Privacy Policy
Summary
- Who we are: Ellington & Vale, a branding and marketing agency based in Gurugram, India.
- What we collect: the details you send us in the contact form, basic technical information, and, only if you allow it, analytics.
- Why: to reply to your enquiry, keep the site secure, and understand how the site is used.
- Selling or sharing: we do not sell your personal information or share it for cross-site advertising.
- Your choices: you can see, correct, delete or download your information, and change your cookie choices at any time.
- Questions: hello@ellingtonandvale.com.
1. Who is responsible for your information
Ellington & Vale, based in Gurugram, India, decides how and why your personal information is used. Some laws call this role the "controller", "data fiduciary" or "business".
- Privacy contact: hello@ellingtonandvale.com
- India grievance officer: Ellington & Vale grievance contact, hello@ellingtonandvale.com. See also our Grievance page at /grievance.
2. Enquiries sent through our contact form
When you use the contact form we collect your name, email address and message. You may also tell us your company, brand category and budget range; these are optional. We use them only to reply to your enquiry and keep a record of it. We keep an enquiry for 12 months after our last message, then delete it. We do not add anyone to a marketing list because they sent an enquiry, and we do not sell enquiries or share them for advertising.
The form uses a security check from Cloudflare to stop automated spam. It loads only when you start filling in the form, and it receives technical information about your browser and connection to decide whether you are a person. We use Resend to deliver the enquiry to our inbox.
3. What we collect and where it comes from
| Information | Examples | Where it comes from |
|---|---|---|
| Technical information | IP address (shortened in our own records where possible), browser type, pages requested, date and time | Automatically, when you visit; recorded by our hosting provider and our security tools |
| Enquiry details | Name, email, message, and optionally company, brand category, budget range | You, through the contact form |
| Usage and analytics information | Pages viewed, approximate location, device identifiers in cookies, page speed measurements | Google Analytics and Vercel Speed Insights, only if you allow analytics |
| Cookie choices | A random identifier, your choices, the date, the version of the notice you saw | You, when you use the cookie banner |
We do not intentionally collect sensitive information such as health, biometric or financial account details. Please do not send it to us.
4. Why we use your information, and our legal reasons
| Purpose | Information used | Legal reason |
|---|---|---|
| Run and secure the website, prevent abuse | Technical information | Our legitimate interest in keeping the site working and secure (EU, UK); a legitimate use permitted by law (India) |
| Answer your enquiry | Enquiry details | Steps you asked us to take before a contract, or our legitimate interest in replying (EU, UK); information you voluntarily gave us for this purpose (India) |
| Understand how the site is used and improve it | Usage and analytics information | Your consent, given through the cookie banner |
| Keep proof of your cookie choices | Cookie choices | Our legal obligation to show that consent was given or refused |
| Comply with the law and defend legal claims | Any relevant information | Legal obligation; our legitimate interest in defending claims |
For people in India, we rely on your consent or on a specific legitimate use named in the Digital Personal Data Protection Act 2023. We do not rely on legitimate interests there. You can withdraw consent at any time, as easily as you gave it, using Cookie settings at the bottom of every page.
7. International transfers
Some providers process information outside your country, including in the United States. For visitors from the EU and UK, we rely on an adequacy decision (for certified US companies, the EU-US Data Privacy Framework and its UK extension) or on Standard Contractual Clauses, and you can ask us for a copy of the safeguards. We do not transfer information to any country the Government of India has restricted under the Digital Personal Data Protection Act.
8. How long we keep your information
| Information | How long |
|---|---|
| Enquiries | 12 months after our last message |
| Analytics information | 14 months |
| Cookie choices and the record of them | 3 years |
After that we delete the information or make it anonymous. Where Indian law requires us to keep certain logs for a minimum period, we keep them securely and use them only for that purpose.
9. How we protect your information
We use measures suited to the risk, including encryption in transit, access controls, multi-factor authentication on staff accounts, monitoring and vendor checks. No system is completely secure. If a breach affects you, we will tell you and the regulators as the law requires. We protect sensitive personal data and information, such as passwords and financial details, with reasonable security practices as the Information Technology Act 2000 requires.
10. Your rights
Depending on where you live, you have some or all of these rights. We use the same easy process for everyone.
- Access your information, and get a copy of it.
- Correct inaccurate or incomplete information.
- Delete your information.
- Download your information in a portable format.
- Object to, or ask us to restrict, certain uses, including direct marketing and profiling.
- Withdraw consent at any time, without affecting earlier use.
- Opt out of the sale or sharing of your information and of targeted advertising.
- Ask for human review of a decision made solely by automated means that significantly affects you.
- Not be treated worse for using your rights.
EU and UK: you have these rights under the GDPR and UK GDPR, and you can complain to a data protection authority, such as the authority where you live or work, or the Information Commissioner's Office in the UK. Please contact us first so we can try to help.
India: you can get a summary of your personal data and how it is processed, learn who we shared it with, correct, complete, update or erase it, have your grievances resolved, and nominate another person to exercise your rights if you die or become unable to. If you are not satisfied with our response, you can complain to the Data Protection Board of India.
California and other US states: you can know what we collect, delete it, correct it and opt out of sale or sharing. We have not sold or shared personal information in the last 12 months. If we decline a request, you can appeal and then contact your state Attorney General.
11. How to use your rights
- Use our data rights form at /privacy/requests.
- Or email hello@ellingtonandvale.com.
To protect you, we check your identity using information we already hold. Opting out of sale, sharing or marketing needs no check. An authorised agent can make a request for you with your signed permission. We confirm we received your request within 10 business days and respond within 30 days. If we need more time where the law allows it, we will tell you why within the first 30 days. Opt-outs take effect as soon as possible and within 15 business days at most.
12. Complaints
If you are unhappy with how we handle your information, please use our complaints page at /complaints or write to hello@ellingtonandvale.com. We acknowledge complaints within 7 days and respond within 30 days. You can also complain to the regulator named in section 10 at any time.
13. Children
Our services are for businesses and are not intended for anyone under 18. We do not knowingly collect information from children. If we learn we have, we will delete it. We never track, profile or show targeted advertising to anyone we know or have reason to believe is under 18.
14. Automated decisions
We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.
15. Changes to this policy
We review this policy at least once a year. If we make important changes, we will say so on this page before they take effect, and we will ask for your consent again where the law requires it. Earlier versions are available on request.
16. Language
This policy is currently published in English. If you would like it in another language, write to hello@ellingtonandvale.com and tell us which one.
17. Contact us
Ellington & Vale · Gurugram, India · hello@ellingtonandvale.com · +91 70829 29364