Privacy Policy

This Privacy Policy applies to Instinctive Solutions Global Pvt. Ltd. (“Instinctive Studio”, “we”, “us”, or “our”) and to personal information processed through instinctive.studio, enquiry forms, email and telephone communications, proposals, client engagements, project-delivery channels, and related business operations.

This policy should be read together with our Terms and Conditions, Refunds and Cancellations Policy, and any project-specific proposal, statement of work, order form, or agreement. Where a project agreement contains specific data-protection terms, those terms will apply to that engagement to the extent of any inconsistency.

We may collect information you provide directly, including your name, business email address, phone number, company name, job title, location, service interests, enquiry details, correspondence, meeting notes, proposal responses, feedback, testimonials, billing and invoice details, and support requests.

During a client engagement, you may also provide project content, brand assets, documents, images, recordings, user-research material, account identifiers, access credentials, technical information, and other files needed to perform the agreed services. Please do not send sensitive personal information or confidential credentials unless we have specifically requested them and an appropriate secure method has been agreed.

If you provide information about another person, you confirm that you are authorised to do so and, where required, have provided any necessary notice or obtained any necessary consent.

When you visit or interact with our website, we and our technology providers may automatically collect technical and usage information. This can include IP address, browser and device type, operating system, device identifiers, language, referring and exit pages, pages or content viewed, dates and times of access, approximate location inferred from IP address, clicks, scrolling, form interactions, performance data, and security or diagnostic logs.

We use this information to operate and secure the website, detect errors and abuse, understand how visitors use our pages, evaluate campaigns, and improve content, accessibility, performance, and user experience. Information may be collected through server logs, cookies, pixels, tags, local storage, and similar technologies.

Depending on the features and campaigns enabled at a given time, our website may use essential cookies and services such as Google Analytics, Meta/Facebook Pixel, LinkedIn Insight Tag, and Google reCAPTCHA. These providers may set or read cookies or similar identifiers and process technical, usage, or campaign information in accordance with their own terms and privacy notices. Non-essential technologies will be managed through notice and consent controls where required by applicable law.

We may introduce product-analytics, heatmap, feedback, or session-replay tools in the future, such as Hotjar or an equivalent service. If enabled, we will configure appropriate masking or suppression controls, seek to prevent sensitive form fields and credentials from being captured, and update our website notice or consent choices where required. Mention of a possible provider in this policy does not mean that it is active at all times.

You can manage cookies through available website controls and your browser or device settings. Blocking some technologies may affect functionality or prevent us from accurately remembering your choices.

We use personal information to respond to enquiries; assess requirements; arrange calls and demonstrations; prepare proposals and contracts; provide, manage, support, and improve our design, technology, strategy, and related services; collaborate on projects; authenticate access; deliver digital work; process payments and invoices; maintain business and tax records; and communicate operational updates.

We may also use information to secure our website and systems; prevent fraud, spam, misuse, and unauthorised access; troubleshoot and analyse performance; understand website and campaign effectiveness; improve our offerings; enforce agreements; protect our rights and those of others; respond to lawful requests; and comply with legal, regulatory, accounting, and professional obligations.

We will not use personal information for a materially unrelated purpose without providing an appropriate notice or obtaining consent where required.

Where applicable, we process personal information on the basis of your consent, including when you voluntarily submit an enquiry or choose to receive a communication. Consent requests will be presented in clear language and should be limited to information reasonably necessary for the stated purpose. You may withdraw consent by contacting us or using an available preference control. Withdrawal does not affect processing that was lawful before withdrawal and may affect our ability to provide a requested optional feature.

We may also process information where it is reasonably necessary to take steps at your request, perform or administer a contract, comply with law, protect persons or systems, establish or defend legal claims, or for another use permitted under applicable data-protection law. We aim to collect only information that is relevant and reasonably necessary for the purpose communicated to you.

Payments may be processed by third-party payment providers, including Razorpay. We do not intentionally store complete card numbers, CVV, OTPs, UPI PINs, or online-banking credentials on our website. Payment providers may independently process transaction, identity, device, fraud-prevention, and settlement information under their own terms and privacy notices.

We do not sell or rent personal information. We may share it, on a need-to-know basis, with providers that support website hosting, content management, cloud storage, email, communications, analytics, security, payment processing, accounting, legal or professional advice, and project delivery. We may also share information with an authorised client representative, project collaborator, or subcontractor where required for the agreed engagement and subject to appropriate confidentiality obligations.

Information may be disclosed to regulators, courts, law-enforcement bodies, or other authorities where required by law or a valid process; to protect rights, safety, and systems; or as part of a merger, restructuring, financing, sale, or transfer of all or part of our business, subject to appropriate safeguards.

Some service providers, cloud platforms, analytics services, collaboration tools, or project systems may process or store information outside India. Where personal information is transferred or made available internationally, we will take reasonable steps to use providers and arrangements consistent with applicable legal requirements and any restrictions notified by the Government of India.

Our website and communications may link to or integrate with third-party websites, social networks, payment pages, embedded content, or collaboration platforms. Their privacy practices are governed by their own notices, and we are not responsible for third-party services that we do not control. You should review their terms before providing personal information.

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, the duration of a client relationship, contractual or project commitments, record-keeping and backup cycles, legal and tax requirements, fraud prevention, the establishment or defence of claims, and dispute resolution. Retention periods can vary according to the type of record and the applicable project agreement. When information is no longer required, we may delete, anonymise, or securely archive it as appropriate.

We use reasonable administrative, organisational, and technical safeguards designed to protect personal information against unauthorised access, alteration, disclosure, loss, or misuse. These may include access controls, limited permissions, secure services, confidentiality commitments, and operational reviews. No transmission or storage system is completely secure, so we cannot guarantee absolute security. If an incident affects personal information, we will assess and respond to it in accordance with applicable law.

Subject to applicable law and relevant exceptions, you may ask us for a summary of personal information being processed and related processing activities; request correction, completion, or updating of inaccurate or incomplete information; request erasure where retention is no longer required; withdraw consent where processing is based on consent; or raise a grievance about our handling of your information. You may also have the right to nominate another individual to exercise specified rights in the event of death or incapacity, as provided by applicable law.

To make a request, email website@instinctive.studio with enough detail for us to understand and locate the relevant information. We may take reasonable steps to verify your identity and authority before acting, and we may retain information where required by law, contract, security needs, or the establishment or defence of legal claims. We will respond within the period required by applicable law.

Our business services and website are intended for persons aged 18 and above. We do not knowingly solicit personal information from children. If you believe a child has provided information to us, please contact us so that we can review and take appropriate action.

We may update this policy to reflect changes in our services, technologies, providers, or legal obligations. The revised version will be posted on this page with an updated “Last Updated” date. Material changes may also be communicated through an appropriate additional notice where required.

Data Protection Contact and Grievance Officer: Vishal Pulikottil

Entity: Instinctive Solutions Global Pvt. Ltd.

Email: website@instinctive.studio

Phone: +91 96207 84458

Address: WeWork Manyata Redwood, 9th Floor, Block D-3, 302, Venkateshapura, Bangalore North, Bangalore - 560045, Karnataka, India.