Privacy Policy

Vision Wings Marketing

Effective Date: 03 August 2026 | Last Updated: 03 August 2026

1. Introduction

This Privacy Policy explains how Vision Wings Marketing ("Vision Wings", "we", "us", "our"), collects, uses, stores, shares and protects personal data when you visit www.visionwingsmarketing.com (the "Website"), create an account, submit an enquiry, or engage our marketing services.

We process personal data in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules"). Where we serve clients or website visitors in the European Economic Area or the United Kingdom, we additionally apply the standards of the General Data Protection Regulation (GDPR).

By using the Website or engaging our services, you acknowledge that you have read and understood this Policy.

2. Who We Are (Data Fiduciary)

For the purposes of the DPDP Act we act as a Data Fiduciary in relation to data we collect for our own purposes (enquiries, accounts, marketing). Where we process personal data on behalf of a client — for example, running that client's advertising accounts or handling their customer enquiry lists — we act as a Data Processor, and the client remains the Data Fiduciary.

3. Personal Data We Collect

A. Data you give us directly

• Enquiry and contact forms: name, business name, email address, phone number, project description, budget indication.
• Account registration (Login area): name, email address, password (stored only in hashed form), account preferences, and any profile details you add.
• Client engagement data: billing name and address, GSTIN, PAN (where required for TDS or invoicing), bank remittance details, signed agreements and correspondence.
• Content you supply for campaigns: brand assets, product photography, copy, customer lists, access credentials to your own advertising, analytics or social accounts.
• Applications and enquiries by email, WhatsApp or phone.

B. Data collected automatically

• IP address, approximate location derived from it, browser type and version, device type, operating system, referring URL, pages viewed, time on page, and click behaviour.
• Cookies and similar technologies, described in our separate [Cookie Policy](/cookies).

C. Data from third parties

• Analytics and advertising platforms (Google Analytics, Google Ads, Meta), where you have consented to their tracking.
• Publicly available business information used for prospecting and account research.

D. Sensitive personal data

We do not seek sensitive personal data such as health information, biometric data, or caste, religious or political affiliation. Financial information (bank account or payment card details) is treated as Sensitive Personal Data or Information under the SPDI Rules and is handled only for payment and accounting purposes. Do not send card numbers, CVV, OTPs or passwords to us by email, WhatsApp or any form on the Website.

4. Why We Process Your Data, and On What Basis

We do not sell personal data. We do not use client customer lists for our own marketing.

5. Sharing and Disclosure

We share personal data only with:

• Service providers and sub-processors that support our operations — website hosting and deployment, email delivery, cloud storage, analytics, payment gateways, accounting software, CRM tools and advertising platforms. Each is bound by contract to process data only on our instructions.
• Professional advisers — chartered accountants, auditors and legal counsel, under confidentiality.
• Government or regulatory authorities, where disclosure is required by Indian law, a court order, or a valid request from a law enforcement agency.
• A successor entity, in the event of a merger, acquisition or transfer of business, with notice to you.

A current list of sub-processors is available on written request to info.visionwings@gmail.com.

6. Cross-Border Transfers

Some of our service providers store data on servers outside India. Where personal data is transferred outside India, we do so in accordance with Section 16 of the DPDP Act and only to countries not restricted by the Central Government, and we require the recipient to apply protections equivalent to those described in this Policy. For EEA/UK data, we rely on Standard Contractual Clauses or an adequacy decision.

7. Retention

We retain personal data only as long as necessary for the purpose it was collected:

• Unconverted enquiries: 24 months from last contact.
• Client records, contracts and campaign deliverables: for the duration of the engagement plus 3 years.
• Invoices, tax and accounting records: 8 years, as required under the Income-tax Act, 1961 and GST legislation.
• Website analytics data: as configured in the relevant platform, typically 14 to 26 months.
• Account data: until you delete your account, plus 90 days in backup.

After these periods, data is deleted or irreversibly anonymised.

8. Your Rights

Subject to the DPDP Act and applicable law, you may:

• Access a summary of the personal data we hold about you and the processing we carry out.
• Correct or complete inaccurate or outdated data.
• Erase data where it is no longer required for the purpose it was collected and no legal retention obligation applies.
• Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal. Withdrawal may mean we can no longer provide certain services.
• Nominate another individual to exercise your rights in the event of death or incapacity.
• Grievance redressal — raise a complaint with our Grievance Officer before approaching the Data Protection Board of India.

To exercise any right, write to info.visionwings@gmail.com with enough detail to identify you. We respond within 30 days. There is no charge for a reasonable request.

9. Security

We maintain reasonable security practices proportionate to the nature of the data we hold, including HTTPS/TLS encryption in transit, hashed password storage, role-based access control, restricted administrative access, and periodic review of third-party access. Client platform credentials are stored in an encrypted password manager and never shared over unencrypted channels.

No system is completely secure. If a personal data breach occurs, we will notify the Data Protection Board of India and each affected Data Principal in the manner and within the timelines prescribed under the DPDP Act.

10. Children

The Website and our services are directed at businesses and are not intended for individuals under 18. We do not knowingly process the personal data of a child, and we do not undertake tracking, behavioural monitoring or targeted advertising directed at children, as prohibited by Section 9 of the DPDP Act. If you believe a child has provided us data, write to us and we will delete it.

11. Third-Party Links

The Website links to third-party sites and platforms, including client websites, social media profiles and hosted video. We do not control those sites and are not responsible for their privacy practices. Review their policies separately.

12. Changes to This Policy

We may update this Policy to reflect changes in law or our operations. The "Last Updated" date above will change, and material changes will be notified by email to registered account holders or by prominent notice on the Website.

13. Contact and Grievance Redressal

Grievance Officer: Vision Wings Grievance Desk

Email: info.visionwings@gmail.com

Address: Kandawa, Varanasi, Uttar Pradesh

Phone: +91 8081952359

Response time: acknowledgement within 24 hours; resolution within 30 days.

If you are not satisfied with our response, you may escalate to the Data Protection Board of India under the DPDP Act, 2023.