Privacy Policy

Effective Date: 30th September 2014

Last Updated: 21st March 2023​​

WeMode Inventive Services (“WeMoDe”, “we”, “our”, or “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, share, and protect personal information when you visit our website, contact us, engage us for services, or otherwise interact with us.​​

This policy is designed for an Indian digital services company and is intended to align with applicable Indian data protection requirements, including the Digital Personal Data Protection Act, 2023 (“DPDP Act”), as applicable, and the Information Technology Act, 2000 together with related rules on reasonable security practices and sensitive personal data or information.​​

1. Who we are

WeMode Inventive Services is a digital agency providing services such as website development, mobile app development, UI/UX design, branding, graphic design, maintenance, support, and related digital consulting services.​

For the purposes of applicable privacy law, WeMoDe may act as a data fiduciary / controller when we decide why and how your personal data is processed, and may act as a data processor / service provider when we process data on behalf of our clients under contract.​

2. Who this policy applies to

This Privacy Policy applies to:​​

  • Visitors to our website.​

  • Prospective clients who contact us for proposals, consultations, or quotations.​

  • Existing clients and their representatives.​

  • Vendors, partners, and business contacts.​

  • Individuals whose personal data may be shared with us by our clients in the course of a project, where we process such data on the client’s behalf.​

3. Information we collect

Depending on how you interact with us, we may collect the following categories of information:​​

  • Identity information, such as your name, company name, job title, and business profile details.​

  • Contact information, such as email address, phone number, postal address, and country.​

  • Inquiry and communication data, such as messages submitted through forms, email content, support requests, project requirements, and meeting notes.​

  • Technical information, such as IP address, browser type, device information, operating system, approximate location, referral URLs, and usage analytics.​

  • Project and account data, such as login credentials for project systems, invoices, contracts, deliverables, and support history.​

  • Payment and billing information, such as billing contact details and transaction-related records, usually processed through approved payment or banking channels.​

  • Client-provided data, which may include personal data that our clients ask us to host, analyze, maintain, migrate, design for, or otherwise process as part of a project.​

We do not intentionally collect unnecessary personal data, and under the DPDP Act consent should be limited to data necessary for the specified purpose.​

4. Sensitive data

Please do not send us sensitive personal data unless it is strictly necessary for a lawful business purpose. Under India’s 2011 SPDI framework, sensitive personal data may include items such as passwords, financial information, health data, biometric information, and similar categories.

If sensitive data is required for a project or legal purpose, we will process it only to the extent necessary, with appropriate security measures and subject to contractual and legal safeguards.​​

5. How we collect data

We may collect personal data in the following ways:​

  • Directly from you when you fill out a contact form, request a proposal, sign up for updates, apply for a role, or communicate with us.​

  • During meetings, calls, demos, workshops, onboarding, or support interactions.​

  • Automatically through website technologies such as cookies, server logs, analytics tools, and similar technologies, where used.​

  • From your employer or business representatives when they engage us.​

  • From clients who instruct us to process data on their behalf.​

6. Why we use your information

We process personal data only for lawful purposes. Under the DPDP Act, processing may be based on consent or certain legitimate uses recognized by law.​

We may use your information to:​

  • Respond to inquiries, demo requests, and consultation requests.​

  • Provide website development, mobile app development, design, branding, maintenance, and support services.​

  • Manage proposals, contracts, invoicing, and client relationships.​

  • Deliver technical support, troubleshoot issues, and improve service quality.​

  • Communicate project updates, milestones, and service notices.​

  • Protect our systems, prevent fraud, and maintain security.​​

  • Comply with legal obligations, regulatory requirements, court orders, or lawful government requests.​

  • Improve our website, offerings, user experience, and internal operations.​

Where consent is the basis for processing, the DPDP Act requires consent to be free, specific, informed, unconditional, and unambiguous, and capable of being withdrawn.​

7. Legal basis and consent

Where required, we seek your consent before collecting or processing your personal data. The DPDP Act requires notice about what data is processed, for what purpose, and how rights may be exercised, and also allows withdrawal of consent with comparable ease.​

In other situations, we may process your data where it is necessary to perform a contract, respond to a request initiated by you, comply with law, protect our legitimate business interests in a lawful manner, or provide services requested by our clients under a valid contract.​​

If you withdraw consent, we may stop certain services that depend on that consent, though prior lawful processing remains valid and some retention may continue where required by law or contract.​

8. Cookies and analytics

Our website may use cookies, analytics tools, and similar technologies to understand website performance, improve user experience, remember preferences, and support security and administration.​

You may control cookies through your browser settings, though some site features may not function properly if cookies are disabled.​

If you use third-party tools on the site, their own privacy terms may also apply.​

9. Sharing of personal data

We do not sell personal data. We may share personal data only where reasonably necessary and subject to appropriate protections.

We may share data with:​​

  • Employees, contractors, and team members who need access for service delivery.​

  • Hosting providers, cloud platforms, analytics providers, communication tools, CRM systems, and other service providers engaged under contract.​

  • Payment processors, accountants, auditors, legal advisors, and insurers where needed.​

  • Government authorities, regulators, law enforcement agencies, or courts where disclosure is required by law.​​

  • Clients, where you are their representative or where data is processed under a client engagement.​

  • Successors in the event of a restructuring, merger, acquisition, or transfer of business, subject to lawful safeguards.​

Under the older Indian SPDI framework, disclosure of sensitive data generally requires consent unless disclosure is mandated by law or government process.

10. International clients and overseas data processing

Because WeMoDe serves clients outside India, personal data may be processed across borders in connection with service delivery, support, hosting, remote collaboration, or subcontracted tools.​​

Under Section 16 of the DPDP Act, cross-border transfer of personal data is generally permitted unless the Central Government restricts transfer to particular countries or territories by notification.​​

Where we process data for overseas clients, we may act as a processor under their instructions, and the client may remain responsible for determining the legal basis, notices, and permissions required under their local laws.​

If you are an overseas client or an end user located outside India, you acknowledge that your information may be accessed, stored, or processed in India and in other jurisdictions where our infrastructure or service providers operate, subject to contractual, legal, and security safeguards.​​

11. If we serve clients abroad

If our client is located abroad, the following additional points generally apply:​​

  • The client is usually responsible for ensuring it has the rights and permissions needed to share personal data with us for the project.​

  • We process such data only on documented instructions, for the agreed scope of work, and under confidentiality obligations.​

  • We may sign a Data Processing Agreement, confidentiality agreement, or security terms where required.​

  • If foreign laws such as GDPR, UK GDPR, CCPA/CPRA, or other local frameworks apply to the client’s project, compliance responsibilities should be contractually allocated between the client and WeMoDe.​

  • Where conflict exists between this website privacy policy and a client service agreement, the client contract will govern project-specific processing.​

12. Data security

Indian law requires reasonable security safeguards, and the DPDP Act specifically requires data fiduciaries to protect personal data and implement appropriate technical and organizational measures to prevent breaches.​​

Accordingly, we maintain reasonable administrative, technical, contractual, and physical safeguards, which may include:​​

  • Role-based access controls and confidentiality obligations.​

  • Secure hosting and password protection.​

  • Encryption in transit where appropriate.​

  • Regular updates, patching, backups, and monitoring.​

  • Vendor due diligence and contractual controls.​

No system is fully secure, so while we take reasonable measures, we cannot guarantee absolute security.​

13. Data retention

The DPDP Act requires erasure when consent is withdrawn or the purpose is no longer served, unless retention is necessary to comply with law.​

We retain personal data only for as long as necessary for:​​

  • The purpose for which it was collected.​

  • Ongoing client relationships and support obligations.​

  • Legal, tax, accounting, audit, fraud prevention, dispute resolution, or recordkeeping requirements.​

  • Contract enforcement and internal business continuity.​

Once data is no longer required, we will delete, anonymize, or securely dispose of it where reasonably practicable.​​

14. Your rights

Subject to applicable law, you may have the right to:​

  • Request a summary of personal data we process about you.​

  • Request correction, completion, or updating of inaccurate or incomplete personal data.​

  • Request erasure of personal data, subject to legal and contractual retention needs.​

  • Withdraw consent where processing is based on consent.​

  • Use available grievance redressal mechanisms.​

  • Nominate another person to exercise your rights in the event of death or incapacity, where applicable under the DPDP Act.​

To exercise your rights, contact us using the contact details below.​

15. Grievances and complaints

The DPDP Act requires a data fiduciary to publish business contact information and establish an effective grievance redressal mechanism.​

If you have a complaint, concern, or request regarding privacy or your personal data, you may contact us first using the details below. We will review and respond within a reasonable time.​

16. Children’s data

Our website and services are not intended for children unless specifically stated otherwise. The DPDP Act imposes special rules for personal data of children, including verifiable parental consent in applicable cases.​

If you believe a child has provided personal data without appropriate authorization, please contact us so we can take appropriate steps.​

17. Third-party links and tools

Our website may contain links to third-party websites, social media pages, plugins, embedded tools, or external platforms. We are not responsible for the privacy practices, content, or security of such third parties, and you should review their policies separately.​

18. Business contact details

You should replace this section with your actual company details before publishing.​

WeMode Inventive Services
Email: hi@wemode.in

Phone: +91 87994 53764

Website: https://wemode.in​​

If applicable, name the person responsible for privacy or grievance handling here. The DPDP Act expects business contact details to be made available.​

19. Updates to this policy

We may update this Privacy Policy from time to time to reflect changes in law, technology, our services, or our internal practices. The updated version will be posted on this page with a revised “Last Updated” date.​​

Your continued use of our website or services after an update may be treated as acknowledgment of the revised policy to the extent permitted by law.