Who We Are
Big Brick Digital ("we", "our", "us") is a digital agency registered and operating in India with its principal place of business at 24 Maharaja Colony, Udaipur, Rajasthan 313001, India.
We operate the website www.bigbrickdigital.com and all associated subdomains and pages (collectively, the "Service"). We are the data controller for personal data collected through this Service.
For all privacy matters, contact: info@bigbrickdigital.com
Data We Collect
We collect personal data in the following circumstances:
| Category | Examples | How Collected |
|---|---|---|
| Identity data | First name, last name, company name | Contact forms, email correspondence |
| Contact data | Email address, phone number, WhatsApp | Contact forms, direct communication |
| Technical data | IP address, browser type, device type, OS | Automatically via Google Analytics, server logs |
| Usage data | Pages visited, time on site, referral source | Google Analytics cookies |
| Communications data | Messages sent to us, project briefs | Contact forms, email, WhatsApp |
| Financial data | Payment confirmation references only | Payment processors (Stripe, PayPal, Razorpay) |
We do not collect sensitive personal data (health, biometric, religious, or political data) and we do not store full payment card details — these are handled exclusively by certified payment processors.
How We Use Your Data
We use personal data for the following purposes:
- To respond to enquiries — When you contact us via form, email, or WhatsApp, we use your details to respond and provide the requested information
- To deliver contracted services — To perform web development, SEO, or other services you have engaged us for
- To send service communications — Project updates, invoices, and necessary operational communications
- To improve our website — Analytics data helps us understand how visitors use our site so we can improve it
- To comply with legal obligations — Tax records, invoicing, and compliance with applicable law
- To protect legitimate interests — Fraud prevention, security monitoring, and protecting our rights
We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.
Legal Basis for Processing
Under applicable data protection law (including the GDPR where it applies to EEA users, and the Indian Information Technology Act 2000 and DPDP Act 2023), we rely on the following legal bases:
- Consent — For analytics cookies and marketing communications, where we have obtained your explicit consent
- Contract performance — To deliver services you have contracted us for
- Legitimate interests — For general business operations, fraud prevention, and website improvement, where these do not override your rights
- Legal obligation — To comply with applicable laws and regulations
Cookies & Tracking
We use cookies and similar tracking technologies to improve your experience and analyse site usage.
| Cookie | Type | Purpose | Duration |
|---|---|---|---|
| _ga, _ga_* | Analytics | Google Analytics — tracks sessions and page views | 2 years |
| bbdConsent | Functional | Stores your cookie consent preference | 1 year |
You may withdraw consent for analytics cookies at any time by clearing your browser cookies or adjusting your browser settings. Note that declining analytics cookies does not affect your ability to use our website.
We do not use advertising cookies, tracking pixels from ad networks, or cross-site tracking technologies.
Sharing Your Data
We do not sell, rent, or trade your personal data. We share data only with the following trusted third-party service providers, under contractual data processing agreements:
- Google Analytics (Google LLC) — Website analytics. Data may be processed in the USA. Google is certified under EU-US Data Privacy Framework.
- Payment processors (Stripe, PayPal, Razorpay) — For payment processing. We share only what is necessary to complete a transaction. These processors are independently PCI-DSS certified.
- Email service providers — For sending transactional emails. Processing is subject to their respective privacy policies.
- Hosting providers — Our web infrastructure providers process server log data including IP addresses.
We may also disclose personal data when required by law, court order, or to protect the rights, property, or safety of Big Brick Digital or others.
Data Retention
We retain personal data only for as long as necessary to fulfil the purpose for which it was collected:
- Client project data — 7 years from project completion (legal and tax compliance)
- Contact enquiries (non-clients) — 2 years from last communication
- Analytics data — 26 months (Google Analytics default, configurable)
- Financial records — 7 years (Indian statutory requirement)
After the applicable retention period, data is securely deleted or anonymised so it can no longer be associated with any individual.
Your Rights
Depending on your jurisdiction, you have the following rights regarding your personal data:
- Access — Request a copy of the personal data we hold about you
- Rectification — Request correction of inaccurate or incomplete data
- Erasure — Request deletion of your data ("right to be forgotten")
- Restriction — Request that we limit processing of your data in certain circumstances
- Portability — Receive your data in a structured, machine-readable format
- Objection — Object to processing based on legitimate interests or for direct marketing
- Withdraw consent — Withdraw consent at any time where processing is based on consent
To exercise any of these rights, contact us at info@bigbrickdigital.com. We will respond within 30 days. You also have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction.
Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse, including:
- TLS/SSL encryption for all data in transit
- Access controls and authentication for internal systems
- Regular security reviews and vulnerability assessments
- Restricted employee access to personal data on a need-to-know basis
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of it, where required by law.
International Transfers
Our operations are primarily based in India. Some of our third-party providers (such as Google Analytics) may transfer data to and process it in countries outside India, including the United States. Where such transfers occur, we ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Adequacy decisions, where applicable
- Certification schemes (e.g., EU-US Data Privacy Framework)
Children's Privacy
Our services are not directed at, and we do not knowingly collect personal data from, children under the age of 16. If we become aware that we have inadvertently collected personal data from a child under 16, we will delete it promptly. If you believe we have collected such data, please contact us immediately.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will update the "Last updated" date at the top of this page. Continued use of our Service after such changes constitutes your acceptance of the updated policy.
We recommend reviewing this page periodically. For significant changes, we will make reasonable efforts to notify you directly where we hold your contact information.
Contact & Complaints
Data Controller Contact
Big Brick Digital
24 Maharaja Colony, Udaipur, Rajasthan 313001, India
Email: info@bigbrickdigital.com
Phone: +91 95098 03969
If you have a concern about how we handle your data that we are unable to resolve to your satisfaction, you have the right to lodge a complaint with the Data Protection Board of India or the supervisory authority in your country of residence.