Business Identification
GROWTHAXIS CONSULTING is the trade name of MOHAMMAD ANAS, Sole Proprietor, a proprietorship registered under Indian law. GSTIN: 09EDFPA1232Q2ZG. Principal place of business: 1st Floor, 102, KDA Colony Road, Lal Bangla, Kanpur, Kanpur Nagar, Uttar Pradesh - 208007, India. All Website contact-form submissions are intended to route to hello@growthaxisindia.com. Published working hours are 10:00 AM to 7:30 PM.
1. Scope and Status of this Policy
This Privacy Policy explains how GrowthAxis Consulting collects, uses, stores, shares and protects personal data and related business information through the Website, enquiries, quotations, client engagements, marketplace-support work, website-development work, creative production, email, telephone, WhatsApp (if enabled), field meetings and other business communications. Indian data-protection law is presently in transition. As at the Effective Date, the Digital Personal Data Protection Act, 2023 ('DPDP Act') and the Digital Personal Data Protection Rules, 2025 ('DPDP Rules') are only partly in force. Most substantive processing obligations and Data Principal rights are scheduled to commence on 13 May 2027. This Policy is drafted to comply with currently applicable law and, where stated, to align GrowthAxis prospectively with the substantive DPDP framework. A statement in this Policy that GrowthAxis will accept a request as a matter of policy does not falsely represent that a provision not yet commenced is already legally enforceable.
2. Information We May Collect
- Identity and contact information: name, business name, designation, email address, telephone number, postal address and communication preferences.
- Business and enquiry information: service requirements, project brief, quotation discussions, product categories, marketplace plans, commercial context and other information voluntarily supplied.
- Client and project materials: product data, images, videos, brand assets, catalogues, price lists, claims, scripts, logos, website content, packaging content, business profiles and feedback.
- Marketplace information: seller-account identifiers, catalogue and listing data, store information, order-related information made available for agreed management tasks, and delegated access details.
- Authentication and access information: credentials or access tokens supplied for a defined project. Passwords and similar credentials are treated as highly sensitive operational information and should be shared only through the agreed secure method.
- Website and technical information: IP address, browser/device information, timestamps, referring pages, basic security logs and similar information generated by the Website or hosting environment.
- Cookie and analytics information where cookies, analytics or advertising technologies are enabled.
- Communication records: emails, contact-form submissions, support correspondence, meeting notes, telephone-call details and WhatsApp messages where used.
- Offline information obtained through field meetings, business visits, exhibitions, referrals or direct outreach.
- Billing and tax information required for quotations, invoices, accounting, GST compliance and payment reconciliation.
- Career information submitted to careers@growthaxisindia.com, including CVs, portfolios and employment-related information.
3. Purposes of Processing
GrowthAxis may process information to respond to enquiries and prepare proposals; perform agreed services; manage marketplace accounts and listings to the extent authorised; build and support websites and integrations; create branding, graphics, catalogues, videos and AI-assisted deliverables; maintain billing, GST, accounting and statutory records; provide project communications and support; detect fraud, abuse and security incidents; maintain backups and dispute records; recruit personnel; comply with law; and send promotional communications only where lawfully permitted.
4. Current Legal Basis and DPDP Transition
Where the presently applicable Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 apply, GrowthAxis will obtain consent and provide notice where required, use information for lawful and stated purposes, and apply reasonable security practices. Passwords and certain financial or health information may fall within the 2011 sensitive-personal-data framework if collected. When the relevant substantive DPDP provisions commence, GrowthAxis intends to process digital personal data on a lawful ground recognised by the DPDP Act, including consent or a statutorily recognised legitimate use where applicable, and to provide notice in the form and manner required by the then-operative law.
5. Consent, Choice and Withdrawal
Where processing is based on consent, the person may withdraw that consent through the same or a reasonably comparable channel by writing to the privacy contact. Withdrawal will apply prospectively and may affect GrowthAxis's ability to provide a requested service. Withdrawal does not require GrowthAxis to erase information that must lawfully be retained for tax, accounting, fraud prevention, contractual claims, legal proceedings or other statutory purposes.
6. Data Minimisation and Accuracy
GrowthAxis seeks to collect information reasonably necessary for the stated purpose. Clients are requested not to provide unnecessary personal data, Aadhaar numbers, banking credentials, health records or other highly sensitive information unless specifically required and lawfully handled for the engagement. Clients should keep contact, billing and project information accurate.
7. Marketplace Credentials and Delegated Access
Where a client authorises access to a marketplace, hosting account, domain registrar, payment gateway, advertising account or other third-party service, GrowthAxis will use the access for the agreed purpose and subject to the client's instructions and the third party's rules. Clients should prefer role-based or delegated access over sharing master passwords wherever supported. GrowthAxis may require credential rotation after completion or termination.
8. Cookies, Analytics and Tracking
The Website may use strictly necessary cookies for security, session management or technical operation. Non-essential analytics, advertising or tracking technologies may be added later. If introduced, GrowthAxis will update the Cookie Policy and implement consent or choice mechanisms to the extent required by then-applicable law.
9. Service Providers and Processors
GrowthAxis may use hosting providers, email providers, cloud-storage services, communication tools, accounting systems, design/video software, AI tools, analytics providers, payment processors and other vendors where reasonably necessary. Access will be limited to the relevant purpose and subject to appropriate contractual, technical or organisational controls.
10. Third-Party Platforms
Client projects may require information to be processed through Amazon, Flipkart, Meesho, JioMart, Blinkit, domain registrars, hosting providers, payment gateways, AI providers, social-media services or other third-party systems. Those providers operate under their own terms and privacy notices.
11. Cross-Border Processing
Some cloud, AI, communication, hosting or software providers may process or store information outside India. GrowthAxis will assess such use against applicable Indian law and contractual safeguards. When the DPDP cross-border provisions become operative, processing outside India will be subject to restrictions, if any, notified by the Central Government and the applicable Rules.
12. Security Safeguards
GrowthAxis applies reasonable administrative, technical and organisational safeguards appropriate to the nature of the information, including access limitation, credential hygiene, controlled sharing, device/account security, backups where appropriate and incident response. No internet, cloud or electronic-storage system is completely immune from compromise.
13. Personal Data Breach and Security Incidents
GrowthAxis will investigate suspected unauthorised access, disclosure, alteration, loss or destruction of personal data and take reasonable containment and remediation measures. Notifications to affected persons, the Data Protection Board of India or other authorities will be made when and to the extent required by the law operative at the relevant time.
14. Retention
GrowthAxis retains information only for as long as reasonably necessary for the relevant purpose, subject to contractual, tax, accounting, GST, fraud-prevention, warranty/support, limitation and litigation requirements. Credentials should be removed, disabled or rotated when no longer required.
15. Requests Concerning Personal Data
A person may write to the privacy contact to request access to information held about them, correction or updating of inaccurate information, or deletion of information no longer required, subject to applicable law and lawful retention. GrowthAxis will also prepare to support the access, correction, erasure, grievance and nomination rights under sections 11 to 14 of the DPDP Act when those provisions become operative. Before the relevant commencement date, such assistance is provided as a matter of policy and applicable existing law, not as a representation that a future statutory right is already in force.
16. Children's Data
GrowthAxis's services are directed primarily to businesses and professionals, not children. GrowthAxis does not intentionally seek personal data from children for ordinary Website enquiries. Where a project necessarily involves children's personal data, the client must disclose that fact in advance. Once the DPDP children's-data provisions commence, GrowthAxis will apply the statutory requirements then in force.
17. Government, Legal and Security Disclosures
Information may be disclosed where reasonably necessary to comply with law, binding legal process, a lawful request by a competent authority, to establish or defend legal claims, protect system or account security, or investigate suspected fraud, infringement or unlawful conduct.
18. Marketing Communications
GrowthAxis may communicate with existing or prospective business contacts about relevant services where lawfully permitted. Recipients may request that promotional email communications stop. Operational messages concerning active projects, invoices, security, legal notices or support are not optional marketing.
19. Client Responsibility for Personal Data Supplied to GrowthAxis
A client that supplies personal data, customer lists, employee information, patient-related material, testimonials, photographs, voices or other third-party information represents that it has the lawful authority, notice, consent or other basis necessary for GrowthAxis to use that material for the agreed project.
20. Changes to this Policy
GrowthAxis may update this Policy to reflect changes in law, technology, services or processing practices. The current version will show its Last Updated date.
Contact Details
Privacy requests and grievances: hello@growthaxisindia.com. Existing-client operational support: support@growthaxisindia.com. Postal address: 1st Floor, 102, KDA Colony Road, Lal Bangla, Kanpur, Kanpur Nagar, Uttar Pradesh - 208007, India Working hours: 10:00 AM to 7:30 PM. Communications received outside working hours may be reviewed on the next working day. GROWTHAXIS CONSULTING