3. WHAT WE COLLECT

     ->  Personal Information

When you engage our services or register on the Platform, we may collect:

• Name, email address, phone number, organisation name, designation
• Service-related inputs including objectives, keywords, scope, feedback, and survey responses

These details help us personalise media monitoring, deliver reports, and communicate updates.

    -> User-Provided Content

Any documents, media lists, media briefs, or communications you voluntarily share during onboarding or project delivery may be stored and processed for analytical and report-generation purposes.

    -> Sensitive Data

We generally avoid collecting Sensitive Personal Data. If collected (e.g. payment details, invoicing, identity verification), this is done only with your explicit consent and handled under heightened security measures, in accordance with IT Rules.

   -> Technical and Usage Data

We may collect anonymised data such as IP address, device info, browser type, log files, access time, pages viewed to monitor system performance, detect anomalies, and improve Platform functionality.

4.PURPOSE OF COLLECTION

We use your data to:

• Provide and customise media monitoring and analytical services
• Generate reports tailored to your objectives and regions monitored
• Communicate alerts, insights, updates, and project announcements
• Comply with contracts, legal obligations, and internal audit requirements
• Improve Platform design, usability, and performance

5.LEGAL BASIS & CONSENT

Under Indian data protection regimes:

• We seek your clear, explicit consent before collecting Personal or Sensitive Data
• You may withdraw consent at any time, which will prevent further processing (but won’t affect lawful processing already completed)
• Certain data uses such as delivering contracted services, legal compliance, or fraud prevention may be processed under legitimate interest

6. DISCLOSURE OF INFORMATION

Your information may be disclosed in limited circumstances:

• To trusted third-party service providers (e.g. cloud, analytics tools, email delivery) under strict confidentiality terms
• To affiliates or partners (e.g., regional media partners) for service delivery—only under this Privacy Policy
• To authorities if required by law, regulation, or to protect legal rights or prevent misuse
• In connection with a business transfer such as a merger or acquisition; you will be informed in advance

7. SECURITY & STORAGE

• Your personal and user data are stored on secure servers (India or approved cloud)
• We implement industry-standard safeguards like encryption, password protection, restricted access, firewall systems, and data de-identification
• While we strive to protect your data, transmission over the internet may carry risks we disclaim liability for

8. DATA BREACH NOTIFICATION

 In the event of a confirmed personal data breach that is likely to result in a risk to the rights and freedoms of individuals, we shall notify the affected users without undue delay and, where feasible, within 72 hours of becoming aware of the breach. Notification may be delayed only if law enforcement authorities determine that such disclosure would impede a criminal investigation or jeopardize national security, in which case notification shall occur promptly after the reason for delay no longer exists.

 9. DATA RETENTION

Personal data is retained only:

• As long as needed to fulfill contractual or service obligations
• To meet legal, audit, tax, or dispute resolution requirements
• Once no longer necessary, data will be deleted or anonymised unless retention is required by law.

10. DATA SUBJECT RIGHTS AND VERIFICATION

Subject to applicable data protection laws, you may exercise the following rights with respect to your personal data:

• Request access to the personal data we hold about you;
• Request correction or rectification of inaccurate or incomplete data;
• Request erasure of your data, subject to applicable retention obligations;
• Withdraw consent for future data processing (where processing is based on consent);
• Object to direct marketing, profiling, or other processing on legitimate grounds;
• Lodge a complaint with a competent data protection authority.

To safeguard your data and prevent unauthorized disclosures or access, we may require sufficient proof of identity or legal authorization before acting upon any such request. This verification process is essential to ensure that your data rights are exercised lawfully and securely.

11. CHILDREN’S DATA

The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect, process, or store personal data from children or minors. If we become aware that personal data of a child has been collected inadvertently, we will take appropriate steps to delete such data promptly and ensure compliance with applicable data protection laws.

12.DATA MINIMIZATION AND ANONYMIZATION

We collect and process only such personal data as is necessary to achieve clearly defined and legitimate purposes. Wherever appropriate and feasible, we may employ techniques such as anonymization or pseudonymization to safeguard personal data, particularly when used for internal analytics, performance benchmarking, research, or service improvement activities.

13. HIGH-RISK PROCESSING AND DATA PROTECTION IMPACT ASSESSMENTS (DPIAS)

For any engagement involving large-scale data processing, sensitive personal data, or processing activities likely to result in a high risk to the rights and freedoms of individuals, we may carry out a Data Protection Impact Assessment (DPIA). This assessment is intended to proactively evaluate and mitigate potential data privacy risks in accordance with applicable data protection laws and best practices.

14. COOKIES & TRACKING TECHNOLOGIES

Our Platform may use cookies or tracking tags for analytics and performance improvements. You may disable cookies via browser settings, but this could restrict functionality.

15. GRIEVANCE REDRESSAL

Data Privacy Officer / Grievance Officer
[Name], Insights Matrix Private Limited
Email:
Working Hours

 Complaints will be acknowledged within 3 working days and resolved within 30 calendar days from receipt.

16. UPDATES TO THIS POLICY

This Privacy Policy may be updated periodically. Revisions will be communicated via the Platform with a revised effective date. Your continued use of our services implies acceptance of these changes.

17. DISPUTE RESOLUTION

Any disputes or claims arising from the use of our content or services shall first be resolved through amicable consultation. Failing that, the matter shall be referred to arbitration in accordance with the Arbitration and Conciliation Act, 1996. The seat of arbitration shall be New Delhi, India, and proceedings shall be in English. Subject to the above, courts in New Delhi shall have exclusive jurisdiction.

Note: By using InsightMatrix’s Platform or engaging our Services, you confirm that you have read, understood, and agreed to this Privacy Policy.