Privacy
Policy

STACK-UP Digital Studio ("STACK-UP", "we", "us", "our") is a digital product agency based in Dehradun and Greater Noida, India. We provide UI/UX design, web development, app development, AI automation, video editing, graphic design, and digital marketing services to clients across India and internationally.

For the purposes of applicable data protection laws, STACK-UP is the data controller responsible for personal information collected through our website (stackup.digital) and in the course of providing our services.

We collect only the information necessary to provide our services and communicate with you effectively. This includes:

We do not collect sensitive personal data such as biometric data, health information, political opinions, religious beliefs, or racial origin.

We collect information through the following means:

• Contact Forms: When you fill out a form on our website requesting a quote, consultation, or general enquiry.
• WhatsApp & Email: When you contact us directly through WhatsApp, email, or any other messaging platform.
• Project Onboarding: When you share project details, files, credentials, or briefs during an active engagement.
• Payments: When payment records are created through our agreed payment methods.
• Website Analytics: Automatically collected data when you browse our website (cookies, IP address, device information). See Section 8 for details.
• Social Media: If you contact or follow us on Instagram or LinkedIn, we may collect your public profile data in the context of that interaction.

We use the information we collect for legitimate business purposes only:

• To communicate with you about enquiries, quotes, and project updates
• To deliver the agreed services as outlined in project agreements
• To process and record payments for services rendered
• To send project-related updates, feedback requests, and milestone notifications
• To improve our website, services, and client experience
• To maintain business records and comply with legal obligations
• To protect against fraud, abuse, or unauthorised access
• To showcase completed work in our portfolio (with your consent or as outlined in our Terms)

• We do not sell your personal data to any third party
• We do not use your data for unsolicited marketing without your consent
• We do not use your data for automated decision-making that significantly affects you
• We do not share your project details or business information with competitors

Where applicable under data protection laws (including GDPR for EU/UK clients), our legal basis for processing your personal data is:

• Contractual Necessity: Processing required to fulfil our service agreements with you (e.g., delivering a website or app you have commissioned).
• Legitimate Interests: Processing for purposes such as business record-keeping, portfolio showcasing, analytics, and fraud prevention — balanced against your rights and interests.
• Legal Obligation: Processing required to comply with applicable laws, regulations, or court orders.
• Consent: Where you have explicitly provided consent, such as subscribing to updates or agreeing to cookies. You may withdraw consent at any time.

We take data sharing seriously. Your information is only shared in the following limited circumstances:

• Team Members: Your project data may be shared internally with STACK-UP team members directly involved in your project on a need-to-know basis.
• Essential Service Providers: We may use third-party tools such as Google Workspace, WhatsApp Business, payment processors, and cloud storage. These providers are bound by their own privacy policies and cannot use your data for other purposes.
• Legal Requirements: We may disclose your information if required to do so by law, court order, or government authority.
• Business Transfer: In the event of a merger, acquisition, or sale of STACK-UP, your data may be transferred as part of that transaction. You will be notified if this occurs.

Your data is stored securely using industry-standard tools and practices:

• Project files and communications are stored on encrypted cloud services (Google Drive, email servers).
• Access to client data is restricted to authorised STACK-UP personnel only.
• We use HTTPS encryption on our website to protect data in transit.
• Payment information is processed through trusted payment gateways; we do not store card numbers or banking passwords.
• We conduct periodic reviews of our data storage and access practices.

Our website may use cookies and similar tracking technologies to enhance your browsing experience and help us understand how visitors use the site.

• Essential Cookies: Required for basic website functionality (e.g., remembering your theme preference). Cannot be disabled.
• Analytics Cookies: Help us understand how visitors interact with our website (e.g., which pages are most visited). This data is aggregated and anonymous.
• Preference Cookies: Remember your settings, such as dark/light theme preference.

When you first visit our website, you may see a cookie notice. You can manage your cookie preferences at any time through your browser settings.

To opt out of analytics tracking, you can use browser extensions such as uBlock Origin or adjust your browser's privacy settings. Disabling cookies may affect website functionality.

Depending on your location, you may have certain rights regarding your personal data. We respect and honour these rights:

To exercise any of these rights, please contact us at stackupservice@gmail.com. We will respond within 30 days. We may need to verify your identity before processing your request.

Our services are intended for businesses and individuals who are at least 18 years of age. STACK-UP does not knowingly collect personal data from children under the age of 18.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at stackupservice@gmail.com. We will promptly delete any such information from our records.

Our website may contain links to third-party websites, social media platforms (Instagram, LinkedIn, WhatsApp), or tools. These links are provided for your convenience.

STACK-UP has no control over the content or privacy practices of third-party websites. We are not responsible for their privacy policies or how they handle your data. We encourage you to review the privacy policy of any third-party site you visit.

• Clicking on WhatsApp links opens WhatsApp's platform, governed by Meta's Privacy Policy.
• Social media profile links are governed by the respective platform's terms.
• Payment links redirect to third-party payment processors with their own policies.

We implement appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, disclosure, alteration, or destruction.

• HTTPS encryption on all website pages
• Password-protected accounts and two-factor authentication on internal tools
• Access controls limiting data to authorised personnel only
• Regular review of storage and access practices
• Secure deletion of project data upon client request after project completion

However, no method of internet transmission or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security. We encourage clients to also take appropriate measures on their end.

STACK-UP is based in India. If you are located in the European Union, United Kingdom, United States, or any other country outside India, your personal data will be transferred to and processed in India.

By using our services or submitting your information, you consent to this transfer. We take steps to ensure your data receives an adequate level of protection wherever it is processed, consistent with this Privacy Policy.

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law:

• Active Client Data: Retained for the full duration of the project and ongoing business relationship.
• Payment Records: Retained for a minimum of 7 years as required by Indian financial regulations.
• Project Files & Communications: Retained for up to 2 years after project completion, after which they are securely deleted unless otherwise agreed.
• Website Analytics: Aggregated and anonymised data may be retained indefinitely as it cannot identify individuals.
• Enquiry Data (Non-Clients): If you contacted us but did not become a client, your data is retained for up to 12 months, then deleted.

You may request early deletion of your data at any time, subject to our legal retention obligations.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations.

When we make significant changes, we will update the "Effective Date" at the top of this page. For material changes that significantly affect how we use your data, we will make reasonable efforts to notify active clients directly via email.

We encourage you to review this policy periodically. Continued use of our website or services after any changes constitutes your acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact our team. We take all privacy enquiries seriously and will respond within 30 days.