Privacy Policy

Last updated: January 1, 2024  ·  Effective: January 1, 2024  ·  Version 2.0

1. Who We Are

SuperTek Media (“we,” “us,” “our”) is a B2B marketing agency registered in India, providing AI-powered lead generation, email marketing, and demand generation services. Our registered office is at Office 107B, Space 31s, Pisoli, Pune-411048, Maharashtra, India.

We operate globally and serve clients in the United States, European Union, Latin America, and the Asia-Pacific region. As such, we comply with GDPR, CCPA, CAN-SPAM, CASL, and Indian IT Act data protection requirements.

2. Information We Collect

2.1 Information You Provide Directly

• Contact & enquiry forms: Name, email address, phone number, company name, job title, and message content
• Business communications: Emails, calls, and meeting details you share with our team
• Service delivery: Campaign briefs, target audience data, and materials you provide for us to deliver services

2.2 Information Collected Automatically

• Usage data: Pages visited, time on site, clicks, and navigation paths
• Device data: IP address, browser type, operating system, and screen resolution
• Cookies: See our Cookie Policy for full details

2.3 Data from Third Parties

• LinkedIn and other professional platforms (only where you have connected or made your profile publicly available)
• Verified B2B data providers for lead generation campaigns (all contacts are opted-in and GDPR-compliant)
• Analytics providers (Google Analytics, Hotjar) in anonymised form

3. How We Use Your Information

• To respond to your enquiries and provide our B2B marketing services
• To execute lead generation, email marketing, and ABM campaigns on behalf of clients
• To improve our website, services, and AI-powered tools
• To send service-related communications and updates (not promotional unless you opt in)
• To comply with legal obligations under applicable laws
• To detect and prevent fraud, abuse, or security incidents

4. Legal Basis for Processing (GDPR)

• Consent (Art. 6(1)(a)): When you tick the consent box on our forms or opt into marketing emails
• Contract (Art. 6(1)(b)): To deliver the services you have contracted us to provide
• Legitimate Interests (Art. 6(1)(f)): For B2B outreach, analytics, and service improvement
• Legal Obligation (Art. 6(1)(c)): Where law requires us to process data (e.g., tax records)

5. Data Sharing & Disclosure

We do not sell your personal data. We share data only in these limited circumstances:

• Service providers: EmailJS (form delivery), Google Analytics (website analytics), HubSpot (CRM) — all under data processing agreements
• Clients: When delivering lead generation campaigns, relevant contact data is shared with the commissioning client under a data processing agreement
• Legal requirements: When required by law, court order, or to protect our legal rights
• Business transfers: In the event of a merger or acquisition (you will be notified)

6. Data Retention

• Enquiry/contact form data: 3 years from last contact, unless you request deletion earlier
• Client contract data: 7 years (legal and tax obligation)
• Marketing consent records: Until consent is withdrawn + 1 year
• Website analytics: 26 months (Google Analytics default)
• Campaign data: Duration of campaign + 12 months for reporting

7. International Data Transfers

SuperTek Media operates from India and may transfer data internationally. For transfers to the EU/EEA, we use Standard Contractual Clauses (SCCs) approved by the European Commission. For US transfers, we rely on appropriate safeguards under our data processing agreements.

8. Your Rights

• Access: Request a copy of all data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request erasure of your data (subject to legal obligations)
• Restriction: Request we limit how we use your data
• Portability: Receive your data in a structured, machine-readable format
• Object: Object to processing based on legitimate interests or for direct marketing
• Withdraw Consent: Withdraw consent at any time without affecting prior lawful processing

9. Security

We implement industry-standard technical and organisational security measures including:

• TLS/SSL encryption for all data in transit
• Encrypted storage for sensitive data at rest
• Access controls and role-based permissions
• Regular security audits and vulnerability assessments
• Staff training on data protection and privacy

10. Children’s Privacy

Our services are intended for business professionals aged 18 and over. We do not knowingly collect data from children. If you believe we have inadvertently collected data from a minor, please contact us immediately.

11. Changes to This Policy

We may update this policy periodically. Material changes will be communicated via email or a prominent notice on our website at least 30 days before taking effect. The “Last updated” date at the top reflects the most recent revision.

12. Contact & Complaints

If you are unhappy with how we handle your data, you have the right to lodge a complaint with your local data protection authority. In India: the Ministry of Electronics and IT (MeitY). In the EU: your national Data Protection Authority.