Privacy Policy

Freshora Digital Technologies is a digital services company based in Tiruchirappalli (Trichy), Tamil Nadu, India. We provide website development, mobile application development, custom software, digital marketing, SEO, Google Business Profile services, hosting and maintenance, and related technology services.

For the purposes of the DPDP Act, Freshora acts as the Data Fiduciary when it decides why and how personal information is processed for its own business activities, such as enquiries, marketing, invoicing, and recruitment.

When we process personal information on behalf of a client during a project — for example, customer records in a website, application, CRM, or marketing campaign — the client is generally the Data Fiduciary and Freshora acts as a Data Processor, processing information only on the client's documented instructions and under the terms of the relevant agreement.

This policy does not apply to third-party websites, platforms, or applications that we do not control, even where they are linked from our website.

When you visit our website, our hosting infrastructure and the tools enabled on the site may record technical information automatically. This can include:

• Internet Protocol (IP) address and approximate location derived from it.
• Browser type, device type, operating system, and screen or language settings.
• Pages viewed, links clicked, referring pages, search terms that led to the site, and time spent on pages.
• Date and time of access, server log data, error reports, and security event logs.
• Cookie identifiers and similar technical identifiers, as explained in the section on cookies.

We use this information to operate and secure the website, understand aggregate usage, diagnose technical problems, measure the effectiveness of our pages and campaigns, and improve the experience for visitors.

We do not use this technical information to identify you individually unless it is necessary for security, fraud prevention, legal compliance, or the investigation of a specific issue.

Our website may use cookies, pixels, tags, and local storage to keep the site working correctly and to understand how visitors use it. These technologies fall into the following broad categories:

• Strictly necessary cookies: required for page navigation, form security, session handling, load balancing, and protection against fraudulent or malicious requests.
• Preference cookies: remember choices such as language or display settings.
• Analytics cookies: help us understand page performance, traffic sources, and aggregate visitor behaviour, including through services such as Google Analytics where enabled.
• Advertising and remarketing cookies: used by platforms such as Google Ads and Meta to measure campaigns and show relevant advertising, where such tools are enabled on the site.

Where applicable law requires consent before non-essential cookies are set, we will request that consent through the notice or preference control made available on the website. You can also block, delete, or restrict cookies through your browser settings.

Disabling strictly necessary cookies may affect the operation of forms, navigation, or other parts of the website. Third-party cookies are governed by the privacy policies of the relevant providers.

Under the DPDP Act, we process personal information on the basis of the consent you provide, or another lawful basis recognised by applicable law, such as compliance with a legal obligation or certain legitimate uses permitted by statute.

Where we rely on consent, we aim to present a clear notice explaining the information sought and the purpose of processing. You may withdraw your consent at any time by contacting us using the details in this policy. Withdrawal does not affect processing carried out before the withdrawal, or processing that is otherwise permitted or required by law.

If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with similar requirements, we rely on the following legal bases as applicable: your consent; performance of a contract or steps taken at your request before entering a contract; compliance with a legal obligation; and our legitimate interests in operating and improving our business, provided those interests are not overridden by your rights.

You are not generally required to provide personal information to browse our website. However, certain information is necessary to respond to an enquiry, prepare a proposal, or deliver a service. If you choose not to provide it, we may be unable to proceed with that request.

We do not sell, rent, or trade personal information. We may share it in the following limited circumstances:

• Within Freshora: with team members and authorised personnel who need the information to respond to your request or deliver a service.
• Service providers: with hosting, cloud, email, CRM, analytics, advertising, payment, communication, and IT support providers that process information on our behalf.
• Professional advisers: with lawyers, auditors, accountants, and insurers where necessary for professional advice or compliance.
• Client engagements: with the relevant client and its authorised representatives when delivering an agreed project.
• Legal and regulatory authorities: where disclosure is required by law, a court order, a lawful request, or to protect our rights, property, or the safety of others.
• Business transfers: in connection with a merger, acquisition, restructuring, or sale of assets, subject to appropriate confidentiality protections.
• With your consent: for any other purpose you specifically approve, including testimonials, case studies, or referrals.

Where we share information with service providers, we take reasonable steps to ensure they are bound by confidentiality and security obligations and process the information only for the purposes for which it was shared.

Freshora is based in India, and our primary operations are conducted from India. Some of our service providers, group tools, or clients may be located in other countries, which means personal information may be transferred to, stored in, or accessed from jurisdictions outside your own.

Where personal information is transferred internationally, we take reasonable steps to ensure that it receives an appropriate level of protection. Depending on the circumstances, this may include contractual confidentiality and data protection obligations, provider security commitments, access controls, and encryption in transit.

Where the GDPR or UK GDPR applies, we use appropriate transfer mechanisms recognised under those frameworks, such as standard contractual clauses or transfers to jurisdictions with an adequate level of protection, as applicable.

By using our website or engaging our services, you acknowledge that personal information may be processed outside your country of residence, subject to the safeguards described in this policy and applicable law.

We maintain reasonable technical and organisational measures designed to protect personal information against unauthorised access, alteration, disclosure, loss, or misuse. These measures include, as appropriate to the nature of the information and the systems involved:

• Access controls, role-based permissions, and the principle of least privilege.
• Authentication and account security for internal systems and client platforms.
• Encryption of data in transit using HTTPS/TLS on our website and supported services.
• Regular software updates, monitoring, and security reviews of our website and infrastructure.
• Secure handling of credentials, backups, and project environments.
• Confidentiality obligations for team members, contractors, and service providers.
• Procedures for responding to suspected security incidents and reviewing their impact.

No method of transmission over the internet or method of electronic storage is completely secure. While we take privacy and security seriously, we cannot guarantee absolute security. If a personal data breach occurs, we will assess it and notify the relevant authorities and affected individuals where required by applicable law, including the DPDP Act and its rules.

You also have a role in protecting your information. Please use strong, unique passwords for any account or portal we provide, keep credentials confidential, and notify us promptly if you suspect unauthorised access.

Our clients often entrust us with access to their websites, applications, hosting accounts, advertising accounts, CRM systems, and databases. In those situations, Freshora generally acts as a Data Processor and processes personal information only on the client's documented instructions and for the purposes of the agreed engagement.

The client remains responsible for ensuring that it has a lawful basis to collect and share the information, that appropriate privacy notices are provided to end users, and that any necessary consents or permissions are obtained. A separate data processing agreement can be entered into where required.

Our team members and contractors are bound by confidentiality obligations. Access to client environments is limited to personnel who require it for the project, and we take reasonable steps to protect credentials, test data, and project records.

Where practical, we encourage clients to provide anonymised or synthetic data for testing and development. On completion or termination of an engagement, client data is returned or deleted in accordance with the applicable agreement, subject to legal retention requirements.

Our website and communications may contain links to third-party websites, social media pages, mapping services, payment platforms, and other resources. Those services operate independently of Freshora and have their own privacy and security practices.

We are not responsible for the content, availability, or privacy practices of third-party websites, and a link does not imply that we endorse their practices. We encourage you to read the privacy policy of any website or platform before providing personal information.

If you access a third-party service using credentials or an account we manage on your behalf, your use of that service remains subject to the provider's terms and privacy policy.

If you have a question about this Privacy Policy, wish to exercise a privacy right, or have a concern about how your personal information has been handled, please contact us:

Freshora Digital Technologies
77, C3, St. Pauls Complex, Pudukottai Main Rd,
Bharathiyar Salai, Cantonment,
Tiruchirappalli, Tamil Nadu 620001, India
Email: info@freshora.ai
Phone: +91 90039 99845

Please include enough detail for us to understand your request, and use the subject line “Privacy Request” or “Grievance” where possible. We will acknowledge your request and respond within the timeframe required by applicable law.

If you are not satisfied with our response, you may have the right to escalate the matter to the Data Protection Board of India or another competent supervisory authority, in accordance with applicable law. We would appreciate the opportunity to address your concern directly before you do so.