1. Information We Collect

When you voluntarily submit a form, contact us, or otherwise interact with our Site, we may collect the following categories of personal information:

1.1 Information You Provide Directly

First Name and Last Name
Email Address
Company / Organization Name
Job Title / Role
Custom Messages or Inquiries you submit through contact forms or other input fields

We collect this information only when you voluntarily provide it to us, such as when completing a contact form, requesting a demo, subscribing to updates, or otherwise initiating communication with us.

1.2 Information Collected Automatically

When you visit the Site, we or our service providers may automatically collect certain technical data, including:

IP address and approximate geographic location
Browser type and version
Operating system
Referring URLs and pages visited
Date and time of access
Cookie identifiers and similar tracking technologies

This data is collected using cookies, web beacons, log files, and similar technologies. Please refer to Section 7 (Cookies and Tracking Technologies) for more details.

2. How We Use Your Information

We use the personal information we collect for the following purposes:

To respond to your inquiries, messages, and requests
To provide, maintain, and improve our products and services
To send you communications you have requested or consented to
To send administrative information, such as updates to our terms or policies
To analyze usage patterns and improve Site performance
To prevent fraud, abuse, and security incidents
To comply with applicable legal obligations
To exercise or defend legal claims

We will not use your personal information for purposes that are materially different from those described in this Policy without first seeking your consent.

3. Legal Bases for Processing (GDPR — EU/UK Visitors)

If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data under the following legal bases pursuant to Regulation (EU) 2016/679 (the General Data Protection Regulation, "GDPR"):

Consent (Art. 6(1)(a)): Where you have given clear, affirmative consent to the processing of your personal data for specific purposes (e.g., marketing communications).
Contract (Art. 6(1)(b)): Where processing is necessary to perform a contract with you or to take steps at your request prior to entering into a contract.
Legal Obligation (Art. 6(1)(c)): Where processing is necessary for compliance with a legal obligation to which we are subject.
Legitimate Interests (Art. 6(1)(f)): Where processing is necessary for the purposes of our legitimate interests or those of a third party, provided that such interests are not overridden by your rights and interests (e.g., improving our services, fraud prevention, and security).

3.1 Your GDPR Rights

If you are located in the EEA or UK, you have the following rights under the GDPR, subject to applicable exceptions:

Right of Access — to obtain a copy of the personal data we hold about you
Right to Rectification — to request correction of inaccurate or incomplete data
Right to Erasure ('Right to be Forgotten') — to request deletion of your personal data under certain conditions
Right to Restriction of Processing — to request that we restrict the processing of your data
Right to Data Portability — to receive your data in a structured, commonly used, machine-readable format
Right to Object — to object to processing based on legitimate interests or for direct marketing purposes
Right to Withdraw Consent — at any time, where processing is based on consent, without affecting the lawfulness of prior processing
Right to Lodge a Complaint — with your local data protection supervisory authority

To exercise any of these rights, please contact us using the information in Section 12. We will respond within 30 days. We may require verification of your identity prior to fulfilling your request.

4. California Privacy Rights (CCPA + CPRA)

This section applies to residents of the State of California and supplements the information in this Privacy Policy. It is provided pursuant to the California Consumer Privacy Act of 2018 ("CCPA") as amended by the California Privacy Rights Act of 2020 ("CPRA").

4.1 Categories of Personal Information Collected

In the past 12 months, we have collected the following categories of personal information from California consumers, as defined under Cal. Civ. Code § 1798.140:

Identifiers: Real name, email address
Professional or Employment-Related Information: Company name, job title/role
Inferences: We may draw inferences from your submitted information to understand your interests or service needs
Internet or Other Electronic Network Activity: Browsing history, interaction data, IP address

We do not collect Sensitive Personal Information as defined under CPRA § 1798.121 through our Site forms.

4.2 Sources of Personal Information

We collect personal information directly from you (via forms and communications), automatically from your browser and device, and from third-party analytics and advertising partners.

4.3 Purposes for Collection

Personal information is collected for the business purposes described in Section 2. We do not sell personal information and do not use it for cross-context behavioral advertising without consent.

4.4 Your California Rights

As a California resident, you have the following rights under the CCPA/CPRA:

Right to Know — request disclosure of the categories and specific pieces of personal information we have collected about you
Right to Delete — request deletion of personal information we have collected, subject to certain exceptions
Right to Correct — request correction of inaccurate personal information
Right to Opt-Out of Sale or Sharing — we do not sell personal information; however, you may submit an opt-out request for any sharing for cross-context behavioral advertising purposes
Right to Limit Use of Sensitive Personal Information — to the extent we collect sensitive personal information, you may direct us to limit its use
Right to Non-Discrimination — we will not discriminate against you for exercising any of your CCPA/CPRA rights

To submit a request, please contact us at privacy@purplehornbill.com. We will respond within 45 days, with an option to extend by an additional 45 days with notice. We will verify your identity before processing requests.

4.5 Authorized Agents

California residents may designate an authorized agent to make requests on their behalf. To do so, the agent must provide written authorization signed by the consumer, and we may require additional verification of the consumer's identity.

4.6 Financial Incentives

We do not offer financial incentives in exchange for the retention, sale, or sharing of personal information.

5. California Online Privacy Protection Act (CalOPPA)

We comply with the California Online Privacy Protection Act (Cal. Bus. & Prof. Code § 22575 et seq.). Accordingly:

Users may visit the Site anonymously where technically feasible
This Privacy Policy is posted prominently and linked from our homepage
This Privacy Policy discloses the categories of personal information collected and the purposes for collection
We honor Do Not Track (DNT) signals to the extent required by law. Note that some third-party services integrated into the Site may not respond to DNT signals
Third parties may collect personally identifiable information about your online activities over time and across different websites when you visit this Site. We do not control such third-party tracking
If we make material changes to this Privacy Policy, we will update the Effective Date and, where appropriate, notify users by email or prominent notice on the Site

6. Children's Privacy (COPPA)

Our Site is not directed to, and we do not knowingly collect personal information from, children under the age of 13. We comply with the Children's Online Privacy Protection Act (15 U.S.C. § 6501 et seq., "COPPA").

If you are under 13 years of age, please do not use or access the Site or submit any personal information through the Site. If we learn that we have inadvertently collected personal information from a child under 13 without verifiable parental consent, we will take steps to delete that information as soon as possible.

If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at privacy@purplehornbill.com. We will investigate and promptly delete any such information from our records.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies (such as web beacons and pixel tags) to enhance your experience on the Site, analyze usage, and for other purposes described in this Policy.

7.1 Types of Cookies We Use

Strictly Necessary Cookies: Essential to operate the Site and cannot be switched off in our systems
Performance / Analytics Cookies: Used to understand how visitors interact with the Site (e.g., Google Analytics)
Functional Cookies: Enable enhanced functionality and personalization
Targeting / Advertising Cookies: May be set by our advertising partners to build a profile of your interests

7.2 Cookie Choices

You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of the Site may become inaccessible or not function properly. You may also opt out of analytics tracking.

8. How We Share Your Information

We do not sell, rent, or trade your personal information. We may share your information in the following limited circumstances:

Service Providers: With trusted third-party vendors who assist in operating the Site, conducting business, and providing services, subject to confidentiality obligations.
Business Transfers: In connection with any merger, acquisition, sale of assets, or financing, we may transfer personal information as part of that transaction, subject to appropriate confidentiality protections.
Legal Requirements: Where required by law, regulation, legal process, or governmental request; or to protect the rights, property, or safety of our company, users, or others.
With Your Consent: For any other purpose with your explicit consent.

9. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Policy, unless a longer retention period is required or permitted by law. When personal information is no longer needed, we securely delete or anonymize it in accordance with our internal data retention schedule.

Specifically:

Form submissions are retained for 6 months or until you request deletion
Log and analytics data are retained for 6 months and then aggregated or deleted

10. Data Security

We implement reasonable and appropriate technical and organizational measures designed to protect your personal information from unauthorized access, use, alteration, or disclosure. These measures include encryption in transit (TLS/HTTPS), access controls, and regular security assessments.

However, no data transmission over the internet or electronic storage system is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. In the event of a data breach, we will notify affected individuals and relevant authorities as required by applicable law.

11. International Data Transfers

Our Site is operated from India. If you access the Site from outside India, your personal information may be transferred to and processed in jurisdictions that may have different data protection laws than those in your country of residence.

For transfers of personal data from the EEA or UK to countries not recognized as providing an adequate level of data protection, we rely on appropriate safeguards, such as Standard Contractual Clauses (SCCs) approved by the European Commission, or other legally recognized transfer mechanisms.

12. Contact Us

If you have questions, concerns, or requests related to this Privacy Policy or your personal information, please contact us:

Purplehornbill Global Private Limited

Privacy / Data Protection Office

Email: privacy@purplehornbill.com

Mailing Address: 54, Vyankatesh Nagar, Panjab National Bank

Website: purplehornbill.com/contact

If you are a California resident and wish to exercise your CCPA/CPRA rights, please write to privacy@purplehornbill.com with the subject line: "California Privacy Request."

If you are in the EEA or UK and wish to exercise your GDPR rights, or if you are unsatisfied with our response, you have the right to lodge a complaint with your local supervisory authority.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will update the "Effective Date" at the top of this Policy and, where appropriate, provide additional notice (such as a prominent notice on the Site or an email notification).

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of the Site after any changes constitutes your acceptance of the updated Privacy Policy.