Last updated: 26 September 2026
Krinfy Growth Hub (“Krinfy”, “we”, “us”, “our”) is a digital marketing agency based in Pune, India. We build websites, run advertising campaigns and set up business automation for our clients.
This Privacy Policy explains what personal information we collect when you visit https://krinfy.com (the “Website”), contact us, book a call or work with us, how we use it, who we share it with, and the choices and rights you have. It applies to visitors and prospective and current clients worldwide.
For the purposes of data protection laws, including the EU and UK General Data Protection Regulation (GDPR) and India’s Digital Personal Data Protection Act, 2023 (DPDP Act), Krinfy is the controller (or data fiduciary) of the personal information described in this policy.
Detail | Information |
|---|---|
Legal name | Krinfy Growth Hub, |
Address | Blue Spring Society, Near Telco Colony, Ambegaon, Pune, Maharashtra, India. 411046 |
Phone / WhatsApp |
This policy should be read together with our Cookie Policy and Terms and Conditions.
Information you give us
Where | What we collect |
|---|---|
Enquiry and “Request a Plan” forms | Name, email address, phone number, business name, business type, website, goals, budget range, and anything you write in your message |
WhatsApp, phone and email | Your name, number or email address, and the content of your messages |
Booking a call | Name, email, phone, chosen time slot and any notes you add |
Free audit requests | Your website or social media links and the details you share |
Working with us as a client | Contact details of your team, billing and tax details (such as GST number), and account access you choose to grant us |
Information collected automatically
When you visit the Website, we and our analytics and advertising partners collect information through cookies, pixels and similar technologies (see Section 4), including:
Information from third parties
We may receive information from advertising platforms (such as Google and Meta) about how our ads performed, and from public sources such as your business website or LinkedIn profile when you enquire about our services.
We do not intentionally collect sensitive personal information, such as health, financial account numbers, religious beliefs or biometric data. Please do not send it to us.
We use personal information only for the purposes below. Where GDPR or UK GDPR applies, the table also shows our legal basis. Under India’s DPDP Act, we process personal data on the basis of your consent or for legitimate uses permitted by law.
Purpose | Legal basis (GDPR / UK GDPR) |
|---|---|
Responding to enquiries, sending the growth plan or audit you requested, and booking calls | Steps taken at your request before entering a contract; legitimate interests |
Providing our services, managing projects, invoicing and client support | Performance of a contract |
Following up on enquiries and sending relevant case studies or updates | Legitimate interests (business-to-business marketing) or consent, where required |
Measuring Website performance and understanding how visitors use it (Google Analytics, Microsoft Clarity) | Consent |
Measuring and improving our advertising, including showing our ads to people who visited the Website (Google tag, Meta Pixel) | Consent |
Keeping the Website and our systems secure and preventing fraud or misuse | Legitimate interests |
Complying with tax, accounting and other legal obligations | Legal obligation |
Where we rely on legitimate interests, we have balanced our interest in running and growing our business against your rights, and you can object at any time (see Section 7). Where we rely on consent, you can withdraw it at any time; this does not affect processing already carried out.
We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.
We use cookies, pixels and similar technologies to run the Website, understand how it is used and measure our advertising. Our Cookie Policy lists each cookie, its purpose and how long it lasts.
Technology | Provider | What it does | Provider’s privacy information |
|---|---|---|---|
Google tag (gtag.js) and Google Analytics 4 | Google LLC / Google Ireland Ltd | Measures visits, traffic sources and actions such as form submissions; supports Google Ads conversion measurement | |
Microsoft Clarity | Microsoft Corporation | Records anonymised session replays and heatmaps (clicks, scrolls, mouse movements) to help us improve the Website. Clarity masks text you type in form fields by default | |
Meta Pixel | Meta Platforms, Inc. / Meta Platforms Ireland Ltd | Measures the results of our Facebook and Instagram ads and helps us show ads to people who visited the Website |
Your choices
We do not sell your personal information for money. We share it only with the parties below, and only as needed for the purposes in Section 3.
Recipient | Purpose |
|---|---|
Zoho Corporation (Zoho Bigin CRM, booking and email) | Storing enquiries and client records, booking calls, sending follow-up emails |
Make (Celonis) or similar integration tools | Moving form submissions securely between our Website and CRM |
Meta (WhatsApp Business) | Messaging with you on WhatsApp |
Google, Microsoft and Meta | Analytics and advertising measurement, as described in Section 4 |
Hostinger | Hosting the Website and its data |
Email and cloud storage providers (such as Google Workspace or Gmail) | Business communication and document storage |
Payment providers (such as Razorpay) | Processing client payments |
Professional advisers (accountants, lawyers, auditors) | Legal, tax and accounting obligations |
Authorities, courts or regulators | When required by law or to protect our rights, property or safety |
A buyer or successor business | If Krinfy is involved in a merger, acquisition or sale of assets |
Our service providers process personal information on our instructions and are required to keep it confidential and secure.
Note for US residents: Allowing Google and Meta to collect information through cookies and pixels to show you personalised ads may be considered “selling” or “sharing” personal information, or “targeted advertising”, under some US state privacy laws. You can opt out as described in Sections 4 and 7.
International transfers
Krinfy is based in India, and our service providers may store or process information in India, the United States, the European Union or other countries. These countries may have different data protection laws from yours. When we transfer personal information from the EEA, UK or Switzerland to countries without an adequacy decision, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (and the UK Addendum), or on our providers’ certifications under frameworks such as the EU–US Data Privacy Framework, where available.
How long we keep information
Information | Retention period |
|---|---|
Enquiries that do not become clients | Up to 24 months after our last contact, then deleted or anonymised |
Client records, contracts and invoices | For the duration of our relationship and up to 8 years afterwards, to meet tax and accounting requirements |
WhatsApp and email conversations | Up to 24 months after our last contact, unless part of a client record |
Analytics data (Google Analytics) | Up to 14 months |
Session recordings (Microsoft Clarity) | As set by Microsoft, currently around 30 days for recordings |
Marketing preferences and opt-outs | Kept as long as needed to respect your choice |
We may keep information longer where the law requires it or to resolve disputes.
Security
We use reasonable technical and organisational measures to protect personal information, including encrypted connections (HTTPS), access controls and two-factor authentication on our accounts, and limiting access to people who need it. No system is completely secure, so we cannot guarantee absolute security. If a data breach is likely to affect your rights, we will notify you and the relevant authorities as required by law.
Depending on where you live, you may have some or all of the rights below. To use any of them, email us at hello@krinfy.com. We will respond within the time required by applicable law (usually within 30 days) and may need to verify your identity first. We will not treat you differently for exercising your rights.
Rights available to everyone
EEA, UK and Switzerland
In addition, you have the right to restrict processing, to object to processing based on legitimate interests (including direct marketing), and to data portability. You may also lodge a complaint with your local data protection authority, for example the Information Commissioner’s Office (ICO) in the UK.
United States (including California, Colorado, Connecticut, Virginia, Texas and other states with privacy laws)
You may have the right to know the categories and specific pieces of personal information we collect, use and disclose; to delete and correct it; and to opt out of the “sale” or “sharing” of personal information and of targeted advertising. You can opt out by using the “Cookie settings” link in the Website footer, by enabling Global Privacy Control in your browser, or by emailing us. You may use an authorised agent to make a request on your behalf. If we deny your request, you may appeal by replying to our decision.
Categories collected in the last 12 months: identifiers (name, email, phone, IP address, cookie IDs); commercial information (services requested); internet activity (browsing and interaction data); approximate geolocation; and professional information (business name and role). We use and disclose them for the purposes and recipients in Sections 3 and 5. We do not use or disclose sensitive personal information.
India
Under the DPDP Act, you have the right to access information about your personal data, to correct, complete, update or erase it, to withdraw consent, to have grievances redressed, and to nominate another person to exercise your rights in the event of your death or incapacity. If you are not satisfied with our response, you may approach the Data Protection Board of India.
Other countries
If you live elsewhere (for example, Canada, Australia, the UAE or Singapore), you may have similar rights under your local law. Contact us and we will respect them.
Marketing messages
If you enquire about our services, we may follow up by email, phone or WhatsApp with information related to your enquiry, such as relevant case studies. Where the law requires consent for marketing, we will ask for it first. You can opt out at any time by clicking “unsubscribe” in any email, replying “STOP” on WhatsApp, or emailing us.
When you message us on WhatsApp, your messages are also handled by WhatsApp (Meta) under WhatsApp’s Privacy Policy. We may use saved replies or automated messages to respond quickly. We will not add you to broadcast lists without your permission.
Children
The Website and our services are intended for businesses and adults. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, contact us and we will delete it.
Data we handle for our clients
When we run campaigns, websites, CRMs or automations for clients, we may process personal information of our clients’ own customers and leads (for example, leads from a client’s ad campaign). In that case, the client is the controller or data fiduciary and we act as their processor, following their instructions and our agreement with them. If you are a customer of one of our clients, please contact that business directly about your information.
Third-party websites
The Website may link to other websites and platforms, such as our social media pages or client websites. We are not responsible for their privacy practices, so please read their privacy policies.
Changes to this policy
We may update this Privacy Policy from time to time. We will change the “Last updated” date at the top, and where changes are significant, we will give more prominent notice, such as a notice on the Website.
If you have questions about this Privacy Policy, want to exercise your rights, or have a complaint, contact us. In accordance with the Information Technology Act, 2000 and its rules, and the DPDP Act, our Grievance Officer details are below. We aim to acknowledge complaints within 48 hours and resolve them within 30 days.
Detail | Information |
|---|---|
Grievance Officer | Krishna Yadav |
Business | Krinfy Growth Hub |
Address | Blue Spring Society, Near Telco Colony, Ambegaon, Pune, Maharashtra, India. 411046 |
Working hours | [Monday to Saturday, 10:00 to 18:00 IST] |
