Privacy Policy — Get N Dial Info Service Pvt Ltd
Last updated:
This Privacy Policy explains how Get N Dial Info Service Pvt Ltd ("Get N Dial," "we," "us") collects, uses, stores, shares, and protects your personal data when you visit getndial.com, contact us, or use any of our services. It is written to comply with India's Digital Personal Data Protection Act, 2023 (the "DPDP Act"). It is also written to be understandable. If anything in here is unclear, email our Grievance Officer at the address in section 11.
1. Who we are
Get N Dial Info Service Pvt Ltd is a private limited company incorporated under the Companies Act, 2013, with its registered office at:
Get N Dial Info Service Pvt Ltd2nd floor, Karimbanakkal Building,
Thrissur Road, Edappal,
Malappuram, Kerala 679576, India
Corporate Identification Number (CIN): U74300KL2014PTC036101
GSTIN: 32AAFCG5839D1ZT
For the purposes of the DPDP Act, Get N Dial is the Data Fiduciary in relation to personal data you share with us.
2. The data we collect
2.1 Information you give us directly
| Source | Data we collect |
|---|---|
| Contact form on getndial.com | Name, phone number, email (optional), service of interest, message text |
| WhatsApp inbound to our published numbers | Phone number, name (if provided), message content, media you send |
| Phone calls | Phone number, name (if provided), notes the team member writes about the call |
| Email to info@getndial.com | Email address, name, message content, any attachments |
| Service engagement | Documents required for the service (PAN, Aadhaar where mandatory, business registration documents, product images for barcode, etc.) |
| Payment | Name, billing address, GSTIN of your business if applicable, payment instrument metadata (we do not store full card details; the payment processor handles that) |
2.2 Information collected automatically
| Source | Data |
|---|---|
| Web analytics (Google Analytics 4) | IP address (truncated), browser type, operating system, device type, pages viewed, time on page, referrer URL |
| Tag management (Google Tag Manager) | Event identifiers, scroll depth, click events on CTAs |
| Marketing attribution | UTM parameters (utm_source, utm_medium, utm_campaign, utm_term, utm_content) when you arrive from an ad or a tagged link |
| Server logs | IP address, request timestamp, request path, user-agent string (kept by our hosting provider for security and abuse-prevention purposes) |
| Cookies | Session identifiers, consent state, analytics identifiers (see section 6) |
3. Why we collect it
| Purpose | Data used | Legal basis under DPDP Act |
|---|---|---|
| Replying to your inquiry and quoting for a service | Name, phone, email, service interest, message | Performance of a service requested by the Data Principal (you) |
| Delivering a service you've engaged us for | All service-related documents, payment data | Contract / Performance |
| Customer support and dispute resolution | Phone, email, communication history | Legitimate use: contract performance |
| Operational updates about your service | Phone, email | Performance of contract |
| Marketing communications (promotional WhatsApp, email newsletter) | Phone, email | Explicit consent, separately captured at form submission via an opt-in checkbox |
| Analytics and website improvement | Anonymous / pseudonymous usage data | Legitimate use: service improvement |
| Legal compliance (tax records, government audits) | All transaction data | Legal obligation |
4. Your rights
Under the DPDP Act, you have the following rights with respect to the personal data we hold about you:
- Right to access: ask us for a summary of personal data we hold about you, the purposes it is processed for, and the third parties it has been shared with.
- Right to correction: ask us to correct inaccurate or incomplete personal data.
- Right to erasure: ask us to delete your personal data once the purpose for which it was collected is fulfilled (subject to legal retention obligations; see section 5).
- Right to grievance redressal: raise a complaint about how we handle your data. Contact details in section 11.
- Right to nominate: nominate someone to exercise these rights on your behalf in case of death or incapacity.
- Right to withdraw consent: where we rely on consent (marketing communications), withdraw it at any time. We honour withdrawals within 7 working days.
How to exercise these rights: Email info@getndial.com with the subject
line "DPDP Request: [Access / Correction / Erasure / Grievance]." We respond within the timelines
in section 11.
5. How long we keep your data
| Data type | Retention period | Why |
|---|---|---|
| Lead inquiries (form, WhatsApp, email; no service purchased) | 24 months from last contact | Sales follow-up, then auto-deleted |
| Active customer records | Duration of engagement + 7 years | Income Tax Act + GST Act record-keeping obligations |
| Marketing opt-in records | Until consent is withdrawn + 12 months | Proof of consent for regulatory inquiry |
| Website analytics (GA4) | 14 months | Default GA4 retention setting |
| Server logs | 90 days | Security and abuse-prevention |
| Payment records | 7 years | Companies Act + Income Tax Act |
After the retention period expires, we delete or anonymise the data such that you can no longer be identified from it.
6. Cookies and your consent
We follow India's Digital Personal Data Protection Act, 2023 (DPDP Act) for any personal data this site collects. On your first visit we ask whether you want analytics and marketing cookies on. Strictly necessary cookies, the ones that make the site function, are always on. You can change your choice anytime by clicking Cookie preferences in the footer, which reopens the banner.
| Category | Examples | Set by default? |
|---|---|---|
| Strictly necessary | Consent record (gnd-consent-v1 in your browser's local storage), session
token, Cloudflare Turnstile token, language preference | Yes, always on |
| Analytics | Google Analytics 4 (anonymised IP): measures pageviews, traffic sources, conversion events | Off until you opt in |
| Marketing / advertising | Google Tag Manager containers for ad measurement and remarketing (Google Ads, Meta Pixel when re-enabled, LinkedIn Insight Tag when active) | Off until you opt in |
How to withdraw consent. Click Cookie preferences in the footer and
choose Decline all, or clear the gnd-consent-v1 entry from your browser's
local storage. Withdrawal takes effect on the next page load; the analytics and marketing tags
stop firing. To exercise other DPDP rights (access, correction, erasure, grievance), see
section 4 above and contact the Grievance Officer in section 11.
7. Who we share your data with
We share personal data only with the third parties listed below, and only to the extent necessary for them to provide the service we use them for. Each processor has signed (or accepted via terms of service) data processing terms compatible with the DPDP Act.
| Processor | Purpose | Where data is stored |
|---|---|---|
| Cloudflare, Inc. | CDN, DNS, WAF, Turnstile spam protection | Global edge network (some data may transit outside India; see section 8) |
| GitHub Inc. | Website hosting (during build / staging phases) | USA |
| Hostinger International | Production website hosting | India / EU (depending on plan) |
| Google LLC (GA4, GTM, Google Ads) | Analytics, tag management, ad measurement | USA + global Google data centres |
| Pabbly Connect | Form submission routing into our CRM | India / EU |
| Superfone | CRM and call/WhatsApp management | India |
| Razorpay | Payment processing for engagement fees | India |
| Government bodies (only when required by service) | Service delivery (GST portal, MSME Udyam portal, FSSAI portal, Trademark Registry, etc.) | India |
We do not sell your personal data to anyone. We do not share your contact details with other vendors for cross-promotion.
8. Cross-border transfers
Some of the processors listed in section 7, notably Cloudflare and Google, store data in servers located outside India. Where this happens, we rely on the processor's standard contractual clauses and compliance with the DPDP Act's cross-border transfer provisions. If the Government of India publishes a country-restriction list under section 16 of the DPDP Act in the future, we will adjust our processor list to comply.
9. Children
Our services are intended for businesses and adults over the age of 18. We do not knowingly collect personal data from children under 18. If you believe we have inadvertently collected such data, contact the Grievance Officer in section 11 and we will delete it.
10. How we protect your data
- HTTPS / TLS 1.3 on getndial.com (managed by Cloudflare).
- Cloudflare WAF and bot mitigation in front of the origin.
- Strict access controls on the CRM (Superfone): only authorised team members.
- Periodic password rotation on admin tools.
- We do not store full credit card numbers; the payment gateway handles that under PCI-DSS.
- No data is processed on unsecured personal devices.
In the event of a personal data breach that risks harm to you, we will notify you and the Data Protection Board of India in accordance with section 8(6) of the DPDP Act.
11. Grievance Officer
In accordance with section 10 of the DPDP Act and rule 5(9) of the Information Technology (Intermediary Guidelines) Rules:
Grievance Officer: Ajeesh Madhavan
Phone: +91 8593 888 837
Email: ajeesh@searchi.in (subject line: "DPDP Grievance")
Postal address: Grievance Officer, Get N Dial Info Service Pvt Ltd, 2nd floor, Karimbanakkal Building, Thrissur Road, Edappal, Malappuram, Kerala 679576
Acknowledgement of grievance: within 48 working hours
Resolution SLA: 15 working days (DPDP Act §13(2) requirement)
If you are not satisfied with our resolution, you may escalate to the Data Protection Board of India once it is operational (per the DPDP Act).
12. Changes to this policy
We may update this Privacy Policy from time to time: for example, when we add a new processor, when the law changes, or when we add a new feature. When we make material changes, we will:
- Update the "Last updated" date at the top of this page.
- Notify customers with active engagements by email at least 14 days before the change takes effect.
- Re-prompt the cookie consent banner if cookie categories have changed.
13. Contact
For any privacy-related question: info@getndial.com with subject "Privacy."
For non-privacy questions, the full contact list is on /contact/.
See also: Terms of Service · Refund Policy