queries: billing@glodias.com

Website: glodias.com

This Privacy Policy was last updated on 10 June 2026 and supersedes all prior versions. Glodias reserves all rights not expressly granted herein.

© 2026 Glodias Private Limited. All rights reserved.