Who we are
Svelty (also known as Svelty Creative Works) is a social media and performance marketing agency based in Hyderabad, Telangana, India. We run svelty.in and the SveltyShots event reel service. In this policy, "Svelty", "we", "us" and "our" mean us, and "you" means anyone who visits our website, contacts us or works with us.
For the personal data described here, Svelty decides why and how it is used, which makes us the data fiduciary under India's Digital Personal Data Protection Act, 2023 (the "DPDP Act").
What we collect
Information you give us
| Where | What we collect |
|---|---|
| Free brand audit form and pop-up | Name, Instagram handle, WhatsApp number and the services you're interested in. |
| "Send us a brief" form | Name, email, phone, brand, city and country, monthly budget (optional) and your message. |
| Footer quick message | The email address or WhatsApp number you enter. |
| WhatsApp, phone, email and Instagram | Whatever you choose to send us, such as your name, number, event details, photos or files. |
| SveltyShots bookings | Occasion, date, time, venue and contact details, so a reel-maker can reach you. |
| Clients | Billing details (business name, address, GSTIN), contacts on your team, and the access and brand materials you share so we can do the work. |
Each form also sends us the address of the page you submitted it from, so we know which offer you were looking at.
Information collected automatically
Like every website, svelty.in is delivered by servers that receive basic technical information with each request: your IP address, browser type, device and the page requested. Our hosting provider, Cloudflare, processes this to deliver the site and protect it from abuse. We don't use it to identify you, and we don't run analytics, heatmaps or advertising pixels on this website.
How we use it
- To reply to you: answering enquiries on WhatsApp, phone or email, and following up on a request you made.
- To prepare audits and proposals: reviewing the public Instagram profile or ads you point us to and sending recommendations and pricing.
- To deliver our services: content, shoots, ads, websites, CRM and automation work for clients, and SveltyShots bookings.
- To run the business: invoicing, accounting, tax and GST compliance, and keeping records of what we agreed.
- To keep things secure: preventing spam, fraud and misuse of our forms and website.
- To keep you updated, only if you agree: occasional messages about our work or offers. You can opt out at any time by replying "STOP" or telling us.
We rely on the consent you give when you submit a form or message us, and on the legitimate uses the DPDP Act allows, such as using information you have voluntarily provided for the purpose you provided it, and meeting our legal obligations. You can withdraw consent at any time (see Your rights). Withdrawing doesn't affect anything we did before, but we may not be able to continue a service that depends on that data.
Data we handle for clients
When a client hires us to run ads, lead forms, a website, a CRM or WhatsApp automation, we may process personal data about that client's own customers, for example the leads their campaigns generate. In that case the client is the data fiduciary and we act as their data processor: we handle that data only on the client's instructions and under our agreement with them, and we don't use it for our own purposes. If you are a customer of one of our clients, please contact that business first about your data. We'll help them respond.
Who we share it with
We don't sell or rent personal data. We share it only with the service providers we need to run svelty.in and our work, and only as much as each one needs:
| Provider | Why |
|---|---|
| Cloudflare | Hosts and delivers this website and protects it from attacks. |
| FormSubmit | Delivers what you type into our website forms to our inbox by email. |
| Google (Gmail, Workspace) | Our email and documents, where enquiries and project files are kept. |
| Google Fonts | Serves the fonts used on this site; your browser requests them directly from Google. |
| Unsplash and Picsum | Serve some of the photos on this site; your browser loads them directly. |
| Meta (WhatsApp, Instagram, Facebook) | When you message us on WhatsApp or Instagram, or when we run campaigns on Meta platforms for a client. |
| Our CRM and hosting providers | Store enquiries and client records so our team can follow up. |
| Accountants and advisers | For invoicing, tax and legal compliance. |
We may also disclose information if the law requires it, to respond to a valid request from a government authority, or to protect our rights, our clients or the public.
Some of these providers store data on servers outside India. When that happens, we use established providers with their own security and privacy commitments, and we transfer data only as permitted under Indian law.
Links on our site to WhatsApp, Instagram and other services take you to their own websites, which have their own privacy policies.
Cookies and browser storage
svelty.in doesn't use advertising or analytics cookies. We store one small value in your browser's session storage to remember that you've already seen our free-audit pop-up, so it isn't shown again; it is cleared when you close the tab. Cloudflare may set strictly necessary cookies to protect the site from bots and abuse. Google Fonts and image providers may receive your IP address when your browser loads their files.
How long we keep it
- Enquiries that don't become projects: up to 24 months after our last conversation, then deleted.
- Client records: for the length of the engagement, then for as long as tax, accounting and other laws require (usually up to 8 years for invoices and accounts).
- Project files and content: handed over to the client as agreed, and removed from our working storage within 12 months after the engagement ends, unless the client asks us to keep them longer.
- Anything you ask us to delete: deleted within 30 days, unless the law requires us to keep it.
How we protect it
We use reasonable security measures in line with Indian law, including the Information Technology Act, 2000 and the DPDP Act: encrypted connections (HTTPS) on our website, access limited to the team members who need it, strong passwords and two-step verification on the accounts that hold your data where the service offers it, and reputable providers for storage and email. No method of transmission or storage is completely secure, so we can't guarantee absolute security. If a breach affects your personal data, we'll inform you and the Data Protection Board of India as the law requires.
Your rights
Under the DPDP Act, you can:
- Access a summary of the personal data we hold about you and how we use it;
- Correct, complete or update anything that is wrong or out of date;
- Erase your data when it's no longer needed for the purpose you gave it for;
- Withdraw consent at any time, as easily as you gave it;
- Nominate someone to exercise these rights for you in case of death or incapacity; and
- Raise a grievance with us, and if you're not satisfied with our response, complain to the Data Protection Board of India.
To use any of these rights, contact us using the details below. We may ask you to confirm your identity first. We'll respond as soon as we can, and in any case within the time the law allows.
Deleting your data
To have us delete the personal data we hold about you, including anything received through our forms, WhatsApp, Instagram or Facebook:
- Email sveltymarketingagency@gmail.com with the subject "Delete my data", or send "Delete my data" on WhatsApp.
- Tell us the name, number, email or Instagram handle you used with us, so we can find your records.
- We'll confirm once it's done, within 30 days. We may keep a minimal record that you asked, and anything the law requires us to retain, such as invoices.
Messages you sent us on WhatsApp or Instagram also stay in your own app. Deleting those is controlled by Meta and your own account settings.
Children
Our website and services are meant for businesses and adults. We don't knowingly collect personal data from anyone under 18. If you believe a child has sent us their details, contact us and we'll delete them. For SveltyShots events such as birthdays, a parent or guardian makes the booking and decides what is filmed and shared.
Changes and contact
We may update this policy as our services or the law change. The date at the top shows when it was last updated, and significant changes will be highlighted on this page. This policy is governed by the laws of India, and the courts at Hyderabad, Telangana have jurisdiction.
Questions? Email sveltymarketingagency@gmail.com, call or WhatsApp +91 91775 99092, or message us on Instagram. See also our Terms of Service.