Privacy policy
Last updated:
Oct 22, 2026
Bombay Social is a strategy-first brand and performance marketing studio in Mumbai. This policy explains what personal data we collect through bombaysocial.co and our services, why we collect it, who we share it with, and the control you have over it — written in plain English, because privacy policies should be readable, not defensive.
1. Who we are
Bombay Social ('we', 'us') is the data fiduciary for the personal data described in this policy, as defined by India's Digital Personal Data Protection Act, 2023.
Studio: Matruchaya, 102, 18A Rd, Khar West, Opp Beacon High School, Mumbai – 400052, India
Email: Khushboo@bombaysocial.co
Phone: +91 97693 40706
2. Information you give us
We collect only what we need to respond to you and work with you:
Enquiry details — when you fill our contact form or email us: your name, email address, company name, monthly marketing budget, and what you're trying to build.
Newsletter data — your email address, if you subscribe. Every send includes one-click unsubscribe.
Client information — when you engage us: business contact details, brand assets, and the access you authorise (ad accounts, analytics properties) so we can deliver our services.
Correspondence — records of calls, emails and messages, so we can pick conversations up where you left them.
3. Information collected automatically
When you visit bombaysocial.co, standard technologies collect basic technical data: IP address, browser and device type, pages viewed, referring page, and time on site. We use this in aggregate to understand what's working — never to profile you individually.
4. How we use your information
To respond to enquiries and prepare proposals
To deliver the services you engage us for
To send the newsletter, if you subscribed
To improve our website and content
To meet legal, tax and contractual obligations
We never use your data for anything unrelated to these purposes, and we never sell it. Marketing emails go out only with your consent, which you can withdraw at any time.
5. Cookies, analytics and advertising technologies
Our website uses a small number of cookies for analytics and to remember your preferences. As a marketing agency we also work with advertising and measurement technologies — including Meta Pixel, Google Ads tags and analytics platforms — but these are deployed on the campaign properties we manage for clients, not to follow you around the internet. You can block or delete cookies through your browser settings, and the site will keep working.
6. Campaigns we run for our clients
When you interact with a campaign, landing page or social handle we manage on behalf of a client, we act on that client's instructions. Your data in those contexts is governed by the client's own privacy policy and consents. We do not pool client data, cross-use audiences between clients, or keep campaign data after a project ends, beyond what's needed for reporting and legal compliance.
7. Who we share information with
We share personal data only with service providers who help us operate — our website platform (Framer), email and workspace tools (Google Workspace), and analytics services — and only for the purposes above. We may also share information if required by law, regulation or valid legal process, or with professional advisers under confidentiality. We do not sell, rent or trade personal data. Ever.
8. How long we keep it
Enquiries and proposals: up to 24 months after our last exchange
Newsletter data: until you unsubscribe
Client records: for the engagement plus the period required by Indian tax and commercial law
After that, we delete or anonymise it.
9. How we protect it
We apply industry-standard safeguards: encrypted connections, access limited to team members who need it, and least-privilege access to client platforms. No system is perfectly secure, but we treat your data with the same care we'd want for ours.
10. International transfers
Some of our tools — website hosting and email, for example — may process data outside India. Where that happens, we use providers with adequate safeguards and limit transfers to what's necessary to deliver the service.
11. Your rights
Under India's Digital Personal Data Protection Act, 2023, you can:
Ask what data we hold about you and get a summary
Ask us to correct inaccurate or incomplete data
Ask us to erase your data, subject to legal retention
Withdraw your consent at any time
Nominate someone to exercise these rights on your behalf
Escalate to our Grievance Officer if you're not satisfied with our response
To exercise any of these, email Khushboo@bombaysocial.co — we'll respond within the timelines the law requires, and usually much faster.
12. Children
Our website and services are intended for businesses and adults. We do not knowingly collect data from anyone under 18, and we do not target advertising at children. If you believe a child has shared data with us, contact us and we'll delete it promptly.
13. Third-party links
Our website links to third-party platforms such as Instagram and Google Maps. Once you leave bombaysocial.co, their policies apply — we encourage you to read them.
14. Changes to this policy
If we change this policy materially, we'll update the date at the top of this page. Continuing to use the site after changes means you accept the updated policy.
15. Contact us and our Grievance Officer
Questions, requests or complaints:
Grievance Officer: Khushboo Ahuja
Email: Khushboo@bombaysocial.co
Phone: +91 97693 40706
Address: Matruchaya, 102, 18A Rd, Khar West, Opp Beacon High School, Mumbai – 400052, India
We take grievances seriously and acknowledge and resolve them within the timelines prescribed under the DPDP Act.