Privacy Policy

Agency by Naman Kataria provides website design, website development, SEO, ecommerce, mobile app and web app development, CMS, AI automation, AI chatbots, CRM automation, marketing automation, analytics, maintenance, and consulting services. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit our website, submit a form, book a call, communicate with us, become a client, or interact with our services.

This Privacy Policy is written for visitors, leads, clients, vendors, collaborators, and business contacts in Canada, the United States, India, and other remote markets. Privacy laws may give you different rights depending on your location, relationship with us, and the type of information involved.

This policy is a general privacy notice for our website and agency services. It is not legal advice to you. If your business needs a privacy policy, cookie banner, consent flow, data processing agreement, or regulated-industry compliance program, that must be scoped separately and reviewed by qualified counsel.

For our own website, marketing, sales, billing, client relationship, and business operations, we generally act as the organization or business deciding how personal information is used. For client-owned customer, user, patient, employee, lead, subscriber, or ecommerce data that we process only to perform services for a client, the client remains responsible for its own notices, consents, lawful basis, privacy requests, records, and compliance obligations unless a written agreement assigns a specific task to us.

We may collect identifiers and contact details such as name, email address, phone number, company name, role, website URL, location, social or profile links, billing details, and communication preferences. We may also collect project information such as service interests, business goals, budget range, timeline, technical requirements, messages, files, call notes, meeting recordings where enabled, proposal history, invoice records, support requests, and information you choose to provide through forms, emails, calendars, or calls.

If you become a client, we may collect or access information needed to perform services, including brand assets, content, product information, website analytics, SEO data, CRM fields, automation logic, CMS content, ecommerce data, form submissions, support tickets, internal workflow details, API keys, platform access, repository access, hosting information, and other business or technical materials you provide. You should not provide sensitive personal information unless it is necessary, lawful, and covered by an appropriate written agreement.

When you use the website, we may collect technical and usage information such as IP address, device type, browser type, operating system, approximate location, pages viewed, referral URLs, timestamps, clicks, scroll behavior, form interactions, performance data, error logs, security logs, and cookie or similar identifiers. This helps us operate the site, understand performance, improve content, measure traffic, diagnose issues, and protect the site from abuse.

We may use cookies, pixels, local storage, analytics tags, and similar technologies for essential site operations, preferences, analytics, performance measurement, security, and marketing attribution. You can control cookies through your browser settings and any cookie controls we provide. Blocking cookies may affect website features, form behavior, analytics accuracy, saved preferences, or embedded tools.

We collect information directly from you when you submit forms, book meetings, email us, sign agreements, pay invoices, provide project materials, or communicate with us. We also collect information automatically from the website and receive information from service providers, analytics tools, scheduling tools, CRM tools, payment processors, hosting platforms, project tools, referrals, public websites, and business directories where lawful and relevant to our relationship.

We use personal information to respond to inquiries, qualify projects, book calls, prepare proposals, provide services, communicate with you, manage projects, process invoices, collect payments, deliver support, operate and secure the website, troubleshoot issues, maintain business records, improve services, measure performance, send service-related messages, send permitted marketing communications, enforce agreements, comply with legal obligations, and protect our rights and the rights of others.

Depending on the law that applies, we may rely on consent, contract performance, legitimate business interests, legal obligations, compliance needs, fraud prevention, security, or another lawful basis to collect and use personal information. Where consent is required, we will seek consent before or when collecting information and use the information for the identified purposes. You may withdraw consent where permitted, but doing so may limit our ability to provide services or respond to requests.

We may use contact information to send business updates, service information, newsletters, resources, or marketing messages where permitted by law or with consent. You can unsubscribe from marketing emails by using the unsubscribe mechanism where provided or by contacting us. We may still send transactional or service-related messages, such as proposal updates, project communications, invoices, legal notices, security alerts, and replies to your inquiries.

We may use AI, automation, transcription, summarization, analytics, CRM, or productivity tools to help with project planning, research, content drafting, workflow design, support, internal operations, and service delivery. We take reasonable steps to limit information shared with these tools to what is relevant for the task. You should not send highly sensitive, regulated, or confidential personal information for AI processing unless we have agreed to appropriate written controls.

We do not sell personal information in the ordinary meaning of selling customer lists for money. We may share information with service providers, contractors, professional advisors, and platforms that help us operate the website and deliver services, including hosting, domain, CMS, analytics, scheduling, email, CRM, payment, accounting, project management, automation, AI, security, support, testing, and communication tools. We may also disclose information when required by law, to enforce agreements, to protect rights or security, to prevent fraud or misuse, or in connection with a business transfer.

Service providers and contractors may process information on our behalf or as independent platforms under their own terms. We use reasonable care when selecting providers and, where appropriate, use contractual, access, and operational safeguards. Third-party providers may have their own privacy policies, locations, subprocessors, retention practices, AI policies, and lawful access obligations.

Because we serve clients across Canada, the United States, India, and other markets, personal information may be processed or stored in your province, state, country, or elsewhere. Service providers, contractors, infrastructure, and platforms may be located in Canada, the United States, India, the European Economic Area, or other jurisdictions. Information processed outside your location may be subject to local laws and lawful access requests.

We retain personal information only as long as reasonably necessary for the purposes described in this policy, including responding to inquiries, maintaining client relationships, delivering services, preserving business records, resolving disputes, enforcing agreements, meeting tax and legal obligations, improving services, and protecting security. Retention periods vary based on the type of information, project status, legal requirements, dispute risk, backup cycles, and business needs.

We use reasonable technical, administrative, and organizational safeguards designed to protect personal information from unauthorized access, disclosure, loss, misuse, alteration, or destruction. These safeguards may include access controls, trusted providers, limited access, secure account practices, encryption features where available, backups, logging, and operational review. No website, email, platform, network, AI tool, or storage method is completely secure, and we cannot guarantee absolute security.

If you provide credentials, API keys, tokens, repository access, hosting access, CMS access, analytics access, CRM access, payment-platform access, or other technical access, you authorize us to use that access for the project. You remain responsible for account ownership, internal permissions, revoking access after work, user management, two-factor authentication, audit logs, and security decisions in your own systems.

Depending on where you live, you may have rights to request access to personal information, correction, deletion, portability, restriction, objection, withdrawal of consent, information about disclosure, opt out of certain marketing or data sharing, or submit a complaint. We may need to verify your identity and relationship to the information before responding. Some requests may be limited or refused where permitted or required for legal, security, fraud-prevention, tax, contractual, dispute, or legitimate business reasons.

If Canadian privacy law applies, you may request access to personal information we hold about you, request correction of inaccurate information, withdraw consent where permitted, and ask questions or make a complaint about our privacy practices. We will respond according to the laws that apply to our relationship with you, including any applicable federal or provincial requirements.

If a U.S. state privacy law applies to you, you may have rights to know or access categories or specific pieces of personal information, correct inaccurate information, delete information, obtain portability, opt out of certain sale, sharing, targeted advertising, profiling, or sensitive-data processing, and appeal certain decisions. We do not knowingly sell personal information for money. If browser or preference signals are required by applicable law, we will handle them as required in the context of our website and tools.

If Indian data protection law applies, you may have rights to access information about processing, correction, completion, updating, erasure, grievance redressal, nomination where applicable, and withdrawal of consent where processing is based on consent. We will respond as required by applicable law and may retain information where permitted or required for legal, contractual, tax, security, or dispute purposes.

If European Economic Area, UK, or similar privacy laws apply to your relationship with us, you may have rights to access, rectification, erasure, restriction, portability, objection, withdrawal of consent, and complaint to a supervisory authority. We will assess such requests according to the law that applies and the role we have in relation to the information.

Some browsers and devices offer Do Not Track or privacy preference signals. Because standards and legal requirements vary, our response may depend on the signal, browser, jurisdiction, website configuration, and tools in use. Where a legally recognized opt-out preference signal applies to us, we will respond as required.

Our website and services are intended for business and professional audiences. We do not knowingly collect personal information from children under 16. If you believe a child has provided personal information to us, contact us and we will take reasonable steps to delete it unless retention is required by law.

Our website and deliverables may link to, embed, or integrate third-party websites, social platforms, calendars, payment processors, analytics tools, videos, maps, forms, chat tools, AI tools, CRMs, ecommerce platforms, and other services. We are not responsible for the privacy practices, terms, content, security, or data handling of third-party services. Review their policies before using those services or providing information.

If we become aware of a privacy or security incident involving personal information under our control, we will assess the situation, take reasonable steps to contain and investigate it, and provide notices where required by applicable law. For client-controlled systems or client-provided data, the client may be responsible for notices, regulatory reporting, and affected-person communications unless a written agreement says otherwise.

We may update this Privacy Policy from time to time to reflect changes in services, tools, business practices, legal requirements, or website functionality. Updates will be posted on this page with a revised effective date. Your continued use of the website or services after an update means the updated policy applies to future interactions.

Questions, privacy requests, unsubscribe requests, or complaints can be sent to company@namankataria.com or through the contact form on this website. Please include enough information for us to understand and verify your request.