Privacy Policy

Last updated: 31-08-2026

At Granth Creations Private Limited (“Granth”, “we”, “us” or “our”), we are committed to protecting the privacy and security of our users, clients and visitors. This privacy policy applies to the Granth website (granth.in), our apps and the services we provide (collectively, the “Products” or “Services”) and explains how we collect, use, share and protect information about you when you use our Services.

This policy is published in accordance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the Digital Personal Data Protection Rules, 2025 (“DPDP Rules”), read with the Information Technology Act, 2000 and, where applicable to visitors from other regions, laws such as the EU/UK General Data Protection Regulation (“GDPR”).

Information We Collect

We collect information about you in a few different ways when you use our Services.

Information You Provide to Us

When you create an account, fill in an enquiry or contact form, request a proposal, or otherwise engage with Granth, we ask for certain information such as your name, email address, company name, designation and phone number. We may also collect:

• Information you provide when you contact us for support or other enquiries (including over email, phone or WhatsApp)
• Project-related information, briefs, brand assets and files you share with us when you engage our branding, content, design, video, development, marketing or language services
• Billing and payment-related information needed to invoice you for our Services (card and banking details are processed by our payment partners, not stored by us)
• Information you submit when applying for a job with us, such as your CV, portfolio and work history

Information We Collect Automatically

When you use our Services, we collect certain information automatically, such as your IP address, browser and device information, pages visited, time spent, referring links and other information about your use of the Services. We may also collect approximate location derived from your IP address, or more precise location data if you enable location services on your device.

Additionally, we collect information through cookies and similar technologies, as explained below.

What are Cookies?

A cookie is a small file that is stored on your device when you visit a website. Cookies help a website recognise your device, remember your preferences and analyse web traffic, so that it can respond to you as an individual and tailor its operations to your needs, likes and dislikes.

How Granth Creations Uses Cookies

We use traffic log and analytics cookies to understand which pages are being visited. This helps us analyse web page traffic and improve our website to better suit visitor requirements. We use this data only for statistical analysis. Overall, cookies enable us to see which pages you find useful and which you do not, allowing us to deliver a better website and more relevant content.

A cookie in no way gives us access to your device or to any personal information about you, other than the data you choose to share with us. You can choose to accept or decline cookies. Most web browsers accept cookies by default, but you can usually modify your browser settings to decline cookies if you prefer, and you can change or withdraw your cookie preferences at any time. Declining some cookies may affect how parts of the website function.

Google Analytics

We use Google Analytics (deployed through Google Tag Manager) to provide website analytics and information on the performance of our website. Google Analytics uses cookies and device identifiers such as IP addresses to provide the analytics data. Google has developed a “Google Analytics Opt-Out Browser Add-on” that can be downloaded and enabled to prevent Google Analytics cookies from being tracked. Please visit https://tools.google.com/dlpage/gaoptout to do so.

Online Advertising and Remarketing

To make sure we show relevant content, we work with third-party advertising and social media platforms (such as Google and Meta) that collect cookies, other device identifying information and/or browsing activity for online advertising, remarketing and conversion tracking. Visit https://www.networkadvertising.org/ to find out more about interest-based advertising and how to opt out.

Information We Collect from Third Parties

We may receive information about you from third-party sources, such as business partners, publicly available professional sources, social media platforms on which you interact with us, or other users of the Services who may share information with us (for example, when a client refers you to us).

How We Use Your Information

We use the information we collect about you to provide, maintain and improve the Services. This includes using your information to:

• Provide and deliver the Services you have requested, and manage our client engagements and projects
• Communicate with you, such as responding to your enquiries and support requests, sharing proposals and sending you updates about the Services
• Send you marketing communications, such as newsletters and updates about our work, where permitted — you can opt out of these at any time
• Analyse and improve the Services, such as by conducting research and analytics
• Prevent fraud, abuse and security incidents
• Process payments, maintain business records and comply with legal, tax and accounting obligations

Legal Bases for Processing

Under the DPDP Act, we process your personal data (a) with your consent, obtained through a clear notice for the specified purpose, or (b) for certain legitimate uses recognised under the DPDP Act — for example, where you voluntarily provide your data to us for a purpose (such as making a business enquiry), for employment-related purposes, or where processing is required to comply with law or a court order. Where we rely on your consent, you may withdraw it at any time, as easily as it was given.

If you are in the European Economic Area or the United Kingdom, we process your personal data where you have given consent, where it is necessary to perform a contract with you (or to take steps at your request before entering a contract), where it is necessary for our legitimate interests (such as running and promoting our business) balanced against your rights, or where it is necessary to comply with a legal obligation.

Sharing Your Information

We do not sell your personal information, and we do not share your personal information with third parties for their own marketing purposes without your consent. We may share your information in the following circumstances:

• With vendors, consultants and other service providers (such as hosting, analytics, communication, project-management and payment providers) who need access to your information to perform work on our behalf, under appropriate contractual safeguards
• Within the Granth group, including our offices outside India, for the purposes described in this policy
• In response to a request for information if we believe disclosure is in accordance with any applicable law, regulation or legal process
• If we believe your actions are inconsistent with our user agreements or policies, or to protect the rights, property and safety of Granth Creations Private Limited or others
• In connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company

Cross-Border Data Transfers

Granth is headquartered in Ahmedabad, India, and has offices and service providers in other countries, including the UAE, the United Kingdom, New Zealand and Hong Kong. Your information may therefore be transferred to, and processed in, countries other than your own. We transfer personal data outside India in accordance with the DPDP Act, which permits such transfers except to countries restricted by the Central Government. Where we transfer personal data of individuals located in the EEA or the UK, we rely on appropriate safeguards such as standard contractual clauses.

Data Retention

We retain personal data only for as long as it is needed for the purposes described in this policy, or as required under applicable law (for example, tax, accounting and contractual record-keeping requirements). When you withdraw your consent, or the purpose for which the data was collected has been served — and no legal requirement obliges us to keep it — we erase the data or anonymise it.

Security of Your Information

We take the security of your information seriously and use reasonable security safeguards — such as access controls, encryption where appropriate, and monitoring — to protect it and to prevent personal data breaches. However, no data transmission over the internet or method of electronic storage is 100% secure, and we cannot guarantee the absolute security of your information.

In the event of a personal data breach affecting you, we will notify you and the Data Protection Board of India in the manner and within the timelines required under the DPDP Act and DPDP Rules.

Your Rights

If you are in India, you have the following rights as a Data Principal under the DPDP Act:

• Right to access: obtain a summary of the personal data we process about you and our related processing activities
• Right to correction and erasure: have inaccurate or incomplete personal data corrected, completed or updated, and have your personal data erased when it is no longer necessary
• Right to withdraw consent: withdraw your consent at any time, as easily as it was given. Withdrawal does not affect processing already carried out, and we may be unable to provide some Services after withdrawal
• Right of grievance redressal: have your concerns and complaints addressed through the Grievance Officer contact provided below
• Right to nominate: nominate another individual to exercise your rights in the event of your death or incapacity

If you are in the EEA or the UK, you additionally have rights under the GDPR/UK GDPR to access, rectify, erase, restrict or object to the processing of your personal data, to data portability, and to lodge a complaint with your local supervisory authority. Residents of other regions may have similar rights under their local laws.

To exercise any of these rights, write to us using the contact details below. We may need to verify your identity before acting on your request.

Children’s Privacy

Our Services are intended for business users and individuals aged 18 and above. We do not knowingly collect personal data from children without verifiable parental consent, and we do not undertake tracking, behavioural monitoring or targeted advertising directed at children. If you believe a child has provided us with personal data, please contact us and we will delete it.

Grievance Redressal & Contact Us

If you have any questions, concerns or complaints about this privacy policy or how we handle your personal data, or if you wish to exercise any of your rights, please contact our Grievance Officer:

Grievance Officer: [Insert name and designation] Granth Creations Private Limited 308, Times Square Arcade, Nr. Ravija Plaza, Thaltej, Ahmedabad – 380059, Gujarat, India Email: info@granth.info Phone: +91 95 12 95 25 25

We will acknowledge and respond to your grievance within the timelines prescribed under applicable law. If you are not satisfied with our response, you have the right to lodge a complaint with the Data Protection Board of India. On request, we will make this notice available to you in English or in any language specified in the Eighth Schedule to the Constitution of India.

Third-Party Links

Our website may contain links to third-party websites, plugins and social media pages (such as Facebook, Instagram, LinkedIn and Behance). Once you leave our website, we do not control and are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party sites you visit.

Changes to This Privacy Policy

We may update this privacy policy from time to time. If we make changes, we will post the updated policy on this page and update the “Last Updated” date at the top of the policy. For material changes, we may also notify you by email or through a notice on our website. We encourage you to review this policy periodically to stay informed about how we are protecting the information we collect.