Privacy policy.
What we collect when you visit legit.global or send us a brief, why we collect it, and how you can control it. Written in plain English for India’s DPDP Act and the EU and UK GDPR.
01Who we are
Legit (“we”, “us”) is a digital marketing agency run by Legit Ventures Pvt Ltd, registered at Assotech Business Cresterra, Plot No 22, Sector 135, Noida, Uttar Pradesh 201304. We are the data controller under the GDPR and the data fiduciary under India’s Digital Personal Data Protection Act, 2023 (DPDP Act) for the personal data described here.
Questions about this policy: info@legit.global.
02What this policy covers
This policy covers legit.global and any enquiry you send us through the site or by email. Personal data we handle while working for clients, such as access to their ad accounts or analytics, is covered by our client contracts instead.
03What we collect
When you browse the site
Most of the site uses no cookies, analytics or advertising pixels, and serves its fonts, scripts and images from our own domain.
Our AI MVP page (/ai-mvp) is the exception. It loads Google Tag Manager, which runs Google Analytics 4, Google Ads conversion tracking and the Meta Pixel. Until you accept in the cookie bar, Google’s tags set no cookies and send only limited signals without identifiers, and the Meta Pixel doesn’t run. If you accept, these tools set cookies, receive your IP address and browser details, and record which ad brought you, the pages you view, and whether you finish the intake or book a call. They also see your intake answers (what you’re building, the AI work, your timeframe and budget range), but never your name, email or note. You can change your choice with “Cookie choice” at the foot of that page.
Our hosting provider, Netlify, keeps standard server logs: IP address, browser type, the page requested and the time of the request. These are used only to keep the site running and secure.
When you send a brief
The form asks for your name, work email, company website and the services you’re interested in. Only your name and email are required.
The AI MVP intake asks what you’re building, the AI work you need, your launch timeframe, budget range, name, work email and an optional note. It also records which campaign brought you, from the link you followed (UTM tags and Google or Meta click IDs).
When you book a call
Booking runs on Cal.com, which receives your name, email, your intake answers and the time you pick, and sends the calendar invite.
When you email us
We receive your name, email address and whatever you choose to include.
We don’t ask for sensitive data such as health, financial or government ID details. Please don’t include it in a brief.
04Why we use it
- To reply to your enquiry, arrange a call and prepare an audit or proposal. Under the GDPR we rely on steps taken at your request before entering a contract (Art. 6(1)(b)) and our legitimate interest in answering business enquiries (Art. 6(1)(f)). Under the DPDP Act we rely on the consent you give by sending the brief or email.
- To keep the site secure, using server logs. Under the GDPR we rely on our legitimate interest in protecting the site (Art. 6(1)(f)). Where the DPDP Act applies, we process this data only as it permits.
- To measure our advertising, using the tags on the AI MVP page. Under the GDPR and the DPDP Act we rely on your consent, which you can withdraw at any time with “Cookie choice” on that page.
- To see which campaign brought each enquiry, we keep the UTM tags and click IDs from the link you followed with your intake. Under the GDPR we rely on our legitimate interest in knowing which advertising works (Art. 6(1)(f)). Under the DPDP Act we rely on the consent you give by sending the intake.
We don’t sell your data, send your name, email or note to ad platforms, or add you to a mailing list unless you ask to join one.
06Transfers outside your country
Our providers may store data outside India, the EEA or the UK. When data leaves the EEA or UK, we rely on an adequacy decision or the European Commission’s Standard Contractual Clauses, with the UK addendum where needed. Transfers from India follow any restrictions the Indian government sets under the DPDP Act.
07How long we keep it
- Enquiries that don’t lead to a project: deleted 12 months after our last contact.
- Enquiries that become a project: kept for the length of the engagement, then for as long as tax and accounting law requires.
- Server logs: deleted by our hosting provider after 30 days.
- Ad and analytics cookies on the AI MVP page: kept until they expire, as set by each provider. Google Analytics cookies last up to 2 years; Google Ads and Meta Pixel cookies last 90 days.
08Your rights
Depending on where you live, you can ask us to:
- give you a copy of the personal data we hold about you
- correct or update it
- delete it
- restrict or object to how we use it (GDPR)
- send it to you or another provider in a portable format (GDPR)
- stop using it where we rely on your consent; withdrawing doesn’t affect what we did before
- let someone you nominate exercise these rights if you die or can’t act yourself (DPDP Act)
Email info@legit.global to use any of these rights. We’ll reply within 30 days and may ask you to confirm your identity first.
If you’re unhappy with our response, you can complain to the data protection authority where you live: your national supervisory authority in the EU, the Information Commissioner’s Office (ICO) in the UK, or the Data Protection Board of India once you’ve raised it with our grievance officer.
09Children
The site is meant for businesses and isn’t directed at anyone under 18. We don’t knowingly collect data from children. If you think a child has sent us their details, contact us and we’ll delete them.
10Security
The site is served over HTTPS, and access to enquiries is limited to the people who need it to reply. No system is completely secure, but if a breach affects your data we’ll tell you and the relevant authorities as the law requires.
11Links to other sites
The site links to LinkedIn and Instagram. They are run by other companies with their own privacy policies, which apply once you leave our site.
12Changes to this policy
When we change how we handle personal data, we’ll update this page and the “Last updated” date at the top.
13Contact and grievance officer
For privacy questions, requests or complaints, contact our grievance officer:
- Name: Surya Prakash
- Email: info@legit.global
- Post: Legit Ventures Pvt Ltd, Assotech Business Cresterra, Plot No 22, Sector 135, Noida, Uttar Pradesh 201304
Tell us where you want to grow.
Share a few details and we’ll come back with an honest view of what to do first, whether or not we’re the right fit.
Brief received.
Thanks. A strategist will reply within one business day.