Call: +91-96741-50349
Privacy Policy
Last updated: 30 November, 2025
Data Controller
Nabina Ghosh is the Data Fiduciary (as defined under the Digital Personal Data Protection Act, 2023) responsible for the personal data collected through this website. For the purposes of international data protection frameworks, Nabina Ghosh also serves as the Data Controller.
Business Name: Nabina Ghosh, Freelance Creative Director, Copywriter, & 3D Artist
Address: 44, Kabir Road, Kolkata, West Bengal, India
Email: info@nabinaghosh.com
Phone: +91-96741-50349
About This Policy
This Privacy Policy explains how personal data is collected, used, stored, and protected when you visit nabinaghosh.com (the “Website”) or engage with creative services offered through it. This policy applies to all visitors, prospective clients, and individuals who interact with the Website.
This policy is designed to comply with the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Digital Personal Data Protection Rules, 2025 (DPDP Rules) of India, as well as international best practices including principles aligned with the EU General Data Protection Regulation (GDPR) for visitors from those jurisdictions.
What Personal Data We Collect
Data You Provide Directly
Contact Form Submissions: When you use the contact form to enquire about services, we collect your name, email address, phone number (if provided), and the content of your message. This may include details about your business, project requirements, and budget.
Blog Comments: If you leave a comment on a blog post, we collect your name, email address, website URL (if provided), and the comment content. Your IP address and browser user agent are also collected for spam prevention.
Email Correspondence: If you email us directly, we retain the correspondence including your email address and any information you choose to share.
Data Collected Automatically
Analytics Data: We use Google Analytics to understand how visitors interact with the Website. This service collects data such as pages visited, time spent on pages, referral sources, device type, browser type, and approximate geographic location (country/city level). This data is processed in aggregate form and does not directly identify individuals.
Cookies: The Website uses cookies for functionality (such as remembering comment form details) and analytics. See the Cookies section below for details.
Server Logs: Our web hosting provider automatically collects standard server log data including IP addresses, browser type, referring pages, and timestamps. This data is used for security monitoring and troubleshooting.
Purpose and Legal Basis for Processing
Under the DPDP Act, 2023, personal data may be processed based on consent or for certain legitimate uses. Under GDPR (for EU visitors), processing requires a lawful basis. The following explains how and why we process your data:
Responding to Enquiries: When you submit a contact form or email us, we process your data to respond to your enquiry and discuss potential project engagements. Legal basis: Consent (you voluntarily provide this information) and legitimate interest (responding to business enquiries).
Providing Services: If you engage our creative services, we process data necessary to fulfil the contract. Legal basis: Performance of a contract.
Website Analytics: We analyse aggregated visitor data to understand Website performance and improve user experience. Legal basis: Legitimate interest in understanding and improving our Website.
Blog Comments: Comments are displayed publicly to facilitate discussion. Legal basis: Consent (you choose to submit a public comment).
Security and Spam Prevention: IP addresses and user agents are processed to protect the Website from spam, abuse, and security threats. Legal basis: Legitimate interest in maintaining Website security.
Client Confidentiality
As a creative professional serving agencies and brands, we understand the sensitive nature of project discussions. Information shared during service enquiries—including project briefs, brand strategies, campaign concepts, and business information—is treated as strictly confidential. Such information is never shared publicly, used in portfolio materials, or disclosed to third parties without explicit written permission from the client.
Portfolio work displayed on this Website has been published with permission from respective clients or represents work from completed campaigns that are already in the public domain.
Who We Share Data With
We do not sell, rent, or trade your personal data. Data may be shared with the following categories of recipients only as necessary:
Web Hosting Provider: Our hosting provider processes data as required to operate the Website and maintain server infrastructure.
Google Analytics: Aggregated, anonymised analytics data is processed by Google. Google operates under its own privacy policy. You can opt out of Google Analytics tracking using the Google Analytics Opt-out Browser Add-on.
Spam Detection Services: Comment data may be checked through automated spam detection services to protect the Website from abuse.
Legal Requirements: We may disclose data if required by law, court order, or government authority, or to protect our legal rights.
International Data Transfers
Some of our service providers (such as Google) may process data on servers located outside India. Where data is transferred internationally, we ensure that appropriate safeguards are in place consistent with applicable data protection laws. For EU visitors, transfers are made to countries with adequate data protection standards or under Standard Contractual Clauses.
How Long We Keep Your Data
Contact Form Submissions: Retained for as long as necessary to respond to your enquiry and for a reasonable period thereafter to address follow-up questions. If no engagement results, data is typically deleted within 24 months.
Client Project Data: Retained for the duration of the project and for 7 years thereafter as required for tax, legal, and accounting purposes under Indian law.
Blog Comments: Retained indefinitely unless you request deletion, as they form part of the public discussion on the Website.
Analytics Data: Google Analytics data is retained according to Google’s standard retention settings (typically 14 months) before automatic deletion.
Server Logs: Typically retained for 30-90 days for security purposes.
Cookies
Cookies are small text files stored on your device when you visit a website. This Website uses the following types of cookies:
Essential Cookies: Required for basic Website functionality, such as session management. These cannot be disabled.
Functional Cookies: Remember your preferences, such as comment form details. These expire after one year.
Analytics Cookies: Set by Google Analytics to help us understand Website usage. These collect data anonymously.
You can control cookies through your browser settings. Disabling cookies may affect Website functionality. For more information about cookies and how to manage them, visit allaboutcookies.org.
Embedded Content
Pages on this Website may include embedded content from third-party platforms such as YouTube, Vimeo, Behance, or social media networks. Embedded content behaves as if you visited that third-party website directly—these platforms may collect data about you, use cookies, and track your interaction. Please review the privacy policies of these platforms for details on their data practices.
Your Rights
Under the DPDP Act, 2023 and applicable international frameworks, you have the following rights regarding your personal data:
Right to Access: You may request a summary of personal data we hold about you and how it is being processed.
Right to Correction: You may request correction of inaccurate or incomplete personal data.
Right to Erasure: You may request deletion of your personal data, subject to legal retention requirements.
Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time. This does not affect the lawfulness of processing before withdrawal.
Right to Grievance Redressal: If you are dissatisfied with how we handle your data, you may contact us directly. If your concern is not resolved, you have the right to register a complaint with the Data Protection Board of India once operational, or with the relevant supervisory authority in your jurisdiction.
To exercise any of these rights, please contact us at info@nabinaghosh.com. We will respond to requests within 30 days.
Data Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:
HTTPS encryption for all data transmitted between your browser and our Website; secure hosting infrastructure with regular security updates; access controls limiting who can view personal data; and regular review of data processing practices.
In the event of a personal data breach that poses a risk to your rights, we will notify the Data Protection Board of India (once operational) and affected individuals as required under the DPDP Act, 2023.
Children’s Data
This Website is not directed at children under 18 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately so we can delete it.
Changes to This Policy
This Privacy Policy may be updated periodically to reflect changes in our practices, legal requirements, or regulatory guidance. The “Last updated” date at the top indicates the most recent revision. We encourage you to review this policy regularly. Continued use of the Website after changes constitutes acceptance of the updated policy.
Governing Law
This Privacy Policy is governed by the laws of India, including the Digital Personal Data Protection Act, 2023, and the Information Technology Act, 2000 (to the extent applicable during the transition period). Any disputes shall be subject to the exclusive jurisdiction of the courts in Kolkata, West Bengal, India.
Contact Us
If you have questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how your data is handled, please contact us:
Email: info@nabinaghosh.com
Phone: +91-96741-50349
Address: 44, Kabir Road, Kolkata, West Bengal, India
We aim to respond to all enquiries within 30 days.