Privacy Policy

01Who we are

Be12 Media (“Be12 Media”, “we”, “us” or “our”) is a digital marketing agency based in Chennai, Tamil Nadu, India. We operate the website be12media.com.

For the purposes of India’s Digital Personal Data Protection Act, 2023 (the “DPDP Act”) and the Digital Personal Data Protection Rules, 2025, Be12 Media is the Data Fiduciary for the personal data described in this policy. You can contact us about anything in this policy at mk@be12media.com.

02What this policy covers

This policy explains how we handle personal data when you visit be12media.com, use our contact form or email us. It does not cover:

• work we do for clients, which is governed by the agreement we sign with each client;
• other websites we link to, which have their own privacy policies.

03Personal data we collect

Information you give us

When you use the contact form on our website, we collect:

• Required: your full name and email address;
• Optional: your phone or WhatsApp number, your website or Instagram handle, the service you are interested in and your message.

If you email us directly, we receive your email address and whatever you include in your message.

Information collected automatically

• Technical data: like most websites, our hosting provider receives your IP address, browser and device type, and the pages you request, so the website can be delivered and protected.
• Form details: when you submit the form we record the date and time and the page it was sent from.
• Spam protection: the form uses a hidden field and a short time check to filter out bots. To stop repeated automated submissions, we keep a one-way scrambled (hashed) version of your IP address for about 10 minutes, after which it is deleted.

Analytics, only with your consent

If you accept analytics cookies, Google Analytics 4 collects information about how you use our website, such as the pages you view, how long you stay, the links and buttons you click, searches and questions you open on our FAQ page, your approximate location (city and country), and your device and browser type. We do not use Google Analytics to collect your name, email address or phone number.

We do not ask for sensitive personal data. Please do not include health, financial or other sensitive details in your messages.

04How we use your data and why

We do not sell personal data, we do not use it for automated decision-making, and we will not add you to a marketing list without asking you first.

05Cookies and similar technologies

Cookies are small files stored in your browser. When you first visit our website, a banner asks whether you accept analytics cookies. Analytics cookies are only set if you choose Accept. You can change your choice at any time using Cookie settings in the website footer.

We use Google Consent Mode. Until you accept, Google Analytics does not store cookies on your device and may only receive limited, cookieless signals that do not identify you.

Google Analytics is provided by Google. You can learn how Google uses information from sites or apps that use its services, read the Google Privacy Policy, or install the Google Analytics opt-out browser add-on. You can also block or delete cookies in your browser settings.

06Who we share data with

We share personal data only with service providers who help us run the website and respond to you, and only as needed for that purpose:

• Hostinger hosts our website, content delivery network and business email, and stores a backup copy of contact form enquiries on our hosting account.
• Google provides the Gmail inbox that receives contact form enquiries, Google Analytics (only with your consent) and Google Fonts. When our pages load fonts from Google’s servers, Google receives your IP address.
• jsDelivr and cdnjs (Cloudflare) deliver open-source code libraries that our pages use. They receive your IP address as part of the request.
• Professional advisers and authorities, such as lawyers or government bodies, where required by law or to protect our rights.

We do not sell, rent or trade personal data.

07International data transfers

Some of our service providers, including Google, Hostinger and the content delivery networks listed above, may store or process data on servers outside India. Where we transfer personal data outside India, we do so as permitted under the DPDP Act, including any restrictions notified by the Government of India.

08How long we keep data

• Enquiries (emails and the backup copy of form submissions): for as long as needed to respond and follow up, and no longer than 24 months after our last contact with you, unless you become a client, in which case our client agreement and legal record-keeping duties apply.
• Hashed IP addresses used for spam protection: about 10 minutes.
• Google Analytics: event-level and user-level data for 14 months, after which Google deletes it. Aggregated reports that do not identify you may be kept longer.
• Server logs kept by our hosting provider: according to Hostinger’s own retention policy.

When data is no longer needed, we delete it or make it anonymous.

09How we protect your data

We use reasonable security safeguards to protect personal data, including HTTPS encryption across the website, storing form backups outside the public website folder, limiting access to people who need it, and spam and rate-limit protection on our form. No method of transmission or storage is completely secure, but we work to protect your data and will notify you and the Data Protection Board of India of a personal data breach where the law requires.

10Your rights

Under the DPDP Act you have the right to:

• Access a summary of the personal data we hold about you and how we use it;
• Correct, complete or update your personal data;
• Erase your personal data, unless we must keep it by law;
• Withdraw consent at any time, as easily as you gave it. Withdrawal does not affect processing that happened before;
• Grievance redressal, if you are unhappy with how we handled your data;
• Nominate another person to exercise your rights if you die or become unable to do so.

To make a request, email mk@be12media.com with the subject “Privacy request”. We may ask you to confirm your identity. We aim to respond within 30 days and will resolve grievances within 90 days, as required by the DPDP Rules, 2025. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

Visitors outside India: if laws such as the EU or UK General Data Protection Regulation apply to you, you may also have the right to object to or restrict processing, to data portability, and to complain to your local data protection authority. Contact us and we will help.

11Children’s privacy

Our website and services are intended for businesses and adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has sent us personal data, contact us and we will delete it.

12Links to other websites

Our website links to other websites, such as Google and the websites of businesses we have worked with. We are not responsible for their privacy practices, so please read their privacy policies.

13Changes to this policy

We may update this policy when our website, services or the law change. The “Last updated” date at the top shows when it last changed. If we make significant changes, we will highlight them on our website.

14Contact and grievance officer

For questions, requests or complaints about your personal data, contact our Grievance Officer: