PRIVACY POLICY

Introduction

ThePinkDreams a brand of Raami Infotech (“we”, “us”, “our”) is committed to safeguarding the personal information of our website visitors, clients and others (collectively “you”, “your”). This Privacy Policy describes how we collect, use, disclose, transfer and protect personal data in the course of our digital-marketing services and website operations – in compliance with applicable laws in Canada (including the Personal Information Protection and Electronic Documents Act (“PIPEDA”) and provincial equivalents), the United States (including state privacy laws) and India (including the Digital Personal Data Protection Act, 2023 (“DPDP Act”)).

By accessing or using our website or services, you consent to the collection and processing of your personal data as described here.

Scope and Applicability

This Policy applies to our website(s), mobile apps (if any), client engagements, marketing, lead-generation, analytics and other services.
It applies to personal information/data we collect directly from you, as well as indirectly (e.g., via cookies or third-party tracking) in the course of providing our services.
It covers individuals in Canada, the United States, India and any other jurisdictions in which we collect or process personal data.
Where you are a resident of a jurisdiction where additional obligations apply (for example a U.S. state with an online privacy law), you may have additional rights as described below.

Definitions (key terms)

“Personal Information” (Canada) / “Personal Data” (India) means information about an identifiable individual. In Canada this is governed under PIPEDA.
“Sensitive Personal Information” (where applicable) may include things like health, race, religion, geolocation, children’s data, etc.
“Processing” means any operation performed on personal data (collection, use, storage, adaptation, disclosure, deletion). (As per Indian law: DPDP Act).
“Data Subject” / “Data Principal” means the individual whose personal data is being processed.
“Data Controller” / “Data Fiduciary” means the entity that determines the purpose and means of processing. (India: fiduciary).
“Data Processor” means the entity that processes personal data on behalf of the controller/fiduciary.

The Data We Collect

We may collect, store and use the following types of personal data:

a) Directly provided by you

Name, email address, telephone/mobile number, business name, job title, postal address.
Payment/billing information (where you engage our services).
Marketing opt-in preferences.
Any other information you choose to provide (e.g., when you fill out a contact form, download a resource, or engage our services).

b) Automatically collected / analytics / cookies

IP address, browser type and version, time zone setting, operating system, device identifiers.
URLs of referring/exit pages, pages visited, scroll behaviour, time spent on each page.
Cookies, web beacons, tracking pixels, analytics tools (e.g., Google Analytics) and similar technologies.
Where allowed by law and consent, third-party tracking for remarketing, behavioural advertising, conversion-tracking.

c) From third parties

Lead-lists, publicly available sources, business social-profiles.
Social media information (if you connect via e.g., LinkedIn, Facebook).
Service providers, subcontractors, analytics/ad-tech providers.

How We Use Your Data

We process your personal data for the following purposes:

To provide you with our digital-marketing, SEO, analytics, advertising, website‐development and consulting services.
To manage our relationship with you (onboarding, contracts, invoicing, support).
To communicate with you (newsletters, service updates, promotional offers) – where you have opted in or where permitted by law.
To operate and improve our website, mobile apps and services, including analytics, monitoring performance, troubleshooting, system testing, and developing new features.
To comply with legal or regulatory obligations.
To send you targeted advertisements or retargeting campaigns, provided you have given valid consent (where required).
To carry out lead generation and distribution (for example when you engage us and we collect leads to distribute to clients) – depending on consent and contractual terms.

Legal Basis / Consent

United States
In the U.S., while there is no comprehensive federal privacy law, we comply with applicable state laws (such as California’s consumer privacy laws) including providing notice, rights to opt out of sale, and respecting sensitive categories of data.

Canada
Under PIPEDA, we collect, use, and disclose personal information only with your knowledge and consent, except in limited circumstances. We rely on your express or implied consent (depending on the nature of the data and use) and we ensure meaningful consent by providing clear notice.

India
Under the DPDP Act (2023) and associated rules, we obtain your free, specific, informed, unconditional and unambiguous consent via a clear affirmative action. If you are located in India or we target you, this applies.

In all jurisdictions, you may withdraw consent at any time.

Disclosure and Sharing of Your Data

We may share your personal data in the following situations:

With our group companies, affiliates, service providers and processors (for example web-hosting, analytics, advertising networks, CRM platforms) who perform services on our behalf under contract and confidentiality obligations.
With clients (in the case of lead-distribution or digital marketing engagements) subject to specific consent/contractual terms.
With third parties in the course of a merger, acquisition or sale of all or part of our business, in which case we will endeavour to notify you of the change in control and your choices.
With law-enforcement, regulators or government authorities when required by applicable law or to protect our rights, safety, property or others.
With your consent (for example for sharing your information for a particular marketing campaign).
In the United States / California context: if you are a resident of a jurisdiction that requires “sale” or “sharing” disclosure or opt-out rights, we provide such mechanisms
Cross-border transfers: we may transfer your personal data to other countries (for example to our service providers outside your home jurisdiction) provided we have appropriate safeguards and legal rights to do so.

International / Cross-Border Transfers

Because we operate globally, your personal data may be transferred and stored in countries other than your country of residence. When we do so:

We ensure that appropriate legal safeguards are in place (for example standard contractual clauses, binding corporate rules, or other appropriate safeguards) consistent with applicable law.
For Indian residents: under the DPDP Act, any transfer outside India must comply with the rules notified by the Government of India.
For Canadian residents: PIPEDA requires that when personal data is transferred to another organization (especially outside Canada) the receiving organization must apply appropriate protections.
We will treat your data with the same level of protection as required in your jurisdiction.
If you are concerned about transfers, please contact us and we can discuss localisation or restrictions.

Data Retention

We retain your personal data only for as long as is necessary to fulfil the purposes described in “How We Use Your Data”, unless a longer retention period is required or permitted by law.

We periodically review our retention periods and destroy, anonymise or aggregate data when no longer needed.
If you withdraw consent or request deletion, we will securely delete or anonymise your data unless retention is required for legal, regulatory, contractual or legitimate business purposes.

Your Rights (and How to Exercise Them)

Depending on your jurisdiction, you may have the following rights in relation to your personal data:

United States

Depending on your state: right to opt-out of sale/sharing of your personal information.
Right to access or delete your personal data (varies by state law).

Canada

Access: You can request access to the personal information we hold about you, and obtain a copy.
Correction: You can request correction of inaccurate or incomplete personal information.
Withdrawal of consent: You can withdraw consent, subject to legal or contractual restrictions.
Complain: You can make a complaint to our designated contact or to the relevant privacy regulator (e.g., the Office of the Privacy Commissioner of Canada).

India

Under the DPDP Act: right to withdraw consent, right to correction/completion/updating/erasure of your personal data (unless retention is necessary for legal/compliance reasons).
Right to file a grievance with our designated contact (or the Data Protection Board once constituted).

To exercise any of these rights, please contact us at support [at] thepinkdreams.com. We will respond in accordance with applicable legal timelines.

Cookies, Tracking & Marketing Opt-Outs

We use cookies and similar tracking technologies to collect information as described in “The Data We Collect”. You may disable cookies via your browser settings or opt-out of certain tracking in browser/ device settings.
For U.S./California residents: if you object to the “sale” or “sharing” of your personal information for certain marketing purposes, you may exercise the “Do Not Sell My Info” link (if available) or contact us.
We will provide clear notice and obtain consent (where required) before using your data for targeted advertising or remarketing.
Please note: disabling cookies/tracking may impact your ability to use certain features of our website/services.

Data Security

We implement appropriate technical and organisational measures to protect your personal data from unauthorised access, alteration, disclosure or destruction. This includes encryption, access controls, secure servers, monitoring and internal policies.

We regularly review our security practices and update them as required by law or business context.
However, no data transmission or storage system can be guaranteed to be 100% secure – we cannot guarantee absolute security.

Children’s Data

Our website/services are not directed at children under the age of 13 (or lower age as required by local law). We do not knowingly collect personal data from children without verifiable parental consent. If you believe we have collected personal data from a child, please contact us and we will take steps to delete that data.
If you are resident in India: under the DPDP Act, additional safeguards apply for children (under 18) including obtaining guardian consent and prohibitions around targeted advertising based on children’s data.

Changes to This Policy

We may update this Privacy Policy from time to time (for example when laws change, our services change, or new data-practices are introduced).
When we do, we will revise the “Last updated” date above and post the revised policy on our website. We will also, where required by law, notify you (for example by email or by banner).

We encourage you to review this policy periodically.

Contact Information & Complaints

If you have any questions or concerns about this Privacy Policy or our data practices, you may contact us at support [at] thepinkdreams.com

If you are in Canada, you also have the right to submit a complaint to the Office of the Privacy Commissioner of Canada: https://www.priv.gc.ca/ priv.gc.ca

If you are in India, once the Data Protection Board is operational under the DPDP Act you have the right to file complaints with it as per law.

For U.S. residents in jurisdictions with privacy regulators you may contact your state’s privacy regulator for additional rights or recourse.

Disclaimer & Limitation of Liability

While we endeavour to protect your privacy and comply with applicable laws, we cannot guarantee confidentiality or security of information transmitted to or from our website or services. Except to the extent required by applicable law, our liability with respect to the use, collection or disclosure of personal data is limited.

Nothing in this policy should be construed as waiving any rights you may have under applicable privacy-laws.

This Privacy Policy does not constitute legal advice; you should seek independent advice as needed.