Privacy Policy

01 · Overview

Magemad ("we", "us", or "our") is a Magento development company incorporated and operating from Ahmedabad, India. We are committed to protecting the privacy and security of personal data provided to us through our website (magemad.com), contact forms, and business communication channels — including WhatsApp Business API.

This Privacy Policy explains what personal data we collect, how we use it, with whom we share it, and the rights you have over that data. It applies to all visitors, clients, and prospective clients who interact with us through any channel.

Applicable Law: This policy is governed by the Indian Information Technology Act 2000, the Digital Personal Data Protection (DPDP) Act 2023, and aligns with international standards including the GDPR for users located in the European Economic Area.

02 · Data We Collect

We do not collect sensitive personal data such as financial account details, health information, biometric data, or government identification numbers unless explicitly required and consented to for a specific purpose.

03 · WhatsApp Business API Usage

Magemad uses the WhatsApp Business API (provided by Meta Platforms, Inc.) to communicate with clients and prospects regarding our Magento development services. This section specifically addresses how we handle data in compliance with WhatsApp's Commerce and Business Policy.

WhatsApp Opt-In Requirement: We will only send you WhatsApp messages if you have explicitly opted in — either through our website, a verbal agreement, or by initiating a conversation with us on WhatsApp. You may opt out at any time by replying "STOP" or by contacting us directly.

Message Type	Purpose	Requires Opt-In
Service Inquiry Responses	Responding to questions about our Magento services	Initiated by user
Project Updates	Sharing progress, milestones, and deliverables for active projects	Yes — contract agreement
Support & Maintenance Alerts	Notifying clients of critical issues or maintenance windows	Yes — service agreement
Proposals & Quotes	Sending service proposals or cost estimates	Yes — contact form opt-in
Promotional Messages	Service announcements, offers, or newsletters	Yes — explicit consent

• Phone number — used solely to send/receive WhatsApp messages
• Display name — as shown in your WhatsApp profile
• Message content — stored securely for project management and support purposes
• Message timestamps — for record-keeping and compliance

Meta's Role as Data Processor

WhatsApp messages are transmitted through Meta's infrastructure. Meta acts as a data processor in this context. We encourage you to review WhatsApp's Privacy Policy to understand how they process data on their platform

We do not use WhatsApp data for advertising, profiling, or sell it to third parties. Message data is used exclusively for direct business communication related to Magento development services.

How to Opt Out of WhatsApp Communications

• Reply "STOP" to any WhatsApp message from us
• Email us at info@magemad.com with subject "Opt Out – WhatsApp"
• Call us at +91 99040 83538

04 · How We Use Your Personal Data

Purpose	Data Used	Legal Basis
Respond to enquiries & provide quotes	Name, email, phone, project details	Legitimate interest / consent
Deliver Magento development services	Contact, project, communication data	Contractual necessity
Send project updates via WhatsApp / email	Phone number, email, message content	Contractual necessity / consent
Provide technical support & maintenance	Contact, communication, project data	Contractual necessity
Send promotional communications	Email, phone number	Explicit consent
Improve our website & services	Technical & usage data	Legitimate interest
Legal & regulatory compliance	All relevant data	Legal obligation

05 · Who We Share Your Data With

We do not sell, rent, or trade your personal data. We may share data only with the following categories of recipients and only to the extent necessary:

• Meta Platforms (WhatsApp): As the infrastructure provider for WhatsApp Business API. Data is processed per Meta's data processing terms.
• Cloud & Hosting Providers: Servers and cloud infrastructure used to host our website and internal tools (e.g., hosting providers bound by data processing agreements).
• CRM & Project Management Tools: Internal tools used by our team to manage client projects — access is restricted to authorised Magemad employees only.
• Legal & Regulatory Authorities: When required by law, court order, or government request under applicable Indian law.
• Professional Advisors: Accountants, lawyers, or auditors where strictly necessary for legal or financial obligations.

All third-party providers are contractually obligated to protect your data and use it only for specified purposes.

06 · How Long We Keep Your Data

Data Category	Retention Period	Reason
Contact form enquiries (no contract)	12 months	Legitimate interest
Client project data	Duration of contract + 5 years	Legal & contractual obligation
WhatsApp message history	Duration of relationship + 2 years	Support & compliance
Website technical / usage logs	90 days	Security & analytics
Marketing consent records	Until opt-out + 1 year	Proof of consent

07 · How We Protect Your Data

08 · Your Data Protection Rights

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Correction: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data where we no longer have a lawful basis to retain it.
• Right to Withdraw Consent: Withdraw consent for marketing communications or WhatsApp messages at any time without affecting prior lawful processing.
• Right to Data Portability: Request your data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interest, including direct marketing.
• Right to Nominate: Under DPDP Act 2023, nominate another individual to exercise your rights in the event of incapacity or death.

To exercise any of these rights, please contact us at info@magemad.com. We will respond within 30 days. We may need to verify your identity before processing requests.

09 · Cookies

Cookie Type	Purpose	Can Be Disabled?
Essential Cookies	Required for the website to function correctly	No
Analytics Cookies	Track visitor behaviour to improve our website (e.g., Google Analytics)	Yes
Marketing Cookies	Retargeting and advertising campaigns	Yes — via browser settings

10 · Children's Privacy

Our services are intended for business professionals and companies. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that we have inadvertently collected data from a minor, we will delete it promptly. If you believe we have collected data from a minor, please contact us immediately at info@magemad.com.

11 · Policy Changes

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page whenever changes are made.
• Notify active clients via email or WhatsApp for any significant changes to this policy.
• Post a notice on our website homepage where appropriate to inform users of important updates.

Continued use of our services after changes are posted constitutes your acceptance of the revised policy. We encourage you to review this policy periodically.

12 · Contact Us

Email: info@magemad.com
Phone: +91 99040 83538
Address: Titanium City Center, 100 Feet Ring Road, Satellite, Ahmedabad – 380015, Gujarat, India.