Who we are
Brew Conversions ("we", "us") provides digital media planning, paid advertising services, training and online knowledge checks. It is operated by Shakti Singh Rathore from Gurugram, Haryana, India. We are the data controller (or "data fiduciary" under India's Digital Personal Data Protection Act, 2023) for the personal data described here.
What we collect
We only collect what we need:
- Enquiry forms (Run ads and Learning pages): your name, email, phone/WhatsApp (optional), company, website, and the answers you choose to give about your business, budget, goals or the session you want.
- Email verification: a one-time 6-digit code is sent to your email. We store only a secure hash of the code for up to 10 minutes.
- Knowledge checks: your name, email, the exam you took, your answers, score, timing and, if you pass, your certificate ID.
- Technical data: like every website, our hosting provider records server logs such as IP address, browser type and pages requested, for security and troubleshooting. We keep short-lived, hashed IP records (up to 24 hours) to prevent spam and abuse.
- Preferences: your language, theme and in-progress exam answers are stored in your own browser (local storage), not on our servers. See the Cookie Policy.
We do not use advertising trackers, analytics cookies or social media pixels on this website. We do not knowingly collect sensitive personal data.
How we use it
- To reply to your enquiry, prepare a media plan or quote, and provide the services or sessions you ask for.
- To verify that the email address on an enquiry belongs to you.
- To run knowledge checks, mark them, issue certificates and let others verify a certificate you share.
- To keep the site secure, prevent spam and fraud, and fix problems.
- To meet legal, tax and accounting obligations.
We do not sell your personal data and we do not use it for automated decisions with legal effects. We will only send you marketing emails if you ask for them, and every such email will include a way to opt out.
Legal bases (GDPR / UK GDPR)
- Steps before a contract, and the contract itself: answering your enquiry, booking and delivering sessions or services.
- Consent: when you tick the consent box to take a knowledge check, or opt in to updates. You can withdraw consent at any time.
- Legitimate interests: securing the site, preventing abuse, and keeping records of certificates so they can be verified.
- Legal obligation: invoices and records we must keep by law.
Under India's DPDP Act, we process your data on the basis of your consent given when you submit a form, or for legitimate uses permitted by the Act.
International transfers
Our providers may store or process data outside your country, including in the EU, the USA and India. Where the law requires it, transfers rely on adequacy decisions, standard contractual clauses or equivalent safeguards offered by those providers.
How long we keep it
- Enquiries and related messages: up to 24 months after our last contact, unless you become a client.
- Client records and invoices: as long as the law requires (typically up to 8 years for tax records).
- Verification codes: up to 10 minutes. Anti-spam records: up to 24 hours.
- Knowledge check attempts: up to 24 months. Certificates you earn: for as long as the certificate can be verified, unless you ask us to withdraw it.
After these periods we delete or anonymise the data.
Your rights
Depending on where you live, you may have the right to:
- access the personal data we hold about you and get a copy;
- correct inaccurate data, or complete incomplete data;
- ask us to delete your data;
- object to or restrict certain processing, and withdraw consent at any time;
- receive your data in a portable format;
- nominate another person to exercise your rights (India); and
- complain to a data protection authority, such as your local EU authority, the UK ICO or the Data Protection Board of India.
California residents: you have the right to know, delete and correct personal information, and to not be discriminated against for exercising these rights. We do not sell or share personal information for cross-context behavioural advertising.
To use any right, email shakti0407@gmail.com. We will reply within 30 days and may need to confirm your identity.
Grievance officer (India)
For complaints about how your personal data is handled, contact our grievance officer: Shakti Singh Rathore, Brew Conversions, Gurugram, Haryana, India, shakti0407@gmail.com. We will acknowledge complaints within 7 days and aim to resolve them within 30 days.
Security
We use HTTPS, hashed verification codes, rate limits, a password-protected admin area and access only for people who need it. No system is perfectly secure, but we take reasonable steps to protect your data and will notify you and the authorities of a breach where the law requires.
Children
This site is not intended for children under 16 (or 18 in India). We do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.
Changes to this policy
We may update this policy. The "Last updated" date at the top shows when it last changed. Significant changes will be highlighted on this page.
Contact
Brew Conversions is run by Shakti Singh Rathore, Gurugram, Haryana, India. For any question about this page, email shakti0407@gmail.com.