Legal
Privacy Policy
Last updated
We're a data-protection consultancy, so our own privacy policy is a live demonstration of what we build for clients. This policy explains how DreamyHook Consultancy Services ("DreamyHook", "we", "us"), a division of DreamyHook Digital Media, handles personal data in line with India's Digital Personal Data Protection Act, 2023 (the "DPDP Act").
Who we are
DreamyHook Consultancy Services is the Data Fiduciary responsible for the personal data described here. We are based in Gurugram, Haryana, India, and serve clients across India. You can reach us any time at hello@dreamyhook.in.
What personal data we collect
- Contact details you give us — name, email, phone, and company — when you use our contact form, book a consultation, or take the Quick Scan.
- Quick Scan responses — the answers you provide about your business and data practices, which we use to generate your readiness snapshot.
- Technical data — basic, privacy-respecting information needed to operate and secure the site. We do not run advertising trackers on this site by default.
How we use it, and our lawful basis
We process your personal data on the basis of your consent and to take steps you ask for. Specifically, to:
- respond to your enquiry and provide the services you request;
- generate and send your Quick Scan results;
- contact you about DPDP compliance where you've agreed to it;
- operate, secure, and improve our website.
You can withdraw consent at any time — see "Your rights" below — and it will be as easy as it was to give.
Who we share it with
We don't sell your data. We share it only with trusted processors who help us run our business (for example, communication and hosting providers), under agreements that require them to protect it, and with partner law firms where you've engaged us for legal work. We may disclose data where required by law.
How long we keep it
We keep personal data only as long as needed for the purpose it was collected, and then delete or anonymize it. Enquiry and lead data is retained for the duration of our discussions and a reasonable period afterwards, unless you ask us to erase it sooner.
How we protect it
We apply reasonable security safeguards — including encryption in transit, access controls, and logging — and keep them under review. If a personal data breach ever occurred, we would notify the Data Protection Board of India and affected individuals as required.
Your rights as a Data Principal
Under the DPDP Act you have the right to:
- access a summary of the personal data we process about you and who it's shared with;
- correct, complete, update, and erase your personal data;
- readily raise a grievance with us;
- nominate another person to exercise your rights in the event of death or incapacity.
To exercise any right, email hello@dreamyhook.in. We'll respond within the timelines the Rules require.
Grievance redressal & DPO
If you're unhappy with how we've handled your data, contact us at hello@dreamyhook.in and we'll work to resolve it. If you remain unsatisfied, you may approach the Data Protection Board of India.
Children's data
Our services are aimed at businesses, not children. We do not knowingly collect the personal data of anyone under 18 through this site.
Cookies
We use only what's needed to run the site, and ask before setting anything optional. See our Cookie Policy for details, and change your choice any time.
Changes to this policy
As the DPDP Rules and our services evolve, we'll update this policy and change the "last updated" date above. Material changes will be highlighted.
This policy is provided as general information and a demonstration of good practice; it is not legal advice for your organization. Need a policy like this for your business? See our Legal & Policy service.