GDPR Compliance Policy
Last Updated: 30-06-2025
Subset Digital Pvt. Ltd.
Registered Office: B-59, Sector-105, Noida, Uttar Pradesh-201306
Email: gopal@subsetdigital.com
1. Introduction
Subset Digital Pvt. Ltd. (“Subset Digital,” “we,” “our,” or “us”) is committed to protecting the privacy and personal data of all individuals whose information we process in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”).
This GDPR Policy outlines how we collect, use, process, store, and protect personal data of users, partners, clients, and visitors (“you” or “data subject”) in connection with our digital marketing, advertising, and technology services.
2. Scope
This policy applies to all personal data processed by Subset Digital within the scope of its operations, including data collected via our websites, platforms, campaigns, and communications related to our services.
It covers both personal data we collect directly and data processed on behalf of our clients or partners.
3. Data We Collect
Depending on your interaction with us, we may collect the following categories of personal data:
Identity data: name, company name, position or role.
Contact data: email address, phone number, business address.
Technical data: IP address, browser type, operating system, device identifiers, cookies.
Usage data: website interactions, preferences, campaign engagement data.
Transactional data: billing details, financial information (where applicable).
4. Legal Basis for Processing
We process personal data only when one or more of the following legal bases apply under the GDPR:
Consent: when you have explicitly consented to data processing for specific purposes.
Contractual necessity: to perform obligations under a contract with you or to take steps at your request prior to entering into a contract.
Legal obligation: where processing is necessary for compliance with applicable laws.
Legitimate interests: for purposes such as improving our services, preventing fraud, or conducting business operations, provided such interests do not override your rights.
5. Use of Personal Data
We may use your personal data to:
Provide and manage our services and partnerships.
Communicate regarding offers, campaigns, or account information.
Improve our technology platforms and customer experience.
Comply with legal obligations and respond to lawful requests.
Prevent, detect, and investigate fraudulent or unauthorized activity.
6. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or to comply with legal, accounting, or reporting obligations.
Once retention is no longer required, data will be securely deleted, anonymized, or archived.
7. Data Sharing and Transfer
We do not sell personal data.
We may share limited data with trusted third-party service providers, partners, or affiliates strictly for operational purposes under data processing agreements ensuring compliance with GDPR.
If personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards, such as Standard Contractual Clauses (SCCs), are in place.
8. Data Subject Rights
Under GDPR, you have the following rights regarding your personal data:
Right to access – Request a copy of your personal data held by us.
Right to rectification – Request correction of inaccurate or incomplete data.
Right to erasure (“right to be forgotten”) – Request deletion of your data under certain conditions.
Right to restrict processing – Request limitation on how your data is processed.
Right to data portability – Receive your data in a structured, commonly used, and machine-readable format.
Right to object – Object to processing based on legitimate interests or direct marketing.
Right to withdraw consent – Withdraw your consent at any time without affecting the lawfulness of prior processing.
To exercise these rights, please contact us at gopal@subsetdigital.com with proof of identity. We will respond within 30 days as required under GDPR.
9. Data Security
Subset Digital implements appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.
This includes encryption, access controls, regular audits, and employee training on data protection.
10. Cookies and Tracking
Our website and platforms may use cookies and similar tracking technologies to enhance user experience and analyze performance.
Users can manage or disable cookies through their browser settings. For more details, please refer to our Cookie Policy.
11. Data Protection Officer (DPO)
For any GDPR-related inquiries, complaints, or requests, please contact:
Data Protection Officer
Subset Digital Pvt. Ltd.
B-94, Sector-105, Noida, Uttar Pradesh-201306
Email: gopal@subsetdigital.com
12. Changes to This Policy
We may update this GDPR Policy periodically to reflect changes in legal, operational, or technological requirements.
The updated version will always include the “Last Updated” date and be published on our official website.
13. Contact Information
If you have any questions about this GDPR Policy or your personal data rights, please contact us at:
Subset Digital Pvt. Ltd.
Email: gopal@subsetdigital.com
Address: B-94, Sector-105, Noida, Uttar Pradesh-201306