Privacy Policy

This website is owned and operated by Voxxy Media Private Limited, a company incorporated in India ("Voxxy Media", "Company", "we", "our", or "us"). Voxxy Media forms part of a group of affiliated companies operating in multiple jurisdictions, including Indonesia, Malaysia, Thailand and Vietnam (collectively, the "Affiliates"). This Privacy Policy explains how personal data is collected through this website, how it is used, and the circumstances in which it may be shared with our Affiliates to respond to enquiries, provide services, or administer our business operations. Each Affiliate remains responsible for its own processing activities in accordance with applicable local law where it receives and processes personal data. Voxxy Media is committed to processing personal data lawfully, fairly and transparently in accordance with the applicable data protection laws.

Scope and Applicability

This Policy applies to all individuals whose personal data may be processed by the Company, including persons submitting inquiries through the Company’s website, clients and their representatives, influencers and talent engaged by the Company, vendors, consultants, business partners, employees, and contractors, and governs all externally facing personal data processing undertaken by the Company irrespective of the medium through which such data is collected, communicated, stored, or accessed. Where personal data collected through this website relates to services or business activities carried out by one of our Affiliates, such personal data may be disclosed to the relevant Affiliate for the purposes described in this Policy. The applicable Affiliate will process such information only to the extent necessary to respond to your enquiry, provide requested services, or fulfil contractual or legal obligations.

Nature of Personal Data Processed

The Company processes only such personal data as is reasonably necessary for legitimate business and contractual purposes, which may include identity and contact information such as name, email address, phone number, designation, professional affiliation, and social media identifiers, together with contractual and professional data contained in agreements, communications, billing interactions, and related documentation including signatures and professional identifiers. Limited communication or technical data may be generated through voluntary submissions or routine system interactions depending on browser and device behaviour. Consistent with the Company’s internal data governance framework, the Company does not independently collect, aggregate, profile, trade in, or commercially exploit user-level personal data and, where campaign analytics or performance data is processed, such data is handled in anonymized or aggregated form unless otherwise authorized in accordance with applicable law and contractual mandate.

Notice at the Time of Collection

Individuals are hereby informed at or prior to the point of collection that personal data provided to the Company will be processed for lawful and defined purposes including responding to business or professional inquiries, initiating, negotiating, executing, and administering contractual relationships, managing campaigns and operational workflows, facilitating professional communications, complying with legal and regulatory obligations, protecting systems and confidential information, and maintaining operational and security integrity. Provision of certain personal data may be necessary for entering into or performing contractual or professional engagements with the Company, and failure to provide such necessary data may result in the Company being unable to initiate or continue the relevant engagement, whereas submission of personal data through general inquiries or optional communications remains voluntary. Such personal data may be shared on a need-to-know basis with authorized personnel within the Company and its Affiliates, relevant counterparties, and trusted infrastructure or service providers engaged for secure processing, and may be retained only for so long as necessary to fulfil contractual, legal, or operational requirements or to protect against legal claims, following which such data shall be securely deleted, archived, or anonymized. Individuals are further informed that they may exercise rights of access, correction, erasure (subject to legal retention), withdrawal of consent where consent forms the legal basis of processing, nomination of another individual to exercise rights in the event of death or incapacity, and grievance redressal by contacting the Company through the details provided in this Policy.

Purpose and Lawful Basis of Processing

Personal data is processed strictly for lawful and proportionate purposes and not for any purpose incompatible with the purpose for which it was collected. Processing is undertaken primarily under lawful legitimate uses as recognised under the Digital Personal Data Protection Act, 2023, including processing necessary for the performance or negotiation of contracts, business and professional communications, compliance with legal obligations, prevention of fraud or misuse, protection of company systems and confidential information, and internal operational governance, and in such cases, consent is not relied upon as the primary legal basis. Consent is obtained only where required, including where individuals voluntarily submit information through the Company’s website or where processing is optional and not necessary for contractual or operational purposes, and where consent is relied upon, such consent shall be free, specific, informed, unconditional, and provided through a clear affirmative action, and may be withdrawn at any time without affecting the lawfulness of prior processing or processing otherwise permitted under legitimate uses.

Data Minimization and Controlled Disclosure

The Company adheres to principles of data minimization, purpose limitation, and controlled access consistent with its internal Data Security framework and collects and processes only the minimum personal data necessary to fulfil defined purposes. Personal data is not sold, licensed, rented, or otherwise commercially disclosed outside legitimate business operations. Personal data may be shared strictly on a lawful and need-to-know basis with authorised employees of Voxxy Media, affiliated companies within the Voxxy Media group where necessary to respond to enquiries, provide services, administer projects or support business operations, clients and contractual counterparties, trusted cloud hosting, communication and technology service providers, professional advisers, and governmental or regulatory authorities where disclosure is required by applicable law.

Children’s Data

The Company does not knowingly collect or process personal data of individuals below the age of eighteen years. If the Company becomes aware that personal data relating to a child has been provided without verifiable parental consent where required by applicable law, such data shall be deleted in accordance with the Company’s data governance and retention controls.

Affiliated Companies

Voxxy Media may share personal data collected through this website with affiliated companies within the Voxxy Media group where such disclosure is reasonably necessary to respond to enquiries directed to a particular jurisdiction, provide services, administer regional projects, support internal legal, finance, compliance, HR or operational functions, or comply with applicable legal obligations. Each Affiliate processes personal data only for the purposes for which it is disclosed and in accordance with applicable law.

Cross-Border Processing

As Voxxy Media operates together with affiliated companies in multiple jurisdictions, including Indonesia, Malaysia, Thailand and Vietnam, personal data collected through this website may be transferred to or accessed by the relevant Affiliate where necessary to respond to enquiries, provide requested services, support client engagements, or administer internal business operations. Such transfers are undertaken only where reasonably necessary, subject to appropriate contractual, organisational and technical safeguards, and in accordance with applicable data protection laws.

Retention and Disposal

Personal data is retained only for as long as necessary to fulfil contractual, operational, statutory, and compliance requirements or to protect against legal claims or disputes, following which such data is securely deleted, archived, or anonymized in alignment with the Company’s internal data retention and disposal controls.

Rights of Individuals

Subject to applicable law, individuals may exercise rights including the right to access their personal data, request correction of inaccurate or incomplete data, request erasure subject to legal and contractual retention obligations, withdraw consent where consent forms the legal basis of processing, nominate another individual to exercise such rights in the event of death or incapacity, and seek grievance redressal.

Security and Safeguards

The Company implements appropriate technical and organisational safeguards, including controlled access, secure storage, and system-level protections, to protect personal data against unauthorized access, disclosure, alteration, loss, or misuse, and maintains internal data protection and breach response mechanisms administered by the designated Data Protection Officer / Legal Lead.

Website and Technical Data

The Company’s website is informational in nature and does not engage in behavioural profiling, invasive tracking, or independent commercial exploitation of personal data, and any technical or communication data generated is limited to functional, security, and communication purposes consistent with this Policy and the Company’s internal data governance framework.

Grievance and Contact

For any request, concern, or grievance relating to personal data, individuals may contact the Company’s designated Data Protection Officer / Legal Lead at Voxxy Media via

Email: apoorv@voxxymedia.com

Where your request relates to one of our Affiliates, your enquiry may be forwarded to the relevant Affiliate for investigation and response.

The Company endeavours to acknowledge and address grievances within a reasonable timeframe.

Policy Updates

This Privacy Policy may be updated periodically to reflect regulatory, legal, or operational developments, and the latest version shall remain available through the Company’s official channels.