This Privacy Policy explains how Caught by Apricot, having its registered office at Mumbai, Maharashtra, India ("Apricot", "we", "us", "our"), collects, uses, shares, and protects personal data when you visit caughtbyapricot.com (the "Website"), contact us, or use our services.
We are the Data Fiduciary for personal data collected through the Website, as defined under the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Digital Personal Data Protection Rules, 2025. Where we process personal data on behalf of our clients (for example, a client's customer lists for an email campaign), we act as a Data Processor on the client's instructions, and the client's own privacy policy governs that data.
By using the Website or providing your personal data with consent where required, you agree to this Privacy Policy. If you do not agree, please do not use the Website or provide your personal data.
1. Personal Data We Collect
Data you provide directly:
- Contact and enquiry details: name, email address, phone number, company name, designation, city, and the contents of messages you send via contact forms, email, WhatsApp, phone, or chat.
- Business information shared during proposals, onboarding, or service delivery.
- Billing information: billing name, address, GSTIN, and payment references. (Card/UPI payments are processed by third-party payment providers; we do not store full card details.)
- Recruitment data if you apply to work with us: CV/resume, work history, and related details.
Data collected automatically:
- Device and usage data: IP address, browser type, device identifiers, operating system, pages visited, time spent, referring URLs, and approximate location derived from IP.
- Cookies and similar technologies (see Section 6).
Data from third parties:
- Analytics and advertising platforms (e.g., Google Analytics, Meta), social media platforms when you interact with our pages, and publicly available business sources.
We collect only the personal data reasonably necessary for the purposes below (data minimisation).
2. Purposes of Processing
We process your personal data to:
- Respond to enquiries, prepare proposals, and communicate with you;
- Provide, manage, and improve our services and the Website;
- Generate invoices, process payments, and maintain accounts;
- Send service updates and, with your consent, marketing communications, newsletters, and promotional material (you may opt out at any time);
- Measure and improve Website performance and marketing effectiveness;
- Maintain security, prevent fraud and misuse, and enforce our Terms of Service;
- Comply with legal obligations, respond to lawful requests from authorities, and establish or defend legal claims;
- Process job applications.
3. Lawful Basis and Consent
We process personal data on the basis of your consent, or for certain legitimate uses permitted under the DPDP Act (such as voluntary provision of data for a specified purpose, compliance with law, or responding to legal process).
Where processing is based on consent, your consent is free, specific, informed, unconditional, and unambiguous, given through clear affirmative action (e.g., submitting a form, ticking a box). You may withdraw consent at any time by writing to our Grievance Officer (Section 9) or using the unsubscribe link in our emails. Withdrawal does not affect processing already carried out, and may limit our ability to provide certain services. Withdrawing consent is as easy as giving it.
4. Sharing and Disclosure of Personal Data
We do not sell your personal data. We may share personal data with:
- Service providers and processors acting on our behalf: hosting, cloud, IT, analytics, email/CRM, payment, and communication providers, bound by contractual obligations of confidentiality and security;
- Advertising and analytics platforms (e.g., Google, Meta) in connection with Website analytics and our own marketing, in accordance with their terms and your cookie choices;
- Professional advisers (lawyers, accountants, auditors) under duties of confidentiality;
- Government bodies, regulators, courts, or law enforcement where required by law or legal process;
- A successor entity in connection with a merger, acquisition, restructuring, or sale of assets, subject to this Policy.
5. Cross-Border Transfers
Some of our service providers (e.g., cloud, analytics, email tools) may store or process data outside India. We transfer personal data outside India only as permitted under the DPDP Act and rules made thereunder, including any restrictions notified by the Central Government, and subject to reasonable safeguards.
6. Cookies
We use cookies and similar technologies for: (a) essential Website functionality; (b) analytics (understanding how visitors use the Website); and (c) marketing/advertising (measuring campaigns and showing relevant ads). You can manage or disable cookies through your browser settings or our cookie banner/preferences tool where available. Disabling some cookies may affect Website functionality.
7. Data Retention
We retain personal data only as long as necessary for the purposes stated above or as required by law:
- Enquiry data: up to 24 months from last interaction;
- Client and billing records: up to 8 years, as required under tax and corporate laws;
- Recruitment data: up to 12 months after the process concludes;
- Logs and security data: as required under applicable law and rules.
Thereafter, data is securely deleted or anonymised, unless retention is required by law or for legal claims.
8. Security and Breach Response
We implement reasonable security safeguards appropriate to the nature of the data, including encryption in transit, access controls, limited need-to-know access, and contractual obligations on processors. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
In the event of a personal data breach, we will notify the Data Protection Board of India and affected data principals in the manner and timelines prescribed under the DPDP Act and Rules.
9. Your Rights and Grievance Redressal
Subject to the DPDP Act, you have the right to:
- Access a summary of your personal data we process and the processing activities;
- Correction and erasure of your personal data;
- Withdraw consent at any time;
- Grievance redressal through our designated officer;
- Nominate another individual to exercise your rights in the event of death or incapacity.
To exercise any right, contact our Grievance Officer:
Name: Grievance Officer, Caught by Apricot Email: hello@caughtbyapricot.com Address: Mumbai, Maharashtra, India
We will acknowledge and respond to verified requests within the timelines prescribed under applicable law. We may need to verify your identity before acting on a request. If you are not satisfied with our response, you may approach the Data Protection Board of India.
Please do not provide false or impersonated information, suppress material information, or make frivolous grievances; the DPDP Act places corresponding duties on data principals.
10. Children's Data
The Website and our services are intended for businesses and individuals aged 18 and above. We do not knowingly collect personal data of children. If you believe a child has provided us personal data, contact our Grievance Officer and we will delete it.
11. Visitors Outside India
If you access the Website from outside India (including the EU/UK), note that your data will be processed in India and other locations as described above. Where the EU/UK GDPR applies to you, you may additionally have rights to data portability, restriction, and objection, and the right to lodge a complaint with your local supervisory authority; you may exercise these by contacting our Grievance Officer.
12. Third-Party Links
The Website may contain links to third-party websites, platforms, and tools. We are not responsible for their content or privacy practices. Please review their privacy policies separately.
13. Changes to This Policy
We may update this Privacy Policy from time to time. The revised version will be posted on this page with an updated date. Material changes may also be notified via the Website or email. Your continued use of the Website after changes constitutes acceptance, and where law requires, we will seek fresh consent.
14. Contact
Caught by Apricot Mumbai, Maharashtra, India Email: hello@caughtbyapricot.com · Phone: +91 70458 48454