Privacy Policy
Last updated 20 September 2026. Written in plain English. If anything here is unclear, email sid@colleviate.com and we will explain it.
Who we are
Colleviate is a marketing agency based in Mumbai, India. We are the data controller for the personal data described here. You can reach us at sid@colleviate.com.
What we collect
- What you send us. If you email us or fill in a form, we hold your name, email address, company and whatever you chose to tell us about your brand.
- Site usage. Standard technical data such as pages viewed, approximate location, browser and referring source, collected through Google Analytics 4 and only after you accept analytics cookies.
- Client project material. What you share with us during an engagement: brand assets, performance exports, and access to advertising or analytics accounts. That is governed by the contract between us, not by this page alone.
We do not buy personal data, and we do not scrape personal profiles to build prospect lists.
Why we use it
To reply to enquiries, to carry out work we have been engaged to do, to invoice for it, to keep the site secure, and to understand in aggregate which pages are useful. Our lawful bases are legitimate interest for replying to business enquiries, contract for client work, and your consent for analytics cookies.
Cookies
The site sets no non-essential cookies until you accept them, and declining leaves it fully functional. Measurement runs through Google Tag Manager, and the container is not requested at all unless you agree to analytics, so no measurement request is made before you choose. Consent Mode defaults are set to denied before any other script runs, and the advertising signals stay denied permanently because we run no advertising tags. Your choice is stored in this browser, and you can change it at any time using the cookie preferences link in the footer.
Who else sees it
Service providers who help us operate: our email provider, our hosting provider, and Google Analytics. Where an engagement needs a specialist, such as a production crew or a media partner, we tell you before anything is shared. We do not sell personal data to anyone, for any purpose.
Where it is held
Our providers store data on servers in India, the EU and the United States. Where data leaves India or the EEA it travels under the provider’s standard contractual clauses.
How long we keep it
Enquiry email: three years from the last exchange, so we remember the conversation if you come back. Client project material: seven years after the engagement ends, the period Indian tax and contract records require. Analytics: 14 months. You can ask us to delete anything sooner.
Your rights
Under India’s Digital Personal Data Protection Act, and under the GDPR if you are in the EU or the UK, you can ask for a copy of your data, ask us to correct or delete it, or withdraw consent. Email sid@colleviate.com and we will respond within 30 days. If you are not satisfied you can complain to the Data Protection Board of India, or to your local supervisory authority.
Changes
If this policy changes materially we will update the date at the top and, where we hold your email for an active engagement, tell you directly.