Privacy Policy

Who We Are

Cognito IT Consultancy ("Cognito IT", "we", "our", or "us") is a Shopify development and D2C ecommerce agency registered and operating from Whitefield, Bangalore, Karnataka, India.

This Privacy Policy describes how we collect, use, disclose, and protect personal information obtained through our website cognitoitconsultancy.com and in connection with the services we provide to clients.

Data We Collect

We collect personal information in the following ways:

Information you provide directly:

• Name and email address when you submit a contact form or book a consultation call
• Phone number if provided in forms or WhatsApp communication
• Business name, website URL, and project details shared during consultations
• Payment and billing information processed through secure third-party payment processors

Information collected automatically:

• IP address, browser type, and device information via standard web server logs
• Pages visited, time spent on site, and referral URLs via Google Analytics 4
• Cookie identifiers for session management and analytics (see Section 5)

We do not collect sensitive personal data such as financial account details, health information, biometric data, or government identification numbers through this website.

How We Use Your Data

We use the information we collect for the following purposes:

• To respond to enquiries and schedule consultation calls
• To deliver the services described in our project agreements
• To send project updates, proposals, and invoices to clients
• To send relevant service information or case studies where you have opted in
• To improve our website and understand how visitors engage with our content
• To comply with applicable laws and legal obligations

We will not use your personal data for purposes incompatible with those listed above without your prior consent.

Data Sharing & Disclosure

We do not sell, rent, or trade your personal data to third parties. We may share your data in the following limited circumstances:

• Service providers: We use trusted third-party services including Google Analytics, Cal.com (scheduling), and email platforms. These providers access data only as necessary to perform services on our behalf and are bound by confidentiality obligations.
• Legal requirements: We may disclose data if required by law, court order, or government authority under applicable Indian law.
• Business transfers: In the event of a merger or acquisition, personal data may be transferred as part of that transaction. We will notify affected users.

All third-party service providers we use are selected for their commitment to data security and privacy. We do not transfer personal data internationally except where covered by appropriate safeguards.

Cookies

Our website uses cookies — small text files stored on your device — to improve your browsing experience and analyse site traffic.

Types of cookies we use:

• Essential cookies: Required for the website to function correctly. These cannot be disabled.
• Analytics cookies: Google Analytics 4 cookies that help us understand how visitors interact with our site. These are anonymised and do not identify individuals.
• Marketing cookies: Where applicable, we may use cookies from Google Ads or Meta Pixel to measure the effectiveness of advertising campaigns.

You can control or disable non-essential cookies through your browser settings. Please note that disabling cookies may affect the functionality of some features on this site.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Enquiry and lead data: up to 24 months from last contact
• Client project data: up to 5 years from project completion for legal and accounting purposes
• Analytics data: as per Google Analytics 4 default retention settings (up to 14 months)

After the applicable retention period, personal data is securely deleted or anonymised.

Your Rights

Under India's Digital Personal Data Protection Act 2023 (DPDP Act) and applicable data protection principles, you have the following rights:

• Right to access: Request a copy of the personal data we hold about you
• Right to correction: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data where we no longer have a lawful basis to hold it
• Right to withdraw consent: Withdraw consent for marketing communications at any time
• Right to grievance redressal: Raise a grievance with our designated contact if you believe your data has been mishandled

To exercise any of these rights, please contact us at info@cognitoitconsultancy.com. We will respond within 30 days.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include:

• SSL/TLS encryption on all data transmitted through our website
• Access controls limiting personal data access to authorised team members only
• Use of reputable, security-audited third-party platforms for data storage and processing

While we take all reasonable precautions, no method of transmission over the internet is 100% secure. We encourage you to exercise caution when sharing sensitive information online.

Third-Party Links

Our website may contain links to third-party websites including Shopify, Cal.com, and other resources. These sites have their own privacy policies, and we are not responsible for their practices. We encourage you to review the privacy policy of any third-party site you visit.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make significant changes, we will update the "Last updated" date at the top of this page. Continued use of our website after any changes constitutes your acceptance of the updated policy.

Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact us: