Privacy Policy

Corporate Gifting Mumbai ("we", "us", "our") runs this website at corporategiftingmumbai.in and provides business-to-business corporate gifting services across Mumbai, Thane, Navi Mumbai and Panvel.

For the purposes of the Digital Personal Data Protection Act, 2023 (the "DPDP Act"), Corporate Gifting Mumbai is the Data Fiduciary for the personal data described in this notice. That means we decide why and how your data is handled, and we are answerable to you for it. If you have sent us an enquiry, you are a Data Principal.

Email and phone are the contact routes for every request in this notice. You can also use the form on our contact page, but please mark it clearly as a privacy request so it reaches the right person.

We collect personal data at three points on this site. All three are optional and start with you — nothing is collected if you simply read the pages.

• The quote dialog that opens when you click a "Get a quote" or "Request proposal" button.
• Inline enquiry forms placed within pages, including the contact page.
• The on-site chat box. To be plain about what this is: it is a scripted conversational form — a fixed set of questions in a chat-style layout. It is not an AI, it does not learn from what you type, and it does not build a profile of you. It collects the same fields as the forms.

The itemised list

The specified purpose

We use the data above for one specified purpose: to prepare, send and follow up a corporate gifting quotation, and to fulfil any order that follows from it. That includes replying by phone, WhatsApp or email, checking stock and delivery feasibility, sharing samples or mock-ups, and keeping a record of the enquiry.

We do not use it for anything unrelated. We do not profile you, we take no automated decision about you, and we do not add you to unrelated marketing lists.

Our lawful basis for processing the data in Section 2 is your consent, given by a clear affirmative action: you fill in the fields and press send. Nothing is pre-ticked, and we do not treat silence, or merely browsing the site, as consent.

That consent is meant to be free, specific, informed, unconditional and unambiguous. It is limited to the purpose set out in Section 2 and nothing beyond it, and we do not require you to agree to any unrelated processing as a condition of getting a quotation.

Withdrawing your consent

You can withdraw your consent at any time, and it is as easy to withdraw as it was to give. Email [email protected] or call +91 93093 80958 and say you are withdrawing consent. One line is enough — you do not have to give a reason or fill in any form.

What happens next: we stop processing your data for the gifting purpose and erase it, and we instruct our processor to do the same, unless a law requires us to retain a specific record (see Section 6). The practical consequence is simply that we can no longer progress your enquiry — we will not be able to send or revise your quotation, chase a sample, or contact you about an open order. Withdrawal does not undo processing that already lawfully took place before you withdrew.

We share personal data with only the two service providers below. Both act as Data Processors on our instructions and under contract — they process data for us, not for their own purposes.

Apart from these, we may disclose data where we are legally obliged to — for example to a court, a regulator or a law-enforcement agency acting under a valid order. Any such disclosure is limited to what the law requires.

We do not sell your personal data, we do not rent or trade it, and we do not share it with anyone for their own marketing.

This site sets no cookies until you accept. On your first visit you will see a consent banner. Unless you press accept, no analytics cookie is written — declining and ignoring the banner have exactly the same effect.

We use Google Consent Mode, which means the Google Analytics tag is present on the page from the start with every storage permission denied. Before you accept it cannot write or read a cookie and cannot recognise you on a later visit, but Google does receive one cookieless request containing your IP address and browser details. If you accept, analytics storage is switched on and Google Analytics sets the cookies listed in the Cookie Policy to measure visits in aggregate. You can change or withdraw that choice at any time, and withdrawing switches storage back off and deletes those cookies. The full detail — cookie names, what they do, and how to change your choice — is in the Cookie Policy.

Your analytics choice is separate from your enquiry. Declining cookies does not stop you getting a quotation, and sending an enquiry does not switch analytics on.

We keep personal data only as long as it is needed for the purpose it was given for, or as long as a law requires us to keep it — and then we erase it.

If you withdraw consent or ask for erasure before these periods are up, we act on your request rather than waiting for the clock to run out.

Under the DPDP Act you have the following rights over the personal data you have given us. They are free to exercise, and exercising them is never held against you.

The DPDP Act also asks something of you in return: please give us accurate and complete information, do not impersonate anyone else, and do not file a frivolous or false complaint.

There is no form to fill in. Contact us by either route and tell us what you want:

Please include the mobile number or email address you used when you enquired, so we can find the right record. We may ask one or two questions to confirm the data is really yours before we act — that protects you, not us. We will not ask for identity documents, and we will never ask for a password or a payment detail.

We have appointed a Grievance Officer, who is responsible for answering questions and complaints about how we handle personal data and for making sure the requests in Section 7 are actually carried out. The role — not any one individual — is the point of accountability, so your complaint is answered even if the person in the role changes.

If you are not satisfied

If we do not respond within the timelines in Section 8, or you are unhappy with our answer, you may escalate your complaint to the Data Protection Board of India — the authority established under the DPDP Act — in the manner the Board prescribes. Under the Act, raising the matter with us first is a required step, so please give us the chance to put it right.

We take reasonable security safeguards to protect the personal data we hold against loss, unauthorised access and unauthorised disclosure. In practical terms: enquiry data is transmitted over a secure connection; access to enquiry records is limited to the people who need it to prepare and deliver your quotation; we collect only the small set of fields in Section 2 and no more; we erase data on the schedule in Section 6; and we require our processors to handle data only on our instructions.

We would rather be accurate than impressive here, so we do not claim certifications, audits or technical controls we cannot evidence. No method of transmission or storage is completely secure, and we will not pretend otherwise.

If what we do with personal data changes, we will update this notice and change the "last updated" date at the top and bottom of the page. Where a change materially affects the purpose you consented to, we will ask for your consent again rather than rely on the old one.

This notice was last updated on 21 October 2026.