1. Introduction
This Privacy Policy describes how Pitchdeck.Design, a business unit / subsidiary of Scaalex (“we”, “us”, “our” or the “Company”), collects, uses, discloses, stores and protects personal data of visitors and users (“you”, “your”) in connection with the website www.pitchdeck.design (the “Website”) and the related services described therein.
This Privacy Policy is published in compliance with (i) the Digital Personal Data Protection Act, 2023 (“DPDPA”) and rules made thereunder; (ii) Rule 3 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“SPDI Rules”); (iii) Section 43A of the Information Technology Act, 2000; and (iv) applicable international data protection frameworks to the extent relevant to Users located outside India.
2. Scope and Consent
By accessing the Website, submitting information through it, booking a call, subscribing to communications or otherwise interacting with us, you acknowledge that you have read this Privacy Policy and freely, specifically and unambiguously consent to the collection, storage, processing, use and disclosure of your personal data in accordance with this Privacy Policy.
3. Personal Data We Collect
3.1 Information you provide directly to us: Name, email address, phone number, WhatsApp contact and company/startup name provided via contact forms, scheduling links or email; business information you disclose during discovery calls, pitch discussions or consulting engagements (which may include your business model, financial projections, market data, product plans, cap table and fundraising status); payment and billing information (processed through third-party payment processors — we do not store card details); and correspondence, feedback and testimonials.
3.2 Information collected automatically: Device and technical data — IP address, browser type and version, device type, operating system, referring URL and pages visited; usage data — time on page, click-stream data, session duration, scroll depth and interaction with Website elements; and cookies and similar tracking technologies (see Clause 6 below).
3.3 Information from third parties: Data from Cal.com when you book a meeting through our scheduling link (name, email, time zone, meeting notes); public profile information from LinkedIn and Instagram if you connect with us through those channels; and analytics data via Google Tag Manager and any analytics platforms connected through it.
4. How We Use Your Personal Data
We use your personal data to respond to your inquiries and schedule discovery / consulting calls; deliver, personalise and improve the Services; send transactional communications including proposals, engagement letters, invoices and project updates; send marketing communications relating to our Services, subject to your right to opt out at any time; operate and improve the Website; comply with legal, regulatory, tax and accounting obligations; detect, investigate and prevent fraud, abuse and security incidents; and enforce our Terms and Conditions and protect our rights and property.
5. Lawful Basis for Processing
We process your personal data on one or more of the following lawful bases: (i) your consent under the DPDPA and applicable law; (ii) performance of a contract or the taking of steps at your request prior to entering into a contract; (iii) compliance with a legal obligation; and (iv) our legitimate business interests (including responding to leads, delivering Services, business development and analytics), where these are not overridden by your rights and interests.
6. Cookies and Similar Technologies
The Website uses cookies, web beacons, pixels and similar technologies to distinguish you from other users, to remember your preferences, to enable analytics and to help us deliver a better user experience. The categories of cookies used include strictly necessary cookies required for the Website to function; analytics cookies deployed via Google Tag Manager and related analytics providers; functional cookies that remember your preferences; and third-party cookies set by embedded services such as Cal.com scheduling, LinkedIn/Instagram embeds and Framer hosting. You may control cookies through your browser settings; however, disabling cookies may affect the functionality of parts of the Website.
7. Third-Party Services and Data Sharing
We may share your personal data with the following categories of third parties, strictly for the purposes described in this Policy: hosting and infrastructure providers including Framer; scheduling providers including Cal.com; analytics providers including Google via Google Tag Manager and any analytics platforms deployed; communication platforms including WhatsApp / Meta Platforms Inc. and email service providers; payment processors; professional advisors; parent, subsidiary and affiliated entities of Scaalex; and governmental, regulatory or judicial authorities where disclosure is required by applicable law. We do not sell your personal data to third parties.
8. Cross-Border Data Transfers
Some of the third-party service providers listed above are located outside India. Where personal data is transferred outside India, we take reasonable steps to ensure such transfers comply with applicable law, including entering into appropriate contractual safeguards with such providers and, where required, obtaining your consent.
9. Data Retention
We retain personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law, tax, accounting or dispute-resolution requirements. Client engagement records are typically retained for a period of eight (8) years from the end of the engagement, in line with applicable tax and audit requirements.
10. Data Security
We implement reasonable technical, administrative and physical safeguards designed to protect personal data from unauthorised access, use, alteration, disclosure or destruction, consistent with the requirements of the SPDI Rules and the DPDPA. These measures include access controls, encryption in transit, secure storage of confidential documents, and vendor due diligence. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.
11. Your Rights
Subject to and in accordance with applicable law (including the DPDPA), you have the following rights in relation to your personal data: the right to access a summary of the personal data being processed; the right to correction and erasure; the right to withdraw consent to processing at any time; the right of grievance redressal; and the right to nominate an individual to exercise the above rights in the event of your death or incapacity. To exercise any of the above rights, please contact us at hello@pitchdeck.design.
12. Children
The Services are not directed at, and we do not knowingly collect personal data from, children under the age of eighteen (18) years. If you believe that a child has provided us with personal data, please contact us and we shall promptly delete such information.
14. Grievance Officer
In compliance with the SPDI Rules and the DPDPA, the details of our Grievance Officer for personal data related grievances are as follows: Name: [Insert name]; Designation: Grievance Officer, Pitchdeck.Design / Scaalex; Email: grievance@pitchdeck.design (or hello@pitchdeck.design); Postal address: [Insert registered office of Scaalex]. Grievances shall be acknowledged within forty-eight (48) hours and endeavoured to be resolved within thirty (30) days of receipt.
15. Governing Law and Jurisdiction
This Privacy Policy shall be governed by and construed in accordance with the laws of India. The courts at Bengaluru, Karnataka shall have exclusive jurisdiction in respect of any dispute arising in connection with this Policy, subject to the arbitration agreement contained in our Terms and Conditions.
Contact
For any questions or concerns about this Privacy Policy, please contact us at:
Email: hello@pitchdeck.design
WhatsApp: +91 8861 40 96 50
Website: www.pitchdeck.design
By using this Website, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use and disclosure of your personal data as described herein.