Privacy Policy.

01Who we are

Yashvi Global (“Yashvi Global”, “we”, “us”, “our”) is a digital marketing consultancy operating from Ahmedabad, India and serving clients globally. For the purposes of the EU General Data Protection Regulation, we are the data controller for personal information collected via this website and through our client engagements.

Where we process personal information on behalf of our clients (for example, leads generated through campaigns we run for them), we act as a data processor. The data controller in those cases is the client, and their privacy policy applies to that processing.

02Information we collect

Information you give us directly

• Contact information. Name, work email, phone number, company name, and role when you fill out a form or send us an email.
• Business context. Information you share about your company, marketing goals, current setup, budget range, and timelines during discovery.
• Engagement information. Account details, billing information, and any data you authorise us to access in the course of an active engagement.

Information collected automatically

• Usage and device data. IP address, browser type, operating system, referring URL, pages visited, time on page, and similar telemetry.
• Cookies and similar technologies. See section 4 for the specific cookies we use.

03How we use the information

We process personal information for these purposes:

• Responding to enquiries and delivering audits or services you request.
• Operating, securing, and improving the website.
• Sending operational communications (audit deliverables, project updates, invoices).
• Sending marketing communications, only with your consent and where you can unsubscribe with one click.
• Meeting legal and regulatory obligations (tax, accounting, anti-fraud).

We rely on the following lawful bases under GDPR: (i) performance of a contract; (ii) our legitimate interests in operating the business; (iii) your consent for marketing and non-essential cookies; (iv) compliance with a legal obligation.

04Cookies & similar tracking

We use a small number of cookies. The website does not work without the strictly-necessary set. Everything else is opt-in.

• Strictly necessary. Session, security, and form-state cookies. Cannot be disabled.
• Analytics. Google Analytics 4 with IP-anonymisation. Loaded only after consent.
• Marketing. LinkedIn Insight Tag, only on pages where we run campaigns, only after consent.

You can change your cookie preferences at any time via the consent banner footer link.

05Sharing & processors

We do not sell personal information. We share it only with the following categories of recipients, under written agreement and with appropriate safeguards in place:

• Hosting and infrastructure. Cloudflare (CDN), Hetzner (hosting), AWS S3 (deliverable storage).
• Productivity and CRM. Google Workspace, Notion, HubSpot.
• Payment processors. Stripe, Razorpay (India).
• Professional advisors. Accountants and legal counsel, where strictly required.
• Government and regulators. Where compelled by valid legal process.

06International transfers

We are based in India. Where we transfer personal information outside the EU/EEA or the UK, we rely on Standard Contractual Clauses (SCCs) and supplementary measures consistent with the Schrems II ruling. A copy of the SCCs we use is available on request.

07How long we keep information

• Enquiry and audit data: 24 months from last contact, then deleted.
• Active client data: duration of engagement plus 7 years for tax and accounting compliance.
• Marketing list: until you unsubscribe, plus 30 days for suppression.
• Website logs: 90 days, then aggregated.

08Your rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate information.
• Erase information (“right to be forgotten”) in certain circumstances.
• Restrict or object to processing.
• Data portability for information you provided.
• Withdraw consent at any time, without affecting prior lawful processing.
• Lodge a complaint with a supervisory authority.

To exercise any of these rights, contact us at the address in section 11. We respond within 30 days.

09Security

We use technical and organisational measures appropriate to the risk, including encryption in transit (TLS 1.3), encryption at rest for client deliverables, role-based access control, mandatory MFA on every business system, and regular security reviews. No transmission over the internet is fully secure, and we cannot guarantee absolute security, but we take it very seriously.

10Changes to this policy

We update this policy when our practices change or when required by law. The “last updated” date at the top of this page reflects the most recent revision. Material changes are flagged on the homepage and, for active clients, communicated by email at least 14 days before they take effect.

11Contact

Questions, complaints, or requests should go to: