Applies to: dgodigital.com, the free growth diagnostic, our newsletter, our free tools, and our email, WhatsApp and call conversations with you. Ads Analyzer (analyzer.dgodigital.com) has its own terms and privacy notice inside the app.
This policy explains what personal data DGo Digital collects, why, who it is shared with, how long it is kept, and the choices and rights you have. We have written it in plain language. If anything is unclear, email us at [email protected].
1. Who we are
DGo Digital is a B2B consultancy based in Mumbai, India.
- Controller (who decides how your data is used): DGo Digital (proprietor: Darpan Kumar, sole proprietorship, Santacruz, Mumbai, Maharashtra 400055, India). DGo Digital is the trading name; Darpan Kumar is the controller of your personal data.
- Address: Santacruz, Mumbai, Maharashtra 400055, India
- Contact person: Darpan Kumar (proprietor). Phone and WhatsApp: +91 91522 73522.
- Contact for privacy questions, requests and complaints: [email protected]. This is also our data protection contact for Singapore and other regions that ask for one.
- Grievance officer (India): Darpan Kumar, [email protected], +91 91522 73522, Santacruz, Mumbai, Maharashtra 400055, India. We acknowledge grievances within 3 business days and answer them within 30 days. If you are not satisfied with our answer, you may complain to the Data Protection Board of India.
When we work for a client under a signed agreement and handle their customers' data, we act as their processor (service provider). Our Data Processing Agreement covers that work, not this policy.
2. What we collect and where it comes from
| Criteria | Examples | Where it comes from |
|---|---|---|
| Contact details | Name, work email, optional website, phone or WhatsApp number if you message us | You, through forms, email, WhatsApp or the scheduler |
| Request details | The goal you chose, ad spend band or company size, timeframe, your message, the market (US, India or global) we infer from your time zone, browser language and the currency you chose, a random reference number for your request, and how we sort the request (book a call now, or reply first) | You, through the diagnostic or contact form |
| Booking details | The time you booked, the call link, notes from the call | You and our scheduler (Cal.com) |
| Communication history | Emails and WhatsApp messages. For newsletter emails you agreed to, whether you opened or clicked them | You and our email provider (Brevo) |
| Consent records | Which choices you made in the cookie banner and on forms, when, whether your browser sent Global Privacy Control, and which version of the wording you saw | Our website. Your cookie choice is kept in your browser; a copy of it is saved with any form you send us |
| Source of your visit | The page you landed on, the referring site and UTM tags. We receive them with a form you submit, so we know which channel brought your request. Between pages, your browser keeps them only if you allow analytics | Your browser |
| Ad click identifiers | The click ID in the link of one of our ads you followed (gclid, gbraid, wbraid, msclkid, fbclid, li_fat_id or rdt_cid) and when you clicked | Your browser, kept only if you allow advertising, and sent to us with a form you submit |
| Usage data | Pages viewed, clicks, scrolls, device and browser type, approximate location (city or country), IP address | Your browser and our tools, only with your consent for anything beyond security and basic site operation |
| Tool answers | Your answers in our free checks and estimator | Kept in your browser. If you allow analytics, an overall score (not your answers) is counted in analytics. Your answers reach us only if you ask us to email you the result |
| Public business information | Your company website, your public LinkedIn profile | Public sources, when we prepare for a call you booked |
| Data | Examples | Where it comes from |
|---|---|---|
| Contact details | Name, work email, optional website, phone or WhatsApp number if you message us | You, through forms, email, WhatsApp or the scheduler |
| Request details | The goal you chose, ad spend band or company size, timeframe, your message, the market (US, India or global) we infer from your time zone, browser language and the currency you chose, a random reference number for your request, and how we sort the request (book a call now, or reply first) | You, through the diagnostic or contact form |
| Booking details | The time you booked, the call link, notes from the call | You and our scheduler (Cal.com) |
| Communication history | Emails and WhatsApp messages. For newsletter emails you agreed to, whether you opened or clicked them | You and our email provider (Brevo) |
| Consent records | Which choices you made in the cookie banner and on forms, when, whether your browser sent Global Privacy Control, and which version of the wording you saw | Our website. Your cookie choice is kept in your browser; a copy of it is saved with any form you send us |
| Source of your visit | The page you landed on, the referring site and UTM tags. We receive them with a form you submit, so we know which channel brought your request. Between pages, your browser keeps them only if you allow analytics | Your browser |
| Ad click identifiers | The click ID in the link of one of our ads you followed (gclid, gbraid, wbraid, msclkid, fbclid, li_fat_id or rdt_cid) and when you clicked | Your browser, kept only if you allow advertising, and sent to us with a form you submit |
| Usage data | Pages viewed, clicks, scrolls, device and browser type, approximate location (city or country), IP address | Your browser and our tools, only with your consent for anything beyond security and basic site operation |
| Tool answers | Your answers in our free checks and estimator | Kept in your browser. If you allow analytics, an overall score (not your answers) is counted in analytics. Your answers reach us only if you ask us to email you the result |
| Public business information | Your company website, your public LinkedIn profile | Public sources, when we prepare for a call you booked |
We do not ask for and do not want sensitive data (health, religion, biometric, financial account details, government ID). Please do not send it to us.
What you must give us. To reply to a request we need your name and work email. The diagnostic form also asks for your main goal, your monthly ad spend band or company size, and when you want to start, so the call can focus on the right problem. The contact form also asks for your message. Everything else on our forms, such as your website, is optional.
3. Why we use your data and our legal bases
| Criteria | Data used | Legal basis (EU and UK) | Basis (India DPDP) |
|---|---|---|---|
| Reply to your request and run the free diagnostic | Contact, request, booking, communication, public business information | Steps you asked for before a contract (Art. 6(1)(b)) | Data you gave us voluntarily for this purpose (s. 7(a)) |
| Send booking confirmations and reminders | Contact, booking | Steps you asked for (Art. 6(1)(b)) | Data you gave us voluntarily for this purpose (s. 7(a)) |
| Send the newsletter | Contact, communication | Consent (Art. 6(1)(a)); you confirm by double opt-in | Consent |
| Know which channel brought a request | Source of your visit, sent with a form | Legitimate interests in knowing which channels bring requests (Art. 6(1)(f)) | Data you gave us voluntarily with the form (s. 7(a)) |
| Measure how the site is used (analytics) | Usage; the source of your visit kept between pages | Consent (Art. 6(1)(a)) | Consent |
| Measure which of our ads bring visitors and requests, and show our ads to people who visited (advertising) | Usage, ad click identifiers | Consent (Art. 6(1)(a)) | Consent |
| Keep the site and forms secure, stop spam and abuse | IP address, browser data, security check results | Legitimate interests in security (Art. 6(1)(f)) | Data you gave us voluntarily when you used the site and forms (s. 7(a)) and legal duties under Indian law |
| Keep proof of consent, defend claims, meet tax and accounting duties | Consent records, communication, client records | Legitimate interests in proving consent, defending claims and meeting Indian tax law (Art. 6(1)(f)) | Compliance with Indian law (s. 7(i)) |
| Purpose | Data used | Legal basis (EU and UK) | Basis (India DPDP) |
|---|---|---|---|
| Reply to your request and run the free diagnostic | Contact, request, booking, communication, public business information | Steps you asked for before a contract (Art. 6(1)(b)) | Data you gave us voluntarily for this purpose (s. 7(a)) |
| Send booking confirmations and reminders | Contact, booking | Steps you asked for (Art. 6(1)(b)) | Data you gave us voluntarily for this purpose (s. 7(a)) |
| Send the newsletter | Contact, communication | Consent (Art. 6(1)(a)); you confirm by double opt-in | Consent |
| Know which channel brought a request | Source of your visit, sent with a form | Legitimate interests in knowing which channels bring requests (Art. 6(1)(f)) | Data you gave us voluntarily with the form (s. 7(a)) |
| Measure how the site is used (analytics) | Usage; the source of your visit kept between pages | Consent (Art. 6(1)(a)) | Consent |
| Measure which of our ads bring visitors and requests, and show our ads to people who visited (advertising) | Usage, ad click identifiers | Consent (Art. 6(1)(a)) | Consent |
| Keep the site and forms secure, stop spam and abuse | IP address, browser data, security check results | Legitimate interests in security (Art. 6(1)(f)) | Data you gave us voluntarily when you used the site and forms (s. 7(a)) and legal duties under Indian law |
| Keep proof of consent, defend claims, meet tax and accounting duties | Consent records, communication, client records | Legitimate interests in proving consent, defending claims and meeting Indian tax law (Art. 6(1)(f)) | Compliance with Indian law (s. 7(i)) |
You can withdraw consent at any time. Withdrawing does not affect what we did before.
4. Analytics, advertising and tag delivery
What runs, and when. Our site runs one cookieless measurement tool for every visitor, Cloudflare Web Analytics, which counts visits and page speed without cookies, stores nothing on your device and does not identify you. Everything else runs only after you choose it in the cookie banner:
- Analytics (if you allow analytics): Google Analytics 4 and Microsoft Clarity. Clarity records how pages are used (clicks, scrolls and page movement) to help us fix design problems. Form fields and the text you type are masked and never recorded.
- Advertising (if you allow advertising): Google Ads, LinkedIn, Meta (Facebook and Instagram) and Reddit, each only while we run ads on that platform. They measure which of our ads bring visitors and requests, and may show our ads to people who visited our site.
How the tools are delivered. Google Analytics and the ad tools load through Cloudflare Zaraz, a tag manager run by Cloudflare on our own domain; no ad platform's script runs on our pages. Google Analytics and Meta receive data from Cloudflare's servers. Google Ads, LinkedIn and Reddit receive a small request directly from your browser. Microsoft Clarity loads from our site only after you allow analytics, and sends its data from your browser to Microsoft. A tool you did not allow receives nothing.
The reference number. When you allow analytics, the lead event we count in Google Analytics carries the same random reference number as your request, so each request is counted once. It contains nothing about you.
Ad click identifiers. If you allowed advertising and arrived through one of our ads, we keep the click identifier from the ad link and send it to us with a form you submit, so we know which ad brought your request. We may later tell the platform that issued it (Google, LinkedIn, Meta or Reddit) that the request became a booked call, a qualified opportunity or a client, using that identifier and the time. We never send your name, email, message or form answers to an ad platform. If you did not allow advertising, or your browser sends GPC, we do not keep the click identifier.
Global Privacy Control. If your browser sends a Global Privacy Control (GPC) signal, we treat it as a request to opt out of sale, sharing and targeted advertising: advertising stays off in that browser, and we show that we have applied it.
Google Consent Mode. We send Google your consent choices for analytics storage, ad storage, ad user data and ad personalization. The three ad values are "granted" only if you allowed advertising and your browser sends no GPC signal; otherwise they stay "denied".
See our Cookie Policy for every cookie and how long it lasts.
6. International transfers
We are based in India, and our providers process data mainly in the United States and the European Union, and on Cloudflare's global network (see the Subprocessors page for each provider). When data from the EU, UK or Switzerland leaves those regions, we rely on the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or an adequacy decision, as offered in each provider's data processing terms. The Google consumer services named in section 5 do not offer those terms. You can ask us for a copy of the relevant safeguards.
7. How long we keep data
| Criteria | How long |
|---|---|
| Diagnostic and contact requests, call notes, CRM record | 24 months after our last contact with you, then deleted at our next quarterly clean-up, unless you become a client |
| Lead alert emails (a copy of your request sent to our inbox) | Deleted with the CRM record at the quarterly clean-up |
| Cal.com bookings | 24 months after the call, deleted at the quarterly clean-up |
| WhatsApp chats | 24 months after the last message, deleted at the quarterly clean-up |
| Email open and click events (newsletter only) | 24 months, or until you unsubscribe |
| Client records | For the length of the engagement and as long as tax and contract law require afterwards (in India, generally 8 years for accounting records) |
| Google Sheets backup of form submissions | 12 months, then deleted automatically |
| Newsletter subscription | Until you unsubscribe. We then keep your email on a suppression list so we never email you again |
| Consent records | For as long as the consent applies, plus 24 months as proof |
| Google Analytics 4 event data | 14 months |
| Microsoft Clarity recordings and heatmaps | As set by Clarity: recordings about 30 days, heatmap data about 13 months |
| Zaraz and tool identifiers in your browser | As listed in the Cookie Policy |
| Ad click identifiers in our records | Deleted with the CRM record and the Sheets backup row they came with |
| Data the ad platforms receive | As set by each platform under its own terms |
| Cookie choices in your browser | 12 months, then we ask again; sooner if the cookie wording changes or we add a new kind of tool |
| Security and access logs | As kept by Cloudflare and our providers. Where Indian law requires a longer period, we keep the relevant logs for that period (for example 180 days under the CERT-In Directions, and one year under the DPDP Rules from May 2027) |
| Data | How long |
|---|---|
| Diagnostic and contact requests, call notes, CRM record | 24 months after our last contact with you, then deleted at our next quarterly clean-up, unless you become a client |
| Lead alert emails (a copy of your request sent to our inbox) | Deleted with the CRM record at the quarterly clean-up |
| Cal.com bookings | 24 months after the call, deleted at the quarterly clean-up |
| WhatsApp chats | 24 months after the last message, deleted at the quarterly clean-up |
| Email open and click events (newsletter only) | 24 months, or until you unsubscribe |
| Client records | For the length of the engagement and as long as tax and contract law require afterwards (in India, generally 8 years for accounting records) |
| Google Sheets backup of form submissions | 12 months, then deleted automatically |
| Newsletter subscription | Until you unsubscribe. We then keep your email on a suppression list so we never email you again |
| Consent records | For as long as the consent applies, plus 24 months as proof |
| Google Analytics 4 event data | 14 months |
| Microsoft Clarity recordings and heatmaps | As set by Clarity: recordings about 30 days, heatmap data about 13 months |
| Zaraz and tool identifiers in your browser | As listed in the Cookie Policy |
| Ad click identifiers in our records | Deleted with the CRM record and the Sheets backup row they came with |
| Data the ad platforms receive | As set by each platform under its own terms |
| Cookie choices in your browser | 12 months, then we ask again; sooner if the cookie wording changes or we add a new kind of tool |
| Security and access logs | As kept by Cloudflare and our providers. Where Indian law requires a longer period, we keep the relevant logs for that period (for example 180 days under the CERT-In Directions, and one year under the DPDP Rules from May 2027) |
8. How we protect data
We use HTTPS everywhere, spam and bot checks on our forms, two-factor sign-in on every account, and secrets kept out of our code. Only our proprietor, Darpan Kumar, can see your request and the records about it in our tools (Brevo, our Google account, Google Analytics, Microsoft Clarity, Cal.com and our ad accounts), and email sent to [email protected] or [email protected] reaches him only. The providers above handle data only as section 5 describes. No system is perfectly secure. If a breach affects your data, we will tell you and the authorities where the law requires it. See our Security Center.
9. Your rights
Wherever you live, you can ask us to:
- tell you what data we hold about you and give you a copy;
- correct it;
- delete it;
- stop sending you marketing (every newsletter email has an unsubscribe link);
- withdraw any consent you gave.
EU, EEA, UK and Switzerland. You also have the right to restrict or object to processing, to data portability, and to complain to your data protection authority (in the UK, the Information Commissioner's Office). You can complain to us first at [email protected]. We acknowledge complaints within 30 days and tell you the outcome.
India (Digital Personal Data Protection Act, 2023). You also have the right to a summary of the data we process and who we shared it with, to have grievances addressed by our grievance officer (section 1), and to nominate a person who can exercise your rights if you die or cannot act. If you are not satisfied with our answer, you can complain to the Data Protection Board of India.
United States (California, Virginia, Colorado, Connecticut, Texas and other states with privacy laws). You also have the right to opt out of the sale or sharing of personal data and of targeted advertising (we never sell data for money, and share it for targeted advertising only if you allow advertising; see Your Privacy Choices), to limit the use of sensitive data (we do not collect any), and not to be treated differently for using your rights. You can use an authorized agent. If we refuse a request, you can appeal by replying to our answer; we answer appeals within 45 days.
Other regions (for example the UAE, Singapore and Australia). You have the rights your local law gives you, and we will honor them.
How to make a request. Email [email protected] with the subject "Privacy request". We may ask you to confirm your email address so we only give data to the right person. We reply within 30 days (45 days where US state law allows, with notice if we need more time). There is no charge.
India notice
This is the short notice our diagnostic and contact forms show, word for word.
What we collect: your name, work email, the answers in this form, your website if you give it, the market we infer from your time zone and language, your cookie choice, the page and link that brought you here, and the ad click ID in that link if you allowed advertising. Why: to reply, arrange your diagnostic and send what you asked for. Your rights: see, correct or delete your data, withdraw consent, nominate someone, and complain to our grievance officer at [email protected] or to the Data Protection Board of India.
Our grievance officer and how to reach them are in section 1. Your full rights under the Digital Personal Data Protection Act, 2023, and how to use them, are in section 9.
10. Emails and WhatsApp
- Replies to your request, booking confirmations and reminders are service messages. You get them because you asked for a diagnostic or booked a call. They carry no marketing content and no open or click tracking.
- Follow-up after your diagnostic (for example, whether you want a proposal) comes from your DGo strategist as a one-to-one email. Tell us to stop and we will not follow up again.
- The newsletter is sent only if you opted in and confirmed by clicking the link in our confirmation email. We see whether you open or click it, to know which topics help; you can unsubscribe at any time. Each one says who we are, includes our postal address, and has a one-click unsubscribe link that works within 10 business days at most (usually at once).
- WhatsApp: we message you on WhatsApp only if you message us first or ask us to. Tell us to stop and we will not message you again.
- We do not buy email lists.
11. Children
Our site and services are for business professionals aged 18 or over. We do not knowingly collect data from anyone under 18. If you believe a child has sent us data, contact us and we will delete it.
12. Changes to this policy
When we change this policy, we update the date at the top. If the change affects your consent choices, the cookie banner asks you again. For important changes, we also email people on our lists.
13. Contact
Questions, requests or complaints: [email protected], or write to DGo Digital, Santacruz, Mumbai, Maharashtra 400055, India. Grievance officer for India: see section 1.