Privacy policy.
What we collect when you visit legit.global or send us a brief, why we collect it, and how you can control it. Written in plain English for India’s DPDP Act and the EU and UK GDPR.
Who we are
Legit (“we”, “us”) is a digital marketing agency run by Legit Ventures Pvt Ltd, registered at Assotech Business Cresterra, Plot No 22, Sector 135, Noida, Uttar Pradesh 201304. We are the data controller under the GDPR and the data fiduciary under India’s Digital Personal Data Protection Act, 2023 (DPDP Act) for the personal data described here.
Questions about this policy: info@legit.global.
What this policy covers
This policy covers legit.global and any enquiry you send us through the site or by email. Personal data we handle while working for clients, such as access to their ad accounts or analytics, is covered by our client contracts instead.
What we collect
When you browse the site
Every page loads Google Analytics 4. Until you accept in the cookie bar, it sets no cookies and sends Google only limited signals without identifiers. If you accept, it sets cookies and receives your IP address, browser details, the pages you view and how you reached the site. When you send a brief, it also records which services you picked, but not your name, email, website or message.
Our AI MVP page (/ai-mvp) also runs Google Ads conversion tracking and the Meta Pixel, through Google Tag Manager. The Meta Pixel doesn’t run until you accept. If you accept, these tools also record which ad brought you and whether you finish the intake or book a call. They see your intake answers (what you’re building, the AI work, your timeframe and budget range), but never your name, email or note.
You can change your choice with “Cookie choice” at the foot of any page. Apart from these tags, we serve fonts, scripts and images from our own domain.
Our hosting provider, Netlify, keeps standard server logs: IP address, browser type, the page requested and the time of the request. These are used only to keep the site running and secure.
When you send a brief
The form asks for your name, work email, company website and the services you’re interested in. Only your name and email are required.
The AI MVP intake asks what you’re building, the AI work you need, your launch timeframe, budget range, name, work email and an optional note. It also records which campaign brought you, from the link you followed (UTM tags and Google or Meta click IDs).
When you book a call
Booking runs on Cal.com, which receives your name, email, your intake answers and the time you pick, and sends the calendar invite.
When you email us
We receive your name, email address and whatever you choose to include.
We don’t ask for sensitive data such as health, financial or government ID details. Please don’t include it in a brief.
Why we use it
- To reply to your enquiry, arrange a call and prepare an audit or proposal. Under the GDPR we rely on steps taken at your request before entering a contract (Art. 6(1)(b)) and our legitimate interest in answering business enquiries (Art. 6(1)(f)). Under the DPDP Act we rely on the consent you give by sending the brief or email.
- To keep the site secure, using server logs. Under the GDPR we rely on our legitimate interest in protecting the site (Art. 6(1)(f)). Where the DPDP Act applies, we process this data only as it permits.
- To see how people find and use the site, and to measure our advertising, using Google Analytics on every page and the extra tags on the AI MVP page. Under the GDPR and the DPDP Act we rely on your consent, which you can withdraw at any time with “Cookie choice” at the foot of any page.
- To see which campaign brought each enquiry, we keep the UTM tags and click IDs from the link you followed with your intake. Under the GDPR we rely on our legitimate interest in knowing which advertising works (Art. 6(1)(f)). Under the DPDP Act we rely on the consent you give by sending the intake.
We don’t sell your data, send your name, email or note to ad platforms, or add you to a mailing list unless you ask to join one.
Transfers outside your country
Our providers may store data outside India, the EEA or the UK. When data leaves the EEA or UK, we rely on an adequacy decision or the European Commission’s Standard Contractual Clauses, with the UK addendum where needed. Transfers from India follow any restrictions the Indian government sets under the DPDP Act.
How long we keep it
- Enquiries that don’t lead to a project: deleted 12 months after our last contact.
- Enquiries that become a project: kept for the length of the engagement, then for as long as tax and accounting law requires.
- Server logs: deleted by our hosting provider after 30 days.
- Ad and analytics cookies: kept until they expire, as set by each provider. Google Analytics cookies last up to 2 years. Google Ads and Meta Pixel cookies, set only on the AI MVP page, last 90 days.
Your rights
Depending on where you live, you can ask us to:
- give you a copy of the personal data we hold about you
- correct or update it
- delete it
- restrict or object to how we use it (GDPR)
- send it to you or another provider in a portable format (GDPR)
- stop using it where we rely on your consent; withdrawing doesn’t affect what we did before
- let someone you nominate exercise these rights if you die or can’t act yourself (DPDP Act)
Email info@legit.global to use any of these rights. We’ll reply within 30 days and may ask you to confirm your identity first.
If you’re unhappy with our response, you can complain to the data protection authority where you live: your national supervisory authority in the EU, the Information Commissioner’s Office (ICO) in the UK, or the Data Protection Board of India once you’ve raised it with our grievance officer.
Children
The site is meant for businesses and isn’t directed at anyone under 18. We don’t knowingly collect data from children. If you think a child has sent us their details, contact us and we’ll delete them.
Security
The site is served over HTTPS, and access to enquiries is limited to the people who need it to reply. No system is completely secure, but if a breach affects your data we’ll tell you and the relevant authorities as the law requires.
Links to other sites
The site links to LinkedIn and Instagram. They are run by other companies with their own privacy policies, which apply once you leave our site.
Changes to this policy
When we change how we handle personal data, we’ll update this page and the “Last updated” date at the top.
Contact and grievance officer
For privacy questions, requests or complaints, contact our grievance officer:
- Name: Surya Prakash
- Email: info@legit.global
- Post: Legit Ventures Pvt Ltd, Assotech Business Cresterra, Plot No 22, Sector 135, Noida, Uttar Pradesh 201304
Tell us where you want to grow.
Share a few details and we’ll come back with an honest view of what to do first, whether or not we’re the right fit.
Brief received.
Thanks. A strategist will reply within one business day.