1. Who we are
Krinfy Growth Hub (“Krinfy”, “we”, “us”, “our”) is a digital marketing agency based in Pune, India. We build websites, run advertising campaigns and set up marketing automation for our clients.
This Privacy Policy explains what personal information we collect when you visit https://krinfy.com (the “Website”), contact us, book a call or work with us, how we use it, who we share it with, and the choices and rights you have. It applies to visitors and to prospective and current clients worldwide.
For the purposes of data protection laws, including the EU and UK General Data Protection Regulation (GDPR) and India’s Digital Personal Data Protection Act, 2023 (DPDP Act), Krinfy is the controller (or data fiduciary) of the personal information described in this policy.
| Business name | Krinfy Growth Hub |
|---|---|
| Location | Ambegaon, Pune, Maharashtra 411046, India |
| hello@krinfy.com | |
| Phone / WhatsApp | +91 91756 61345 |
This policy should be read together with our Cookie Policy and Terms and Conditions.
2. Information we collect
Information you give us
| Where | What we collect |
|---|---|
| “Request a plan” and enquiry forms | First and last name, WhatsApp number, email address (optional on the contact form, required on the ad cost calculators to send your report), business name, the goal you choose, the plan or service you ask about, and anything you write in your message |
| WhatsApp, phone and email | Your name, number or email address, and the content of your messages |
| Booking a call | Name, email, phone, chosen time slot and any notes you add |
| Working with us as a client | Contact details of your team, billing and tax details (such as GST number), and account access you choose to grant us |
Information collected automatically
When you visit the Website, we and our analytics and advertising partners may collect information through cookies, pixels and similar technologies (see Section 4), including:
- Device and browser type, operating system, screen size and language
- IP address and approximate location (city or region) derived from it
- Pages viewed, time spent, clicks, scrolls and form interactions
- How you reached the Website, including the referring site and campaign parameters (UTM tags and ad click IDs)
- Identifiers set by cookies and pixels
When you submit a form, we also receive the page you sent it from and how you first found the Website (for example, the ad or search that brought you), so we know which of our marketing is working.
Information from third parties
We may receive information from advertising platforms (such as Google and Meta) about how our ads performed, and from public sources such as your business website or LinkedIn profile when you enquire about our services.
We do not intentionally collect sensitive personal information, such as health details, financial account numbers, religious beliefs or biometric data. Please do not send it to us.
3. How we use your information
We use personal information only for the purposes below. Where GDPR or UK GDPR applies, the table also shows our legal basis. Under India’s DPDP Act, we process personal data on the basis of your consent or for legitimate uses permitted by law.
| Purpose | Legal basis (GDPR / UK GDPR) |
|---|---|
| Responding to enquiries, preparing the growth plan you requested, sending your plan or report by email, and booking calls | Steps taken at your request before entering a contract; legitimate interests |
| Providing our services, managing projects, invoicing and client support | Performance of a contract |
| Following up on enquiries and sending relevant case studies or updates | Legitimate interests (business-to-business marketing) or consent, where required |
| Measuring Website performance and understanding how visitors use it (Google Analytics, Microsoft Clarity) | Consent |
| Measuring and improving our advertising, including showing our ads to people who visited the Website (Google tag, Meta Pixel) | Consent |
| Keeping the Website and our systems secure and preventing spam, fraud or misuse | Legitimate interests |
| Complying with tax, accounting and other legal obligations | Legal obligation |
Where we rely on legitimate interests, we have balanced our interest in running and growing our business against your rights, and you can object at any time (see Section 7). Where we rely on consent, you can withdraw it at any time; this does not affect processing already carried out.
We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.
4. Cookies and tracking technologies
We use cookies, pixels and similar technologies to run the Website, understand how it is used and measure our advertising. Our Cookie Policy lists each one, its purpose and how long it lasts. Analytics and advertising tools are loaded through Google Tag Manager and only set their cookies after you allow them.
| Technology | Provider | What it does |
|---|---|---|
| Google tag and Google Analytics 4 | Google LLC / Google Ireland Ltd | Measures visits, traffic sources and actions such as form submissions; supports Google Ads conversion measurement. How Google uses information from sites |
| Microsoft Clarity | Microsoft Corporation | Records anonymised session replays and heatmaps (clicks and scrolls) to help us improve the Website. Clarity masks text you type in form fields by default. Microsoft Privacy Statement |
| Meta Pixel | Meta Platforms, Inc. / Meta Platforms Ireland Ltd | Measures the results of our Facebook and Instagram ads and helps us show ads to people who visited the Website. Meta Privacy Policy |
Your choices
- Cookie banner: Statistics and marketing cookies load only after you accept them. You can change your choice at any time using the “Cookie settings” button on our Cookie Policy page.
- Browser settings: You can block or delete cookies in your browser. Blocking essential storage may affect how the Website works.
- Opt-out tools: Google Analytics Opt-out Browser Add-on, Google My Ad Center and Meta ad preferences.
- Global Privacy Control: If your browser sends a Global Privacy Control (GPC) signal, we treat it as a request to opt out of marketing cookies.
5. How we share your information
We do not sell your personal information for money. We share it only with the parties below, and only as needed for the purposes in Section 3.
| Recipient | Purpose |
|---|---|
| Zoho Corporation (Zoho Bigin CRM, bookings and email) | Storing enquiries and client records, booking calls, sending follow-up messages |
| Cloudflare, Inc. | Hosting the Website, protecting it from attacks and spam, and securely passing form submissions to our CRM |
| Meta (WhatsApp Business) | Messaging with you on WhatsApp |
| Google, Microsoft and Meta | Analytics and advertising measurement, as described in Section 4 |
| Email and cloud storage providers (such as Google Workspace) | Business communication and document storage |
| Payment providers (such as Razorpay) | Processing client payments |
| Professional advisers (accountants, lawyers, auditors) | Legal, tax and accounting obligations |
| Authorities, courts or regulators | When required by law or to protect our rights, property or safety |
| A buyer or successor business | If Krinfy is involved in a merger, acquisition or sale of assets |
Our service providers process personal information on our instructions and are required to keep it confidential and secure.
Note for US residents: Allowing Google and Meta to collect information through cookies and pixels to show you personalised ads may be considered “selling” or “sharing” personal information, or “targeted advertising”, under some US state privacy laws. You can opt out as described in Sections 4 and 7.
6. International transfers, retention and security
International transfers
Krinfy is based in India, and our service providers may store or process information in India, the United States, the European Union or other countries. These countries may have different data protection laws from yours. When we transfer personal information from the EEA, UK or Switzerland to countries without an adequacy decision, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (and the UK Addendum), or on our providers’ certifications under frameworks such as the EU–US Data Privacy Framework, where available.
How long we keep information
| Information | Retention period |
|---|---|
| Enquiries that do not become clients | Up to 24 months after our last contact, then deleted or anonymised |
| Client records, contracts and invoices | For the duration of our relationship and up to 8 years afterwards, to meet tax and accounting requirements |
| WhatsApp and email conversations | Up to 24 months after our last contact, unless part of a client record |
| Analytics data (Google Analytics) | Up to 14 months |
| Session recordings (Microsoft Clarity) | As set by Microsoft, currently around 30 days for recordings |
| Marketing preferences and opt-outs | As long as needed to respect your choice |
We may keep information longer where the law requires it or to resolve disputes.
Security
We use reasonable technical and organisational measures to protect personal information, including encrypted connections (HTTPS), access controls and two-factor authentication on our accounts, and limiting access to people who need it. No system is completely secure, so we cannot guarantee absolute security. If a data breach is likely to affect your rights, we will notify you and the relevant authorities as required by law.
7. Your privacy rights
Depending on where you live, you may have some or all of the rights below. To use any of them, email us at hello@krinfy.com. We will respond within the time required by applicable law (usually within 30 days) and may need to verify your identity first. We will not treat you differently for exercising your rights.
Rights available to everyone
- Ask what personal information we hold about you and get a copy
- Ask us to correct inaccurate or incomplete information
- Ask us to delete your information, unless we must keep it by law
- Unsubscribe from marketing messages at any time
- Withdraw consent for cookies and tracking at any time
EEA, UK and Switzerland
In addition, you have the right to restrict processing, to object to processing based on legitimate interests (including direct marketing), and to data portability. You may also lodge a complaint with your local data protection authority, for example the Information Commissioner’s Office (ICO) in the UK.
United States
Residents of California, Colorado, Connecticut, Virginia, Texas and other states with privacy laws may have the right to know the categories and specific pieces of personal information we collect, use and disclose; to delete and correct it; and to opt out of the “sale” or “sharing” of personal information and of targeted advertising. You can opt out by using the “Cookie settings” button on our Cookie Policy page, by enabling Global Privacy Control in your browser, or by emailing us. You may use an authorised agent to make a request on your behalf. If we deny your request, you may appeal by replying to our decision.
Categories collected in the last 12 months: identifiers (name, email, phone, IP address, cookie IDs); commercial information (services requested); internet activity (browsing and interaction data); approximate geolocation; and professional information (business name and role). We use and disclose them for the purposes and recipients in Sections 3 and 5. We do not use or disclose sensitive personal information.
India
Under the DPDP Act, you have the right to access information about your personal data, to correct, complete, update or erase it, to withdraw consent, to have grievances redressed, and to nominate another person to exercise your rights in the event of your death or incapacity. If you are not satisfied with our response, you may approach the Data Protection Board of India.
Other countries
If you live elsewhere (for example, Canada, Australia, the UAE or Singapore), you may have similar rights under your local law. Contact us and we will respect them.
8. Marketing, WhatsApp and children
Marketing messages
If you enquire about our services, we may follow up by email, phone or WhatsApp with information related to your enquiry, such as relevant case studies. Where the law requires consent for marketing, we will ask for it first. You can opt out at any time by clicking “unsubscribe” in any email, replying “STOP” on WhatsApp, or emailing us.
When you message us on WhatsApp, your messages are also handled by WhatsApp (Meta) under WhatsApp’s Privacy Policy. We may use saved replies or automated messages to respond quickly. We will not add you to broadcast lists without your permission.
Children
The Website and our services are intended for businesses and adults. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, contact us and we will delete it.
9. Other important information
Data we handle for our clients
When we run campaigns, websites, CRMs or automations for clients, we may process personal information of our clients’ own customers and leads (for example, leads from a client’s ad campaign). In that case, the client is the controller or data fiduciary and we act as their processor, following their instructions and our agreement with them. If you are a customer of one of our clients, please contact that business directly about your information.
Third-party websites
The Website may link to other websites and platforms, such as our social media pages or client websites. We are not responsible for their privacy practices, so please read their privacy policies.
Changes to this policy
We may update this Privacy Policy from time to time. We will change the “Last updated” date at the top, and where changes are significant, we will give more prominent notice, such as a notice on the Website.
10. Contact us and Grievance Officer
If you have questions about this Privacy Policy, want to exercise your rights, or have a complaint, contact us. In accordance with the Information Technology Act, 2000 and its rules, and the DPDP Act, our Grievance Officer details are below. We aim to acknowledge complaints within 48 hours and resolve them within 30 days.
| Grievance Officer | Krishna Yadav |
|---|---|
| Business | Krinfy Growth Hub |
| Location | Ambegaon, Pune, Maharashtra 411046, India |
| hello@krinfy.com | |
| +91 91756 61345 | |
| Working hours | Monday to Saturday, 10:00 AM to 7:00 PM IST |