Privacy policy: what this website collects, and why.

Who we are

This website, digimaps.io, is run by DigiSigns, operated by Digiboard Tech Private Limited, Stirring Minds, 2-A/3, Kundan Mansion, Asaf Ali Road, New Delhi 110002, India. For the personal data described here we are the data fiduciary under India’s Digital Personal Data Protection Act, 2023 (the DPDP Act), and the controller under the EU General Data Protection Regulation (GDPR).

Questions about this policy go to support@digisigns.in.

What this policy covers

This policy covers this marketing website only: its pages, its enquiry forms and the emails you send us from it. It does not cover the DigiMaps software running at a venue. There, the venue operator decides how visitor data is handled, and our customer agreements set out how we process it for them. How the product treats visitor data by design is on our trust and evidence page.

What we collect

Source	What	When
Enquiry forms (demo, contact, partner, pilot)	Name, work email, organisation and country. Your role or type of company. If you choose to add them: type of venue, floors and area, number of kiosks or screens, where you want it to run, and a message. The page you sent the form from, and your consent tick.	Only when you send a form
Emails to us	Your name and address, your message, and anything you attach, such as floor plans.	Only when you write to us
Request logs, kept by our host	IP address, date and time, the page requested, the referring page, your browser and device type, and the response code.	Every page request
Page counts (switched off at the moment)	Page viewed, referring site, country, browser, operating system and device type, counted without cookies.	Only if switched on

We do not ask for payment details, identity numbers or health information, and we do not buy contact lists. The interactive explorer on the home page runs in your browser and sends nothing back to us. Please do not put patient, visitor or staff personal data in the floor plans or messages you send.

Why we use it

Purpose	Data	Basis
Reply to your request and arrange a demo, quote, pilot or partner call	Form and email	Your consent, given with the tick box or by writing to us. Under GDPR, also steps you asked for before a contract
Follow up on that same request	Form and email	Your consent, which you can withdraw at any time
Keep the site working and protect it from attacks	Request logs	Running a secure website. Under GDPR, our legitimate interests
See which pages are useful	Page counts	Totals only, with no personal data. Under GDPR, our legitimate interests

We do not make automated decisions about you, we do not build profiles, and we will not add you to a mailing list unless you ask us to.

Who processes it for us

Service	What it does	Data it handles
Amazon Web Services (AWS Amplify Hosting)	Hosts and delivers this website	Request logs
No form service at present	Our forms open your own email app with your details filled in, so they reach us as an ordinary email	Nothing, until you press send in your email app
Google Workspace	Our company email	Enquiries and emails
Cookieless analytics (not switched on)	Counts page views without cookies	Totals per page, referrer, country and device type

Each provider processes the data on our instructions and under its own data processing terms. We may also disclose data where Indian law or a court order requires it.

Data outside India

We are based in India, so if you write to us from abroad your data comes to India. Our providers run data centres in several countries, including the United States and the European Union. The DPDP Act allows these transfers except to countries the Government of India restricts. For visitors in the European Economic Area, we rely on the contractual safeguards our providers offer for international transfers, such as standard contractual clauses.

How long we keep it

Data	How long
Enquiries and emails that do not lead to a project	Up to 24 months after our last contact with you, then deleted
Enquiries that lead to a contract	For the life of the contract, then as long as Indian law requires us to keep business records
Request logs	Kept by AWS for a limited period. We copy them only to investigate a fault or an attack, and delete the copy afterwards
Page counts	Totals with no personal data, kept while the site runs

If you ask us to delete your enquiry sooner, we will, unless the law requires us to keep it.

Your rights

Right	DPDP Act, India	GDPR, EU and EEA
See what we hold and how we use it	Yes	Yes, including a copy
Correct, complete or update it	Yes	Yes
Have it erased	Yes	Yes
Withdraw consent	Yes	Yes
Object to or restrict our use	Not in the Act	Yes
Receive it in a portable format	Not in the Act	Yes
Nominate someone to act for you if you die or cannot act	Yes	Not in GDPR
Complain	To us first, then to the Data Protection Board of India	To us, or to the data protection authority where you live

To use any of these rights, email support@digisigns.in. We may ask you to confirm that the request comes from you. We aim to reply within 30 days, and there is no charge.

Cookies

This website sets no cookies and uses no browser storage to track you. Its fonts are served from our own host. If we switch on page counting, it will be a tool that works without cookies, and this page will name it.

Security, children and changes

The site is served only over HTTPS. Enquiries are read by the DigiSigns staff who handle sales, partners and support. This website is for businesses and public bodies and is not aimed at anyone under 18; we do not knowingly collect children’s data.

If we change this policy, we change the date at the top of this page, and we say what changed when the change is significant.

Contact and grievances

For any question, request or grievance about your personal data, email support@digisigns.in with “Privacy” in the subject, or write to Digiboard Tech Private Limited, Stirring Minds, 2-A/3, Kundan Mansion, Asaf Ali Road, New Delhi 110002, India. We answer from New Delhi, Monday to Friday, 10:00 to 19:00 IST.