Privacy Policy

1. Introduction & Overview

Welcome to the official portfolio and advisory website of Keval Sankaliya ("we," "our," or "us"), accessible via kevalsankaliya.com. We provide full-funnel performance marketing consulting, paid media optimization, and growth engineering advisory services.

We are committed to the responsible, transparent, and legally compliant collection, processing, and storage of digital data in alignment with the Digital Personal Data Protection Act (DPDP), 2023 of India, the Information Technology (IT) Act, 2000, and advertising platform governance frameworks.

2. Information We Collect

• Directly Provided Personal Data: Full name, professional work email address, company brand/website URL, current monthly ad spend bracket, primary growth bottlenecks, and strategic project context provided voluntarily via our Strategy Audit form.
• Marketing Attribution & Click Identifiers: First-party cookies storing Google Click Identifiers (gclid, wbraid, gbraid), Meta Click Identifiers (fbclid, _fbc, _fbp), and standard UTM parameters (utm_source, utm_medium, utm_campaign, utm_term, utm_content).
• Technical & Interaction Telemetry: Anonymized session metrics including scroll depth milestones (25%, 50%, 75%, 90%), active engagement time on page, call-to-action button clicks, referring URLs, browser user-agent, and IP address.

3. Advanced Advertising Matching & Conversion Modeling

To measure advertising campaign efficiency and eliminate bot traffic, we utilize privacy-preserving conversion tracking technologies:

• Meta Advanced Matching & Conversions API (CAPI): When you submit a growth inquiry, non-sensitive identifiers are cryptographically hashed client-side using one-way SHA-256 encryption before being transmitted to verify lead origin. Raw passwords or personal credentials are never collected or processed.
• Google Ads Enhanced Conversions: First-party data matching is executed through secure, one-way hashed payloads compliant with Google Consent Mode v2 to attribute inquiry performance to specific search and display queries.

4. Lawful Grounds for Processing (India DPDP Act, 2023)

In accordance with Section 4 and Section 6 of the DPDP Act 2023, data is collected and processed exclusively under:

• Explicit Consent: Granted by affirmative action when accepting our cookie telemetry banner or submitting our strategy contact form.
• Legitimate Uses: Preparing requested ad audit teardowns, executing client consulting agreements (SOWs), and protecting against malicious network attacks.

5. Data Retention & Zero Third-Party Sale Policy

We maintain an absolute Zero-Sale Policy. We do not sell, rent, monetize, or disclose your personal information or confidential ad account benchmarks to data brokers or unrelated commercial third parties. Client ad account figures and performance data are held in confidence under signed Non-Disclosure Agreements (NDAs).

6. Data Principal Rights

Under the DPDP Act 2023, you retain the following rights regarding your digital data:

• Right to Access: Request a summary of your personal data processed by us.
• Right to Correction & Erasure: Request correction of inaccurate data or complete deletion of your contact records from our database.
• Right of Grievance Redressal: Submit grievances directly to our designated Grievance Officer.

7. Grievance Officer & Contact Details

For questions, consent withdrawal, or data subject requests, contact our Grievance Office at: