Privacy Policy

We Design For You ("we", "us") is a private professional consultancy offering industrial subsidy, DGFT and government scheme advisory services from 8-43/9/5, 1st Floor, Shanthi Nilayam, West Balaji Hills, Road No. 6, Street No. 6, Uppal, Hyderabad, Telangana 500039, India. You can reach us at bd@wedesignforyou.in or +91 8179329698.

We Design For You is not a government department, ministry, authority or agency, and we are not affiliated with, authorised by or endorsed by any of them. We provide professional advisory and consultation services only — scheme eligibility assessment, documentation preparation and application filing support. Any sanction, approval or disbursement is decided solely by the concerned authority.

• Contact details you submit — name, company, mobile number, email, state and industry.
• Enquiry content — what service you are interested in and any answers you give in our consultation form.
• Booking details — the date and time slot you select for a consultation call.
• Business and application documents you choose to share with us for the preparation of an application (for example registrations, project reports, invoices and shipping documents).
• Basic technical data — page visited, referring page, and anonymous analytics events.

• To contact you about your enquiry and to schedule or confirm consultation calls.
• Transactional communication — enquiry acknowledgements, booking confirmations, reminders, document requests, application status updates and service notices.
• Marketing communication — scheme updates, policy changes, newsletters, offers and service information relevant to your business.
• To prepare and file applications, and to represent your case before the concerned authority.
• To assign your enquiry to a consultant in our internal CRM and track its progress.
• To improve the website and understand which services visitors need most.

We do not sell your data or trade it with unrelated third parties, and you can ask us to stop marketing contact at any time while continuing to receive service-related transactional messages.

Every form on this website carries a communication-preferences grid where you choose, channel by channel, what you want to receive from We Design For You. Transactional updates and marketing messages are separate choices for each channel, and marketing is never pre-ticked. The channels are:

• WhatsApp messages (text, media and document attachments)
• SMS and RCS text messages
• Email
• Voice calls, including calls from our consultants and callback requests
• In-app or portal notifications where you use our client/ERP portal

Your choices are recorded with the version of this policy in force at the time, and we honour them exactly: if you leave marketing unticked for a channel, you will not receive marketing on that channel. Consent you give applies even if your number is registered on DND/NDNC, to the extent permitted by law. Messages are delivered through third-party business messaging providers (including our WhatsApp Business messaging provider and email delivery provider) who process your details solely to deliver those messages on our behalf, under contract and confidentiality obligations.

You can change or withdraw any of these choices at any time — by replying STOP on WhatsApp/SMS, using the unsubscribe link in an email, or writing to bd@wedesignforyou.in — and withdrawal is as easy as giving consent.

Where you choose to connect a Google (Gmail, Google Drive) or Microsoft (OneDrive, Outlook) account to our platform, access is granted only through the provider's official OAuth 2.0 consent screen. We never ask for, see or store your Google or Microsoft password.

• Scopes are minimal. We request the narrowest permissions needed for the feature you enabled — for example reading or uploading only the application documents relevant to your engagement, or sending/reading correspondence strictly related to your application.
• Use is limited. Data obtained through these APIs is used only to provide the feature you asked for. We do not use it for advertising, do not sell or transfer it, and do not allow humans to read it except with your explicit permission, for security or legal reasons, or where necessary to support your engagement.
• Tokens are protected. OAuth tokens are stored encrypted, are accessible only to authorised systems and staff, and are used over encrypted connections.
• You stay in control. You may disconnect the integration in our portal at any time, or revoke access directly at Google account permissions or in your Microsoft account settings. On revocation we stop accessing the account and delete stored tokens.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements, and our use of Microsoft Graph/OneDrive APIs follows Microsoft's equivalent platform terms.

We follow generally accepted industry practices for information security: encrypted connections (TLS) for all data in transit, encryption at rest with our cloud providers, role-based access control so staff see only what their role requires, row-level access rules in our database, audit logging of internal activity, strong authentication for staff accounts, and periodic security reviews of the platform.

We align our practices with recognised guidelines including the Information Technology Act, 2000 and the SPDI Rules, 2011, the Digital Personal Data Protection Act, 2023, and — where applicable to clients outside India — GDPR principles of lawful basis, purpose limitation, data minimisation and storage limitation. No method of transmission or storage is perfectly secure, so we ask you to keep your account credentials confidential.

Enquiry, booking and document records are stored in our secured cloud CRM with access limited to authorised staff. We retain them for as long as needed to serve you and to meet legal, statutory or accounting obligations, after which they are deleted or anonymised. We share information with third parties only where necessary to deliver a service you asked for (for example filing an application with a government department or portal), with service providers such as hosting, messaging, email and storage vendors acting on our instructions, or where law or a lawful authority requires it.

• Request a copy, correction or deletion of the details you shared with us.
• Withdraw consent for marketing contact on WhatsApp, SMS, email or calls.
• Disconnect any linked Google/Microsoft account and have stored tokens deleted.
• Ask us to restrict processing, or nominate someone to exercise your rights on your behalf.
• Block cookies or analytics in your browser settings.
• Raise a grievance with us before approaching a regulator.

Write to bd@wedesignforyou.in or call +91 8179329698 and we will action your request within a reasonable period. Data-related concerns are handled by our Grievance Officer, Mr. Gajam Vinay Kumar, whose contact details are given under “Grievance redressal and response timeline” below.

We Design For You acts as a Data Fiduciary under the Digital Personal Data Protection Act, 2023 ("DPDP Act") for the personal data you share with us, and you are the Data Principal. As a Data Principal in India, you have the right to:

• Access information — obtain a summary of the personal data we hold about you, how we use it, and the third parties with whom it has been shared.
• Correction, completion and updating — ask us to correct inaccurate or misleading data, complete incomplete data, and update out-of-date data.
• Erasure — ask us to erase your personal data once it is no longer needed for the purpose it was collected for, unless we must keep it to comply with a legal obligation.
• Grievance redressal — raise any concern about how your data is handled and receive a response within the period described below.
• Nomination — nominate another person to exercise these rights on your behalf in the event of your death or incapacity.
• Withdraw consent — withdraw consent at any time, with effect going forward, without affecting processing already carried out. Withdrawal is as easy as giving consent: reply STOP on WhatsApp/SMS, use the email unsubscribe link, or write to us.

To exercise any of these rights, write to bd@wedesignforyou.in or call +91 8179329698 from the email or number registered with us, so we can verify your identity before acting.

Where we rely on your consent, it is free, specific, informed, unconditional and unambiguous, given through a clear affirmative action (such as submitting a form or ticking a consent box). At or before asking for consent, we tell you:

• the personal data we collect and the specific purpose for each use;
• how you can exercise your rights and withdraw consent; and
• how to complain to the Data Protection Board of India.

The version of this policy in force when you give consent is recorded with your submission, so the notice you agreed to is always traceable.

In line with the DPDP Act, 2023, we have appointed a Grievance Officer to respond to your questions or complaints about how your personal data is handled.

Mr. Gajam Vinay Kumar, Grievance Officer
We Design For You
8-43/9/5, 1st Floor, Shanthi Nilayam, West Balaji Hills, Road No. 6, Street No. 6, Uppal, Hyderabad, Telangana 500039, India
Email: bd@wedesignforyou.in
Phone: +91 8179329698

You may write to the Grievance Officer directly, or use bd@wedesignforyou.in / +91 8179329698 and your concern will be routed to them.

• We acknowledge every data-protection grievance within 48 hours of receiving it.
• We aim to resolve grievances within 15 days, and never later than 30 days.
• If you are not satisfied with our response, you may approach the Data Protection Board of India after raising the concern with us first.

If a personal data breach occurs that affects your data, we will inform you and the Data Protection Board of India as required by the DPDP Act, describing what happened, the likely impact, and the steps we are taking, along with the contact details of our Grievance Officer, Mr. Gajam Vinay Kumar, who can answer your questions.

We keep personal data only for as long as the purpose for which it was collected continues, or as long as a law requires it. Our retention schedule is:

• Website enquiries and consultation bookings — up to 24 months from your last interaction, after which the record is erased or anonymised if no engagement resulted.
• Active client engagement records (applications, documents, correspondence) — for the duration of the engagement and up to 3 years after it closes, to handle follow-ups and disputes.
• Invoices, payment and tax records — 8 years, as required by Indian accounting and tax law.
• Marketing consent records — until you withdraw consent, plus 12 months as proof of the consent and its withdrawal.
• Application documents (uploaded files and filled scheme formats) — for the engagement plus up to 3 years after closure, unless a scheme authority or law requires longer; you may request earlier erasure where no such obligation applies.
• Linked Google or Microsoft account tokens — only while the connection is active; they are deleted when you disconnect the account or ask us to remove it.
• Employee and payroll records — for the employment period and the statutory retention period under applicable labour and tax laws.

Once consent is withdrawn or the purpose is served and no legal obligation applies, the data is erased or anonymised. Application documents shared for a specific engagement are not reused for any other purpose.

Our services are intended for businesses and professionals. We do not knowingly collect personal data of children, and we will delete any such data brought to our attention.

Analytics and marketing cookies are set only after you allow them in our cookie banner. Full details, categories and controls are in our Cookie Policy, and you can change your choice at any time from the footer.

We may update this policy as our services change. Each revision gets a version number and an effective date, listed below, and the version in force when you submit a form is recorded with your consent.