This Privacy Policy sets out our commitment to protecting the privacy of personal information provided to us, or otherwise collected by us, offline or online, including through our website and our applications (Site). In this Privacy Policy, we, us or our means White Horse Media Solution, having its office at 303 Shaival Complex, Opp. Chandanbala Complex, Above HDFC Bank, Nr. Suvidha Shopping Centre, Paldi, Ahmedabad – 380007, Gujarat, India.
Personal information
The types of personal information we may collect about you include:
- your name and business name;
- your contact details, including email address, mailing address, street address and/or telephone number;
- your billing and transaction details, including GSTIN and payment status (we do not store full card numbers, CVV or banking credentials);
- images, logos, creatives, content and other brand materials you provide to us;
- your preferences, opinions and any information you provide to us through enquiries or surveys;
- details of products and services we have provided to you and/or that you have enquired about, and our response to you;
- your browser session and geo-location data, device and network information, statistics on page views and sessions, acquisition sources, search queries and/or browsing behaviour;
- information about your access and use of our Site, including through the use of internet cookies, the type of browser and operating system you are using and the domain name of your internet service provider;
- where you connect a social media or advertising account to our application, the information described under Social media and advertising account access below; and
- any other personal information requested by us and/or provided by you or a third party.
We may collect these types of personal information directly from you or from third parties.
Social media and advertising account access
We provide social media management and advertising services. To perform these services, we operate an application that connects to Facebook, Instagram, LinkedIn and similar platforms using the platforms’ official authorisation process (OAuth).
- We do not ask for, collect or store your usernames or passwords. You authorise access on the platform’s own login screen, and you choose which Pages, accounts and ad accounts to grant.
- Where you grant access, we may collect and process: the platform user ID, name and email of the authorising person; the access token issued to us by the platform; the IDs, names and profile images of the Pages, accounts and ad accounts you select; content, posts, creatives and comments; advertising campaign, audience, budget and spend data; performance insights; and lead form submissions where you run lead campaigns.
- We use this information only to provide the services you have engaged us for. We do not sell it, share it with data brokers, use it for advertising unrelated to you, or use it to train artificial intelligence models.
- You may withdraw this access at any time through your own platform settings, or by writing to us. See Deleting your data
Collection and use of personal information
We may collect, hold, use and disclose personal information for the following purposes:
- to enable you to access and use our Site, associated applications and associated social media platforms;
- to provide the marketing, advertising, design and development services you have engaged us for;
- to contact and communicate with you;
- for internal record keeping, billing and administrative purposes;
- for analytics, market research and business development, including to operate and improve our Site and services;
- for advertising and marketing, including to send you promotional information about our services;
- to comply with our legal obligations and resolve any disputes that we may have; and
- to consider your employment application.
Disclosure of personal information to third parties
We may disclose personal information to:
- third party service providers for the purpose of enabling them to provide their services, including (without limitation) IT service providers, data storage, web hosting and server providers, maintenance or problem-solving providers, marketing or advertising providers, professional advisors and payment systems operators;
- our employees, contractors and/or related entities;
- the client on whose behalf we hold the information, and persons that client authorises;
- social media and advertising platforms, including Meta Platforms, LinkedIn and Google, when we transmit content and advertising instructions through their systems on your instructions;
- our existing or potential agents or business partners;
- anyone to whom our business or assets (or any part of them) are, or may in good faith be, transferred;
- courts, tribunals, regulatory authorities and law enforcement officers, as required by law, in connection with any actual or prospective legal proceedings, or in order to establish, exercise or defend our legal rights; and
- third parties who assist us in providing information, products, services or direct marketing to you, and third parties who collect and process data such as Google Analytics.
We may store personal information overseas, and the third parties listed above may store, transfer or access personal information outside India. Where we do so, we take such steps as are reasonable in the circumstances to require that overseas recipients protect your personal information to a standard consistent with the Digital Personal Data Protection Act, 2023 and this Privacy Policy.
Your rights and controlling your personal information
Choice and consent: Please read this Privacy Policy carefully. By providing personal information to us, you understand we will collect, hold, use and disclose your personal information in accordance with this Privacy Policy. You do not have to provide personal information to us, however, if you do not, it may affect our ability to provide our services to you.
Information from third parties: If we receive personal information about you from a third party, we will protect it as set out in this Privacy Policy. If you are a third party providing personal information about somebody else, you represent and warrant that you have that person’s consent to provide the personal information to us.
Restrict: You may choose to restrict the collection or use of your personal information. If you have previously agreed to us using your personal information for direct marketing purposes, you may change your mind at any time by contacting us using the details below.
Access: You may request details of the personal information that we hold about you, and a summary of how we process it.
Correction: If you believe that any information we hold about you is inaccurate, out of date, incomplete, irrelevant or misleading, please contact us using the details below. We will take reasonable steps to correct it.
Withdraw consent: You may withdraw your consent to our processing of your personal information at any time, with the same ease with which it was given.
Complaints: If you believe that we have breached applicable data protection law and wish to make a complaint, please contact our Grievance Officer using the details below with full details of the alleged breach. We will investigate and respond to you in writing within 30 days.
Unsubscribe: To unsubscribe from our email database or opt out of communications (including marketing communications), please contact us using the details below or use the opt-out facility provided in the communication.
Deleting your data
You may disconnect our application and have your data deleted at any time:
- Do it yourself — on Facebook: Settings → Apps and Websites → select our app → Remove. On Instagram: Settings → Apps and Websites → Active → Remove. On LinkedIn: Settings & Privacy → Data Privacy → Other applications → Remove. Access is revoked immediately and our copy of the access token is deleted within 24 hours.
- Ask us — email privacy@whitehorsemediasolution.com with the subject “Data Deletion Request”, stating the platform and the account concerned. We will verify the request, delete the data within 30 days and confirm in writing.
We retain information only for as long as it is needed for the purposes set out in this Privacy Policy, or for as long as required by law (for example, invoices and tax records).
Storage and security
We are committed to ensuring that the personal information we collect is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the personal information and protect it from misuse, interference, loss and unauthorised access, modification and disclosure. Access tokens are stored in encrypted form, data is transmitted over encrypted connections, and access is limited to authorised personnel on a need-to-know basis.
We cannot guarantee the security of any information that is transmitted to or by us over the internet. The transmission and exchange of information is carried out at your own risk. Although we take measures to safeguard against unauthorised disclosures of information, we cannot assure you that the personal information we collect will not be disclosed in a manner that is inconsistent with this Privacy Policy.
Cookies and web beacons
We may use cookies on our Site from time to time. Cookies are text files placed in your computer’s browser to store your preferences. Cookies, by themselves, do not tell us your email address or other personally identifiable information. However, they do allow third parties, such as Google and Meta, to cause our advertisements to appear on your social media and online media feeds as part of our retargeting campaigns. If and when you choose to provide our Site with personal information, this information may be linked to the data stored in the cookie.
We may also use web beacons on our Site from time to time. Web beacons (also known as clear GIFs) are small pieces of code placed on a web page to monitor a visitor’s behaviour and collect data about the visitor’s viewing of that page.
Children
Our Site and services are intended for businesses and for persons aged 18 and over. We do not knowingly collect personal information of children. If you believe a child has provided us with personal information, please contact us and we will delete it.
Links to other websites
Our Site may contain links to other websites. We do not have any control over those websites and we are not responsible for the protection and privacy of any personal information which you provide whilst visiting those websites. Those websites are not governed by this Privacy Policy.
Changes to this Privacy Policy
We may change this Privacy Policy from time to time. Any updated version will be posted on our Site with a revised “last updated” date, and will take effect from the date of posting.
Contact us
For any questions, requests or complaints about privacy, or to exercise any of the rights above, please contact:
Grievance Officer — [Insert full name]
White Horse Media Solution, 303 Shaival Complex, Opp. Chandanbala Complex, Above HDFC Bank, Nr. Suvidha Shopping Centre, Paldi, Ahmedabad – 380007, Gujarat, India
• Telephone: +91 99786 26256
• Email: privacy@whitehorsemediasolution.com