1. Who We Are

JASS Media Agency (“JASS Media”, “we”, “us”, or “our”) is an influencer marketing and growth agency operating from Hyderabad, Telangana, India. We connect brands with authentic content creators across Lifestyle, Fitness, Healthy Food, Travel and Hospitality niches.

This Privacy Policy describes how we collect, use, store, and protect your personal data when you visit jassmediaagency.com (the “Website”) or engage with our services. It is prepared in compliance with the Digital Personal Data Protection Act, 2023 (DPDPA), the Information Technology Act, 2000, and the IT (Reasonable Security Practices and Sensitive Personal Data) Rules, 2011.

2. Data We Collect

2.1 Information You Provide Directly

• Name and contact details (email address, phone number)
• Brand or company name and niche/industry
• Campaign budget range and business requirements
• Messages and communications you send us through the website contact form

2.2 Information Collected Automatically

• IP address and approximate geographic location
• Browser type, operating system, and device identifiers
• Pages visited, time spent, and referral source
• Cookie identifiers and session data

2.3 Information from Third Parties

• Business contact information from LinkedIn or other professional platforms where you engage with our public profiles

We do not collect any Sensitive Personal Data or Information (SPDI) as defined under the IT Rules, 2011, such as financial account details, passwords, health data, or biometric information through this Website.

3. How We Use Your Data

We use the personal data we collect for the following purposes:

• Service Delivery: To respond to enquiries, schedule strategy calls, and provide influencer marketing services
• Communication: To send you relevant information about campaigns, proposals, and updates
• Improvement: To analyse website usage and improve our services and content
• Legal Compliance: To meet our obligations under applicable Indian law
• Business Relationships: To manage client and creator partnerships

We do not sell, rent, or trade your personal data to any third party for their independent marketing purposes.

4. Legal Basis for Processing

Under the Digital Personal Data Protection Act, 2023, we process your personal data on the following bases:

• Consent (Section 6, DPDPA): When you submit our contact form, you expressly consent to us processing your data to respond to your enquiry
• Legitimate Uses (Section 7, DPDPA): For purposes reasonably expected by you such as responding to your communications and fulfilling service agreements
• Legal Obligation: Where processing is required to comply with Indian law or a court order

You may withdraw your consent at any time by writing to our Grievance Officer (details in Section 11). Withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

5. Third-Party Sharing

We may share your personal data with:

• Service Providers: Hosting (WordPress.com / Automattic Inc.), email delivery, and analytics tools that process data on our behalf under strict confidentiality obligations
• Creators & Talent: Where you engage us for a campaign, limited details (brand name, campaign brief) may be shared with relevant content creators under non-disclosure obligations
• Legal Authorities: Where required by law, court order, or government directive under Indian law

Any third-party processors engaged by us are required to maintain standards of data protection consistent with applicable Indian law. Cross-border transfers of data, if any, are conducted with appropriate safeguards as per applicable DPDPA provisions.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this Policy or as required by applicable law:

• Enquiry data: Up to 24 months from the date of submission or last communication, whichever is later
• Client data: For the duration of our engagement and up to 5 years thereafter, for legal and accounting purposes
• Website analytics: Up to 26 months in anonymised or aggregated form

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised.

7. Cookies & Tracking Technologies

We use cookies and similar tracking technologies on our Website. These include:

• Strictly Necessary Cookies: Required for the Website to function correctly (session management, security)
• Analytics Cookies: Used to understand how visitors interact with the Website (e.g., Jetpack/WordPress.com analytics)

You can control cookies through your browser settings. Disabling certain cookies may affect your experience on the Website. For details on WordPress.com’s cookie usage, please refer to Automattic’s Cookie Policy.

8. Your Rights as a Data Principal

Under the Digital Personal Data Protection Act, 2023, you have the following rights as a Data Principal:

• Right to Access (Section 11): Obtain a summary of your personal data we process and the processing activities
• Right to Correction (Section 12): Request correction of inaccurate or incomplete personal data
• Right to Erasure (Section 12): Request erasure of personal data where it is no longer necessary
• Right to Grievance Redressal (Section 13): Have your grievances addressed in a timely manner
• Right to Nominate (Section 14): Nominate an individual to exercise your rights in the event of death or incapacity

To exercise any of these rights, please contact our Grievance Officer. We will respond within 30 days of receiving your request, as required under applicable law.

9. Data Security

We implement reasonable technical and organisational security measures as required under Rule 8 of the IT (Reasonable Security Practices) Rules, 2011, to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures include:

• HTTPS encryption across the Website
• Access controls limiting data access to authorised personnel only
• Regular review of our data handling practices

However, no method of transmission over the internet is 100% secure. In the event of a data breach that is likely to affect your rights, we will notify you as required under the DPDPA, 2023.

10. Children’s Privacy

Our Website and services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a child, please contact our Grievance Officer immediately and we will delete such data promptly.

11. Grievance Officer

If you are not satisfied with the resolution, you may escalate your complaint to the Data Protection Board of India once constituted under the DPDPA, 2023.

12. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the Republic of India, including the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices) Rules, 2011, and the Digital Personal Data Protection Act, 2023. Any disputes arising under this Policy shall be subject to the exclusive jurisdiction of the courts at Hyderabad, Telangana.

13. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. Material changes will be notified on the Website with a revised effective date. Your continued use of the Website after any changes constitutes your acceptance of the updated Policy. We encourage you to review this page periodically.

14. Contact Us

For any questions, clarifications, or requests relating to this Privacy Policy, please write to: