Privacy Policy

1. Scope

This policy explains how NY Digital handles personal data when you visit our website, contact us or use our services. A customer using our messaging or cloud solutions may separately act as the Data Fiduciary, controller or business owner for information it collects from its customers.

2. Information we collect

We may collect contact and business details, enquiry content, service and billing records, support communications and basic device or network information used for security and performance.

3. Why we process data

We process information to respond to enquiries, deliver contracted services, provide support, secure and improve systems, meet legal obligations and send permitted business communications. We aim to collect only what is reasonably necessary for a defined purpose.

4. Messaging and cloud providers

Our services may involve Meta and WhatsApp, Google, Amazon Web Services, email platforms and other providers selected for a customer implementation. Those providers may process information under their own terms. Customers remain responsible for lawful contact collection, notices, consent, opt-in records or other legal grounds applicable to their campaigns.

5. DPDP compliant practices

For Indian customer communication workflows, we design implementation practices with the Digital Personal Data Protection Act, 2023 in mind. This includes purpose-specific data collection, customer consent and opt-in records, limited access for team members, deletion support, grievance contact details, secure processing and reasonable safeguards against personal data breaches.

6. Child safety and children’s data

If a customer workflow may involve children’s personal data, such as coaching, education, childcare, healthcare or family-focused services, the implementation should be reviewed with extra care. Under the DPDP Act, children’s data may require verifiable parent or lawful guardian consent. Workflows should avoid processing that may negatively affect a child’s well-being and should not be used for tracking, behavioural monitoring or targeted advertising directed at children.

7. DPDP penalty awareness

The DPDP Act provides significant financial penalties for non-compliance. Failure to take reasonable security safeguards to prevent a personal data breach can attract penalties up to ₹250 crore. Failure to notify a personal data breach may also attract significant penalties. Final liability depends on the facts, the applicable rules and decisions of the Data Protection Board of India.

7. Sharing, security and retention

We share data with service providers where needed to operate a service, when instructed by a customer, or where required by law. We use reasonable technical and organisational safeguards appropriate to the service and retain information only while needed for operational, contractual, security or legal purposes.

8. Your rights

Depending on applicable law, you may request access, correction, erasure or other action regarding personal data we control. Email hello@nydigital.co.in. We may verify your identity and may retain records where law or legitimate security obligations require it.

9. Compliance context

Our privacy programme is designed with principles found in India’s Digital Personal Data Protection Act, 2023 and, where relevant, the GDPR. HIPAA obligations apply only in defined US healthcare contexts and may require specific contracts and safeguards. This policy is not legal advice and is not a representation that every customer implementation is automatically compliant without customer-side process, consent and legal review.

10. Contact

Email hello@nydigital.co.in or call +91 87797 13123.