Privacy Policy

This Privacy Policy explains how Boost Web Digital collects, uses, discloses, and protects personal information when you visit boostwebdigital.com (the "Website"), submit a contact form, or engage us as a client. It applies to visitors and clients wherever you are located, including in India, the European Union, and the United States.

Boost Web Digital is a sole proprietorship owned and operated by Ritik Malhotra, registered address 622, Near Beri Gate, Katra Bhai Sant Singh, Amritsar, District Amritsar, Punjab 143001, India (GSTIN 03FYBPM7255M1Z2). Boost Web Digital is the entity responsible for the personal data described in this Policy.

We collect information in the following ways:

• Information you provide — name, email, phone number, practice name, and message content submitted through our contact form or by email.
• Information collected automatically — IP address, browser and device type, pages viewed, referring URL, and approximate location, collected via cookies and analytics tools described below.
• Information from clients — business details, account access, and performance data (e.g. search rankings, ad performance) provided or generated in the course of delivering Services.

• To respond to enquiries and provide requested information about our Services.
• To deliver, manage, and report on Services for clients.
• To operate, secure, and improve the Website, including understanding how visitors use it.
• To send service-related communications and, where you have opted in, marketing communications.
• To comply with legal, tax, and accounting obligations (including GST record-keeping).

The Website uses cookies and similar technologies for essential functionality, analytics, and (where applicable) advertising. Full detail on the specific cookies used, their purpose, and how to control them is set out in our Cookie Policy, which forms part of this Privacy Policy.

We use the following third-party tools to understand Website usage and campaign performance:

• Google Analytics 4 (GA4) — usage analytics (pages viewed, session duration, traffic source).
• Meta (Facebook) Pixel — advertising measurement and retargeting; under the CCPA/CPRA, use of the Pixel may be considered a "sharing" of personal information for cross-context behavioral advertising — see U.S. State Privacy Rights below.
• Microsoft Clarity and/or Hotjar — session behavior analytics (e.g. scroll depth, click patterns) to improve the Website's usability.

Each of these tools is operated by a U.S.-based company and may involve the transfer of data to the United States — see International Data Transfers below.

Because we use Google, Meta, and Microsoft/Hotjar for analytics and advertising, and Stripe and PayPal to process international payments, personal data may be transferred to and processed in the United States and other countries outside your own. Where required, we rely on the standard contractual safeguards these providers make available (such as Standard Contractual Clauses) and on the fact that these are established providers with their own published privacy and security commitments. By using the Website or our Services, you acknowledge this transfer.

If you are located in the European Economic Area or UK, we process your personal data on one or more of the following legal bases: your consent (e.g. for marketing emails or non-essential cookies), performance of a contract (e.g. delivering Services you have engaged us for), our legitimate interests (e.g. Website analytics, security, and responding to enquiries), and compliance with a legal obligation (e.g. tax records).

We retain personal data for as long as necessary to fulfil the purposes described in this Policy, including satisfying legal, accounting, or reporting requirements (for example, GST-related records). Contact form enquiries that do not become a client relationship are retained only as long as needed to respond and for a reasonable follow-up period, after which they are deleted or anonymized.

We do not sell personal information. We share personal data only with:

• The analytics, payment, and communications tools named in this Policy, strictly to operate the Website and deliver Services.
• Professional advisors (e.g. accountants) where necessary for our own legal and tax compliance.
• Authorities, where required by applicable law.

If you are located in India, the Digital Personal Data Protection Act, 2023 gives you the right to obtain a summary of the personal data we hold about you and the processing activities undertaken, to seek correction and erasure of your personal data, to nominate another individual to exercise your rights in the event of death or incapacity, and to have readily available means to register a grievance with us.

Grievance Officer: Ritik Malhotra, Proprietor, Boost Web Digital. You may raise a grievance by emailing ritik@boostwebdigital.com. We will acknowledge and address grievances within the timelines required under applicable law.

If you are located in the EEA or UK, you have the right to access, correct, delete, or restrict processing of your personal data, to object to processing based on legitimate interests, to data portability, to withdraw consent at any time, and to lodge a complaint with your local data protection authority. To exercise any of these rights, contact us at contact@boostwebdigital.com.

Boost Web Digital is currently below the thresholds that make the California Consumer Privacy Act (CCPA), as amended by the CPRA, and comparable U.S. state privacy laws (e.g. Virginia, Colorado) mandatory for our business. We nonetheless offer the following rights to California and other U.S. residents as a matter of good practice:

• Right to know / access — what personal information we have collected about you and why.
• Right to delete — request deletion of personal information we hold about you, subject to legal exceptions.
• Right to correct — request correction of inaccurate personal information.
• Right to opt out of sale or sharing — we do not sell personal information; use of the Meta Pixel may constitute "sharing" for cross-context behavioral advertising under CPRA, and you may opt out as described below.
• Right to non-discrimination — we will not discriminate against you for exercising any of these rights.

Do Not Sell or Share My Personal Information

We do not sell personal information for money. To opt out of any "sharing" via advertising pixels such as the Meta Pixel, use the cookie controls described in our Cookie Policy or email contact@boostwebdigital.com with the subject line "Do Not Sell or Share My Personal Information".

We honor the Global Privacy Control (GPC) signal where technically supported: if your browser sends a GPC signal, we treat it as a valid opt-out-of-sharing request for that browser.

The Website and our Services are directed at healthcare businesses and professionals, not children. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us personal information, contact us and we will delete it.

We use reasonable technical and organizational measures to protect personal data against unauthorized access, alteration, or loss, including restricting access to client data to those who need it to deliver Services. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Significant changes will be highlighted on this page.

For any privacy question, request, or grievance: email contact@boostwebdigital.com (general) or ritik@boostwebdigital.com (Grievance Officer, DPDP Act), or write to Boost Web Digital, 622, Near Beri Gate, Katra Bhai Sant Singh, Amritsar, District Amritsar, Punjab 143001, India. Phone: [FILL: phone number — optional].