gainARK ("gainARK," "we," "us," or "our") provides B2B digital growth, marketing, and AI automation services. This Privacy Policy explains how we collect, use, disclose, and protect information when you visit gainark.com (the "Site") or otherwise interact with us, including as a prospective or current client.
This policy is written to be read by humans, not just lawyers. If anything is unclear, contact us at privacy@gainark.com.
1. Who We Are
gainARK is a B2B growth agency operating out of Hyderabad, India, serving clients in India, the United States, Europe, and other regions. For the purposes of applicable data protection law, gainARK is the data controller for information collected through this Site.
Contact details:
- Email: privacy@gainark.com
- Address: Hyderabad, Telangana, India
2. Information We Collect
2.1 Information you provide directly
- Contact form submissions: name, email address, company name, and any message content you submit through our contact form or homepage call-to-action.
- Email correspondence: if you email us directly, we retain that correspondence and any information you choose to include in it.
- Newsletter or update sign-ups (if offered): email address, and optionally name.
2.2 Information collected automatically
When you visit the Site, we and our service providers may automatically collect:
- Usage data: pages visited, time spent on pages, referring URLs, links clicked, and general navigation patterns.
- Device and browser data: IP address (which may be used to derive approximate location at a city or region level), browser type and version, operating system, device type, and screen resolution.
- Cookies and similar technologies: see our Cookie Policy for full detail on what we use and why.
We do not knowingly collect sensitive personal data (such as health information, religious beliefs, or biometric data) through this Site, and we ask that you do not submit such information through our contact forms.
2.3 Information from third parties
If you are referred to us by an existing client, partner, or through a professional network such as LinkedIn, we may receive your name, company, and professional contact details from that referral source.
3. How We Use Information
We use the information we collect to:
- Respond to inquiries submitted through our contact form or email
- Evaluate and pursue potential business engagements with prospective clients
- Deliver, manage, and improve services for current clients
- Operate, maintain, and improve the Site, including understanding how visitors use it
- Send service-related communications, such as replies to inquiries or updates relevant to an ongoing engagement
- Send marketing communications, where you have opted in or where permitted by applicable law, and always with an option to opt out
- Detect, investigate, and prevent fraud, abuse, or security incidents
- Comply with legal obligations, respond to lawful requests, and enforce our agreements
We do not sell personal information. We do not use the contact or business information you share with us to train third-party AI models without your knowledge; where we use AI tools internally to assist with drafting or research, this is for our own operational efficiency and is subject to the confidentiality terms of any client agreement.
4. Legal Basis for Processing (EEA, UK, and Similar Jurisdictions)
Where applicable data protection law (such as the GDPR) requires a legal basis for processing, we rely on one or more of the following:
- Consent: where you have actively opted in, such as to a newsletter
- Contractual necessity: where processing is necessary to perform a contract with you or take steps at your request before entering one (such as scoping a project after a discovery call)
- Legitimate interests: where processing supports our legitimate business interests, such as responding to inquiries, improving the Site, or direct marketing to existing business contacts, balanced against your rights and expectations
- Legal obligation: where we are required to process data to comply with law
5. How We Share Information
We do not sell your personal information. We share information only in the following circumstances:
5.1 Service providers
We use third-party service providers to operate our Site and business, including:
- Supabase (database hosting, authentication) — stores contact form submissions, blog content, and admin account data
- Resend (transactional email delivery) — used to send and receive emails related to contact form submissions
- Google Analytics / Google Tag Manager (where enabled) — website analytics
- Vercel (hosting and content delivery)
These providers process data on our behalf and are contractually restricted from using it for their own purposes. Each may have its own privacy policy governing how it handles data as a processor or sub-processor.
5.2 Legal requirements
We may disclose information if required by law, regulation, legal process, or governmental request, or where we believe disclosure is necessary to protect our rights, your safety, or the safety of others, or to investigate fraud or security issues.
5.3 Business transfers
If gainARK is involved in a merger, acquisition, restructuring, or sale of assets, personal information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.
5.4 With your direction
We may share information with third parties when you direct us to do so, such as connecting you with a partner tool or platform at your request.
6. International Data Transfers
gainARK is based in India and works with clients globally. If you are located outside India, your information will be transferred to and processed in India, and potentially in other countries where our service providers operate (including the United States, where some of our infrastructure providers are based).
Where required by applicable law, we take steps to ensure appropriate safeguards are in place for such transfers, which may include standard contractual clauses or reliance on the service provider's own compliance certifications.
7. Data Retention
We retain personal information only as long as necessary for the purposes described in this policy, including:
- Contact form submissions and leads: retained for as long as reasonably necessary to pursue a potential business relationship, and for a limited period afterward for record-keeping, unless you request deletion sooner
- Client engagement records: retained for the duration of the engagement and afterward as required for tax, accounting, and legal compliance purposes, typically up to 7 years depending on applicable law
- Website analytics data: retained according to the retention settings of the analytics tools in use, typically 14 to 26 months for standard Google Analytics configurations
When information is no longer needed, we take reasonable steps to delete or anonymize it.
8. Your Rights
Depending on your location, you may have some or all of the following rights regarding your personal information:
- Access: request a copy of the personal information we hold about you
- Correction: request correction of inaccurate or incomplete information
- Deletion: request deletion of your personal information, subject to legal exceptions
- Restriction: request that we limit how we use your information in certain circumstances
- Portability: request your information in a structured, commonly used, machine-readable format
- Objection: object to certain processing, including direct marketing
- Withdraw consent: where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of processing before withdrawal
8.1 Residents of the European Economic Area and United Kingdom (GDPR)
You have the rights listed above under the General Data Protection Regulation and, if in the UK, the UK GDPR. You also have the right to lodge a complaint with your local data protection supervisory authority.
8.2 Residents of India (DPDP Act)
Under India's Digital Personal Data Protection Act, you have the right to access, correct, update, and request erasure of your personal data, the right to nominate another individual to exercise your rights in the event of death or incapacity, and the right to file a complaint with the Data Protection Board of India.
8.3 Residents of California (CCPA/CPRA)
California residents have the right to know what personal information is collected, used, disclosed, or sold; the right to delete personal information; the right to correct inaccurate information; the right to opt out of the sale or sharing of personal information (gainARK does not sell personal information); and the right to non-discrimination for exercising these rights.
8.4 How to exercise your rights
To exercise any of these rights, email privacy@gainark.com with your request. We may need to verify your identity before fulfilling certain requests. We will respond within the timeframe required by applicable law, generally within 30 days.
9. Cookies
The Site uses cookies and similar tracking technologies. Full detail on what cookies we use, their purpose, and how to manage your preferences is available in our Cookie Policy.
10. Data Security
We implement reasonable technical and organizational measures designed to protect personal information against unauthorized access, alteration, disclosure, or destruction, including:
- Encrypted data transmission (HTTPS/TLS)
- Access controls restricting who within gainARK can view stored data, enforced through role-based admin permissions
- Secure third-party infrastructure providers (Supabase, Vercel) with their own security certifications
No method of transmission or storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.
11. Children's Privacy
This Site and our services are directed at businesses and professionals. We do not knowingly collect personal information from individuals under the age of 18 (or the applicable age of majority in your jurisdiction). If we become aware that we have inadvertently collected such information, we will take steps to delete it.
12. Third-Party Links
The Site may contain links to third-party websites, including client work samples or partner tools. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies independently.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. The "Last updated" date at the top of this page reflects the most recent revision. Material changes will be indicated by updating this page; for significant changes, we may provide additional notice where appropriate.
14. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, contact us at:
Email: privacy@gainark.com Address: Hyderabad, Telangana, India
This Privacy Policy is provided for general informational purposes and does not constitute legal advice. gainARK recommends periodic legal review of this policy to ensure ongoing compliance with applicable law as regulations and our practices evolve.