Privacy Policy

Overview

Midha Backers LLP (“Midha Backers”, “we”, “us” or “our”) respects your privacy and is committed to handling personal data responsibly.

This Privacy Policy explains our practices when you:

• visit or interact with midhabackers.com;
• submit an enquiry, form or service request;
• communicate with us by email, phone or messaging service;
• request, purchase or use our Services;
• attend a meeting, presentation, event or consultation;
• receive a communication delivered using services operated or supported by us for a client;
• interact with campaigns, websites, applications or digital experiences that we manage.

This Policy should be read with our Terms of Service and other notices presented when information is collected.

Scope and our data-processing roles

2.1 When Midha Backers determines the purpose

We determine why and how personal data is processed when handling website visits, enquiries, proposals, client relationships, invoicing, recruitment, supplier management, business development and our own marketing.

2.2 When we process data for a client

For campaign delivery, messaging, advertising, website support, analytics and similar Services, we may process personal data only on the instructions of a client. In those circumstances, the client determines the purpose and lawful basis of processing and is primarily responsible for notices, permissions and consent.

Questions about a specific campaign or communication should generally be directed first to the organisation identified as its sender. We will assist our client with valid privacy requests where contractually and legally required.

Personal data we collect

Depending on your relationship and interaction with us, we may process the following categories of information.

3.1 Identity and contact information

• name and professional title;
• company or organisation name;
• business email address and telephone number;
• postal or billing address;
• contact preferences and correspondence history.

3.2 Enquiry and client information

• information submitted through website forms;
• service requirements, budgets and campaign objectives;
• proposals, agreements, approvals and project feedback;
• meeting notes and communications;
• account, platform and integration details;
• support requests and issue history.

3.3 Commercial and transaction information

• services requested or purchased;
• invoices, payment status and transaction references;
• tax and billing information;
• records required for accounting, audit and legal compliance.

We generally do not store full payment-card details. Payments may be handled by banks or independent payment providers under their own privacy terms.

3.4 Website and technical information

• IP address and approximate location;
• browser, device, operating system and language;
• referral source and pages viewed;
• date, time, session and interaction information;
• cookie identifiers and consent preferences;
• security, error and diagnostic logs.

3.5 Campaign and communication data

When acting for a client, campaign data may include:

• recipient names, phone numbers and email addresses;
• sender and recipient identifiers;
• message content, templates and media attachments;
• delivery, read, response and failure status;
• timestamps, routing and traffic metadata;
• consent, preference, opt-out and suppression records;
• campaign segmentation and engagement information.

3.6 Advertising and analytics information

• campaign impressions, clicks and conversions;
• audience attributes and segments;
• website events and campaign attribution information;
• advertising account and performance information;
• aggregated reporting and analytical insights.

3.7 Recruitment information

If you apply for a role, we may process your résumé, work history, qualifications, portfolio, contact information, interview notes, references and other information you choose to provide.

3.8 Sensitive data

Please do not submit health, financial-account, authentication, government-identity or other sensitive information unless we specifically request it and provide appropriate instructions.

How we collect personal data

We may collect information:

• directly from you;
• from your employer, organisation or authorised representative;
• from clients who instruct us to provide Services;
• through our website, forms and communication channels;
• through cookies, pixels, logs and similar technologies;
• from advertising, analytics and social-media platforms;
• from telecom operators, messaging providers and aggregators;
• from payment, hosting and technology providers;
• from publicly available business sources;
• from referrals, events and professional networks.

Where another organisation provides your data to us, that organisation is responsible for ensuring it has authority and a lawful basis to do so.

How and why we use personal data

We may process personal data to:

• operate, secure and improve our website;
• respond to enquiries and arrange consultations;
• prepare proposals, quotations and service recommendations;
• enter into and administer contracts;
• provide, manage, personalise and support Services;
• create, deliver, route and report on authorised communications;
• manage digital advertising and marketing campaigns;
• design, develop, host and maintain digital products;
• measure campaign, content and website performance;
• manage accounts, billing, payments and records;
• communicate service, security and operational updates;
• detect misuse, fraud, security threats and technical issues;
• maintain suppression and opt-out records;
• recruit personnel and manage applications;
• establish, exercise or defend legal rights;
• comply with legal, regulatory and contractual obligations.

Depending on the context, processing may be based on your consent, action requested by you, performance of a contract, compliance with law or another lawful and legitimate business purpose permitted under applicable law.

Where processing depends on consent, you may withdraw consent. This will not affect processing that lawfully occurred before the withdrawal.

Marketing and business communications

We may send service information, requested responses, proposals, operational notices and other communications connected with your relationship with us.

We may send promotional communication where you have requested it, consented to it or where otherwise permitted by applicable law. Promotional messages will provide an appropriate method to opt out where required.

You can manage communications by:

• using the unsubscribe or opt-out method in a message;
• replying with the instructed opt-out keyword where available;
• contacting the organisation identified as the sender;
• emailing us at info@midhabackers.com.

We may retain a minimal suppression record after an opt-out to prevent further unwanted communication.

Cookies and similar technologies

Our website may use cookies, tags, pixels, local storage and similar technologies to operate correctly, remember preferences, maintain security, understand usage and measure marketing performance.

These technologies may include:

Essential

Required for security, forms, network management, consent preferences and core website functions.

Analytics

Used to understand visits, page performance, traffic sources and user interaction.

Functional

Used to remember settings and provide enhanced website features.

Advertising

Used to measure campaigns, attribute conversions and deliver or limit relevant advertising.

Non-essential technologies should be used in accordance with your cookie choices where consent is required. You may also manage cookies through your browser, although disabling essential cookies may affect website functionality.

How we disclose and share personal data

We do not sell personal data as an independent commercial product. We may disclose information where reasonably necessary to:

• employees and authorised personnel;
• affiliates, professional advisers and auditors;
• hosting, cloud, security and software providers;
• telecom operators, aggregators and messaging providers;
• email, CRM, automation and customer-support providers;
• analytics, advertising and social-media platforms;
• payment processors, banks and accounting providers;
• developers, designers and authorised subcontractors;
• government, regulatory and law-enforcement authorities;
• a buyer, investor or successor involved in a merger, restructuring, financing or transfer of business.

Service providers are permitted to process information only for authorised purposes and are expected to apply appropriate confidentiality and security protections.

We may disclose information where required by law or reasonably necessary to protect rights, safety, systems, users or the public.

International processing and transfers

Some technology, cloud, advertising, analytics and communication providers may process information from locations outside India.

Where personal data is transferred or made available internationally, we will take measures required by applicable law, which may include contractual protections, access controls, vendor assessments and transfer restrictions.

International processing may also be subject to the laws of the country in which a service provider operates.

How long we retain personal data

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including to provide Services, comply with law, resolve disputes and enforce agreements.

Retention periods depend on:

• the nature and sensitivity of the information;
• the duration of the client or service relationship;
• campaign and operational requirements;
• consent, preference and opt-out obligations;
• security, fraud-prevention and dispute requirements;
• tax, accounting and statutory recordkeeping obligations;
• client instructions where we act as a service provider.

When information is no longer required, we may delete, de-identify, aggregate or securely archive it as appropriate. Backup copies may remain for a limited period until overwritten through normal recovery cycles.

Information security

We use reasonable administrative, organisational and technical safeguards appropriate to the information and Services. These may include:

• role-based and need-to-know access controls;
• authentication and credential-management practices;
• encryption where appropriate and available;
• network, endpoint and infrastructure protections;
• logging, monitoring and backup procedures;
• vendor and subcontractor controls;
• confidentiality obligations and personnel awareness;
• incident response and recovery procedures.

No website, platform, transmission or storage method can be guaranteed to be completely secure. You are responsible for protecting your credentials and notifying us promptly of suspected unauthorised activity.

Your privacy rights

Subject to applicable law and verification of your identity, you may have the right to:

• obtain information about the processing of your data;
• request access to personal data associated with you;
• request correction, completion or updating of inaccurate data;
• request erasure of data that is no longer required or lawfully retained;
• withdraw consent where processing depends on consent;
• opt out of promotional communications;
• nominate another person to exercise rights where permitted;
• raise a grievance regarding our handling of personal data;
• complain to the appropriate authority where legally available.

To submit a request, contact info@midhabackers.com with sufficient information to identify you and the relevant interaction. We may request additional information to verify identity, authority and the scope of the request.

Some information may be retained where required for legal compliance, fraud prevention, security, dispute resolution, suppression records or the establishment and defence of legal claims.

Children’s privacy

Our website and Services are intended for businesses and adults. They are not directed to children, and we do not knowingly collect personal data directly from children for behavioural monitoring or targeted advertising.

Clients must not provide children’s personal data or instruct us to process it unless the processing is lawful, necessary, expressly agreed in writing and supported by all required parental or guardian permissions.

If you believe that a child’s information has been provided to us improperly, contact us so that we can investigate and take appropriate action.

Third-party websites and services

Our website and Services may contain links to or integrations with third-party websites, platforms, applications and services.

Third parties control their own privacy practices. This Policy does not govern information that you provide directly to them or that they collect independently. You should review their privacy notices before submitting information or enabling an integration.

We are not responsible for the content, security, availability or privacy practices of independent third parties.

Changes to this Privacy Policy

We may update this Policy to reflect changes in our Services, technology, legal obligations or business practices.

The latest version will be published on this page with an updated effective date. Where appropriate, we may also provide notice by email, through the website or by another reasonable method.

We encourage you to review this page periodically.

Privacy contact and grievances

Questions, rights requests and privacy grievances may be directed to:

Please include your name, contact information, relationship with Midha Backers and a clear description of the request or grievance. We will review and respond within the period required by applicable law.