Privacy Policy

1. Who We Are

This Privacy Policy explains how Wisework Media Private Limited (“we”, “us”, or “our”), a company incorporated in India operating The Wise Marketing (thewisemarketing.com) (the “Website”), collects, uses, discloses, transfers, retains, and protects your personal data.

• Company: Wisework Media Private Limited
• Corporate Identity Number (CIN): U63120UW2026PTC251812
• Registered Office: Flat No. 2804, Panchsheel Green 1, Tower F1, Bishrakh, Gautam Buddha Nagar – 201306, Uttar Pradesh, India
• Contact: legal@wiseworkmedia.com

We are the “Data Fiduciary” under the Digital Personal Data Protection Act, 2023 of India (“DPDPA”), the “Data Controller” under the EU and UK GDPR, and the “Business” under the California Consumer Privacy Act as amended by the CPRA (“CCPA”), for the personal data described here.

2. Scope

This Policy applies to personal data we collect or process when you:

• visit, browse, or interact with the Website;
• subscribe to our newsletter;
• contact us by email or any other channel.

It does not cover third-party websites linked from the Website; review their privacy notices separately.

3. Categories of Personal Data We Collect

The exact data collected depends on how you interact with the Website.

We do not intentionally collect sensitive personal data (e.g. government identifiers, financial account numbers, health, caste, religion, sexual orientation, or biometric data).

Children. The Website is not directed at children under 18, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact our Grievance Officer so we may delete it (DPDPA s.9; GDPR Art. 8; COPPA).

4. Purposes of Processing and Lawful Basis

5. Cookies and Similar Technologies

We use cookies and similar technologies. Non-essential cookies (analytics) are set only after you provide affirmative consent through our cookie banner, and you can change or withdraw consent at any time via the “Cookie Settings” link in the footer. Full details are in our Cookie Policy.

6. Disclosure of Personal Data

We do not sell your personal data. We disclose it only to the categories of recipients below, each under written contracts imposing confidentiality and data-protection obligations: service providers and processors; professional advisers; regulators, courts, and law enforcement where legally required; and an acquirer or successor in a merger or restructuring, subject to equivalent protections.

The key processors we currently use are:

7. International Transfers

Personal data may be processed in countries outside your country of residence, including India and the United States. For transfers from the EEA, UK, or Switzerland we rely on adequacy decisions where applicable, Standard Contractual Clauses, the UK IDTA where applicable, and supplementary technical measures including encryption in transit and at rest. For transfers out of India under DPDPA s.16, we do not transfer personal data to any country the Central Government of India has notified as restricted. You may request a copy of the safeguards we use by writing to legal@wiseworkmedia.com.

8. Data Retention

When the retention period ends, we securely delete or anonymise the data.

9. Your Rights

Under the DPDPA (India), you may obtain confirmation and a summary of your data (s.11); correct, complete, update, or erase it (s.12); nominate another person to exercise your rights (s.13); seek grievance redress (s.14); and withdraw consent at any time (s.6(4)).

Under the GDPR / UK GDPR, you have the rights of access, rectification, erasure, restriction, portability, objection, freedom from solely automated decisions with legal effect, consent withdrawal, and complaint to a supervisory authority (UK: the ICO).

Under the CCPA / CPRA (California), you may know, access, delete, and correct your personal information, opt out of any “sale” or “sharing” (we do not sell for money), limit use of sensitive information, and not be discriminated against for exercising these rights.

How to exercise: email legal@wiseworkmedia.com, marked “Data Rights Request”. We acknowledge within 72 hours, verify your identity, and respond within 30 days (GDPR/UK GDPR), 45 days (CCPA, extendable once), or the period prescribed by DPDPA Rules — free of charge unless the request is manifestly unfounded or excessive.

10. Security

We apply technical and organisational measures appropriate to the risk, including TLS encryption in transit and encryption at rest; role-based, least-privilege access; logging, monitoring, and anomaly detection; written data-protection obligations on all processors; regular backups and disaster recovery; and periodic vendor review. No system is absolutely secure. On becoming aware of a personal-data breach, we will notify the Data Protection Board of India within the time prescribed under DPDPA s.8(6), notify competent authorities within 72 hours where GDPR/UK GDPR applies, and notify affected individuals where required by law.

11. Grievance Officer and Data Protection Contact

In accordance with Rule 3(2) of the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and s.8(10) of the DPDPA, 2023:

• Office of the Grievance Officer & Data Protection Contact, Wisework Media Private Limited
• Email: legal@wiseworkmedia.com
• Postal: Flat No. 2804, Panchsheel Green 1, Tower F1, Bishrakh, Gautam Buddha Nagar – 201306, Uttar Pradesh, India
• Working hours: Monday to Friday, 10:00 to 18:00 IST, excluding public holidays

We acknowledge within 24 hours and resolve within 15 days. Full process is in our Grievance Redressal Policy. For DPDPA grievances, if unsatisfied with our response you may approach the Data Protection Board of India once established.

12. Representatives and Supervisory Authorities

We do not currently meet the threshold for a mandatory GDPR Article 27 representative; EU/UK matters may be raised with our Grievance Officer and will be routed appropriately. EEA/UK residents may also complain to their supervisory authority; California residents may designate an authorised agent with written permission and verification.

13. Automated Decision-Making

We do not use personal data for automated decision-making that produces legal or similarly significant effects on you. We may use analytics to produce aggregated, non-identifying insights about Website usage.

14. Links to Third-Party Websites

The Website may link to third-party sites, including source publications. We are not responsible for their privacy practices; please review their notices.

15. Changes to this Policy

We may update this Policy to reflect legal, technological, or business changes. The Effective Date above indicates the most recent revision; material changes will be notified by a prominent notice on the Website or by email where we have your address.

16. Governing Law

This Policy is governed by the laws of India, with the courts at Gautam Buddha Nagar, Uttar Pradesh having jurisdiction, without prejudice to mandatory data-protection rights you may have in your country of residence.