Privacy notice
How BMU Marketing uses your personal data, under India's Digital Personal Data Protection Act, 2023. Version 2026-10.
What we keep, why, and for how long
| Data | Why | How long |
|---|---|---|
| Name, phone, email and company from enquiries | Reply to you, send a proposal and deliver the work you buy | Lost leads: 24 months, then anonymised |
| Briefs, files and messages you send | Deliver and improve the work, keep a record of approvals | While you are a client, then 3 years |
| Invoices and payments | Billing and tax law (GST) | 8 years, as the law requires |
| Sign-in codes and device sessions | Keep your account secure | Codes: 30 days; sessions: until you sign out |
| Website and app usage | Fix problems and measure what works (only with your consent) | 14 months |
Your rights
- Ask for a copy of the personal data we hold about you.
- Ask us to correct or complete it.
- Ask us to delete it, unless the law makes us keep it (for example invoices for GST).
- Withdraw consent for marketing or WhatsApp updates at any time. Withdrawing is as easy as giving it.
- Complain to the Data Protection Board of India if you are not happy with our answer.
We answer every request within 30 days.