Privacy Policy

We may collect the following categories of information:

• ///Personal DetailsName, email address, phone number, social media handles, and business name — typically when you contact us or fill out a form on the Site.
• ///Technical DataBrowser type, device information, IP address, and general usage patterns — collected automatically via cookies or analytics tools.
• ///Project InformationAny content, files, images, logins, or brand assets you voluntarily share with us for a design or development project.

We do not knowingly collect sensitive personal data (such as financial account details, health information, or government IDs) unless you explicitly provide it in connection with a specific project — for example, payment details required to process an invoice.

We use collected information to:

• ///Communicate with you about inquiries, proposals, and ongoing projects
• ///Deliver design and development Services
• ///Improve our website and overall user experience
• ///Showcase completed work in our portfolio or marketing materials (only with your permission — see Section 6 of our Terms of Service)

We never sell your personal data.

We process your personal data based on: your consent (e.g., when you submit a contact form), the necessity to perform a contract with you (e.g., delivering a project you've hired us for), and our legitimate business interests (e.g., improving our Site), consistent with India's Digital Personal Data Protection Act, 2023 ("DPDP Act") and its associated Rules.

Your data is stored using platforms such as Google Workspace and Notion, with access restricted to team members who need it to deliver your project. We take reasonable technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction — though no method of storage or transmission over the internet is 100% secure.

We do not share your personal information with third parties, except:

• ///With your explicit consent
• ///With service providers who work directly with us to deliver Services (e.g., payment processors, hosting providers, form or analytics tools)
• ///Where required by law, legal process, or a valid request from a government or regulatory authority

Under India's Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, you have the right to:

• ///Request access to the personal data we hold about you
• ///Request correction or erasure of your data
• ///Withdraw consent to our processing of your data at any time (note: this may affect our ability to continue delivering a Service you've engaged us for)
• ///Nominate another individual to exercise these rights on your behalf in the event of death or incapacity
• ///File a grievance with us, and escalate to the Data Protection Board of India if unresolved

To exercise any of these rights, email us at support@bunchstudios.in. We will respond within a reasonable timeframe.

We retain personal and project data only for as long as necessary to deliver the Services, maintain our business records, and comply with legal obligations. Once a project is complete and there's no ongoing need (e.g., support/maintenance), we will delete or anonymize data on request.

Our Site may use cookies and similar tracking technologies to enhance your browsing experience and understand how visitors use the Site. You can disable cookies through your browser settings at any time; some parts of the Site may not function as intended if you do.

Our Site may contain links to external websites (e.g., our social media profiles, client sites in our portfolio). We are not responsible for the privacy practices or content of those third-party sites. We encourage you to review their privacy policies separately.

Our Site and Services are not directed at individuals under the age of 18, and we do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us so we can delete it.

In certain cases, delivering a project requires access to Client accounts or platforms (e.g., domain registrars, email services, form tools, analytics platforms, hosting). Where this applies:

• ///Any credentials shared with us are treated as strictly confidential.
• ///We use them only for the agreed project purpose and do not retain, share, or access them beyond what is necessary.
• ///We recommend Clients change passwords after project delivery, as a general security practice.
• ///We are not responsible for issues arising from pre-existing misconfigurations, vulnerabilities, or security gaps in third-party platforms that predate our involvement.

We may revise this Policy from time to time to reflect changes in our practices or legal requirements. Updates will be posted on this page with a revised effective date. Continued use of the Site after changes are posted constitutes acceptance of the updated Policy.

Questions or concerns about this Privacy Policy? Reach out to: