GDPR Policy
DG Brew Technologies · Last updated: 13-11-2026
1. Introduction
DG Brew Technologies (“DG Brew”, “we”, “us”, “our”) is committed to protecting your personal data and respecting your privacy rights under the EU General Data Protection Regulation (GDPR) and the UK GDPR. This policy explains how we collect, use, store and protect personal data of visitors to dgbrew.com and of our clients, and what rights you have. It should be read together with our Privacy Policy and Terms of Service.
2. Data Controller
DG Brew Technologies is the data controller for personal data collected through this website.
- Address: Innov8, Plot No. 211, 3rd Floor, Okhla Phase 3, New Delhi – 110020, India
- Data protection contact: info@dgbrew.com
When we process personal data on behalf of a client as part of our services (for example running campaigns or managing client websites), we act as a data processor under a written Data Processing Agreement (DPA).
3. Personal Data We Collect
- Contact details: name, email address, phone number, company name and message content submitted through our contact form or email.
- Technical data: IP address, browser type, device information, pages visited and time spent, collected through cookies and analytics tools.
- Marketing data: your newsletter subscription status and communication preferences, where applicable.
- Client and project data: information shared with us to deliver services, such as brand assets, campaign data and analytics access.
We do not knowingly collect sensitive (special category) personal data or data of children under 16.
4. Purposes and Legal Bases
| Purpose | Legal basis |
|---|---|
| Responding to enquiries and proposals | Legitimate interests / steps prior to a contract |
| Delivering our services and managing client relationships | Performance of a contract |
| Website analytics and improving our site | Consent (cookies) / legitimate interests |
| Sending newsletters and marketing updates | Consent |
| Accounting, tax and legal compliance | Legal obligation |
Where we rely on consent, you can withdraw it at any time without affecting earlier processing.
5. Cookies and Analytics
We use cookies and similar technologies to operate the website and understand how it is used. Non-essential cookies are only set after you give consent through our cookie banner. You can change or withdraw consent at any time through the banner settings or your browser settings.
6. Sharing Your Data
We do not sell personal data. We may share it with trusted service providers who help us operate, such as web hosting, email, analytics, CRM and project management tools, and with authorities where legally required. All service providers are bound by confidentiality and data protection obligations.
7. International Transfers
We are based in India, so your data may be transferred to and processed outside the European Economic Area and the UK. Where required, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (SCCs) or other lawful transfer mechanisms.
8. Data Retention
We keep personal data only as long as needed for the purposes above:
- Enquiries that do not lead to a contract: up to [12] months.
- Client records: for the duration of the contract plus [6–8] years for legal and accounting purposes.
- Marketing subscriptions: until you unsubscribe.
- Analytics data: [26] months or less.
After this, data is securely deleted or anonymised.
9. Your Rights
Under the GDPR you have the right to:
- Access the personal data we hold about you.
- Rectify inaccurate or incomplete data.
- Erase your data (“right to be forgotten”) in certain circumstances.
- Restrict processing in certain circumstances.
- Data portability, to receive your data in a structured, commonly used format.
- Object to processing based on legitimate interests or direct marketing.
- Withdraw consent at any time.
- Lodge a complaint with your local supervisory authority.
To exercise any right, email info@dgbrew.com. We will respond within one month.
10. Data Security
We use appropriate technical and organisational measures to protect personal data, including secure hosting, access controls, encrypted connections (HTTPS), regular backups and staff confidentiality obligations.
11. Data Breach Notification
If a personal data breach is likely to put your rights and freedoms at risk, we will notify the relevant supervisory authority within 72 hours of becoming aware of it and inform affected individuals without undue delay where required.
12. Roles and Responsibilities
The founder/management of DG Brew is accountable for GDPR compliance and acts as the data protection lead. All team members who handle personal data must follow our data handling, access control and confidentiality guidelines.
13. Changes to This Policy
We may update this policy from time to time. The latest version will always be available on this page with the updated date.
14. Contact Us
For any questions about this policy or your personal data, contact us at info@dgbrew.com or write to the address in Section 2.