Privacy Policy

This Privacy Policy explains how Virtual Agency ("we", "us", "our", or "the Agency"), operating from Delhi, India, collects, processes, and protects your information when you visit our website (https://virtualagency.in), interact with our digital marketing campaigns, submit consultation forms, or engage our web design, SEO, PPC, social media, and digital strategy services.

By accessing our website or engaging with our service portals, you acknowledge the data handling practices described herein. If you disagree with any segment of this Privacy Policy, please discontinue using our digital platforms or contact us immediately.

We collect information in two principal ways: direct submissions provided by you, and automated technical logs collected through your browser interaction.

A. Information You Provide Voluntarily:

• Contact Identification: Full name, professional email address, phone/WhatsApp number, and physical billing/operational address.
• Corporate Profile: Company name, brand identity, targeted website domain URLs, industry vertical, and current digital marketing objectives.
• Project Briefs & Inquiries: Scopes of work, technical performance bottlenecks, budget ranges, and custom brief notes transmitted through our contact forms or website audit tools.
• Communication Records: Transcripts of emails, WhatsApp chats, and consultation calls held with our engineering or client management teams.

B. Technical Data Collected Automatically:

• Device & Telemetry Data: Internet Protocol (IP) address, browser family, operating system version, device category, screen resolution, and language preferences.
• Interaction Logs: Date and time stamps, referring URLs, click-stream paths, time elapsed per page, Core Web Vital diagnostics, and simulated performance metrics.

All data collected is utilized solely for lawful commercial and operational objectives, including:

• Compiling Performance Audits: Conducting SEO crawling evaluations, website speed tests, Core Web Vitals diagnostics, and marketing ROI forecasts requested by you.
• Executing Contracted Deliverables: Designing, engineering, optimizing, and maintaining websites, Google Ads setups, and multi-channel campaigns.
• Client Communication: Transmitting project milestones, consultation schedules, campaign progress reports, invoices, and service updates.
• Security & Abuse Prevention: Detecting server intrusions, filtering robotic spam via automated honeypots, and maintaining high server reliability.
• Legal Compliance: Fulfilling accounting, tax, regulatory reporting, and legal audit requirements under Indian law.

Our collection and processing of personal data is governed by the Digital Personal Data Protection Act, 2023 (India) and international data privacy principles (including the General Data Protection Regulation - GDPR where applicable):

• Consent: When you submit consultation forms, subscribe to insights, or consent to cookie usage. You retain the right to revoke consent at any time.
• Contractual Necessity: Processing necessary to prepare proposals, execute master service agreements (MSAs), and deliver contracted agency work.
• Legitimate Interests: Securing our web infrastructure, improving user experience, analyzing page loading performance, and preventing fraudulent submissions.

Our website uses standard browser cookies, local storage, and analytical beacons to ensure smooth navigation and analyze traffic patterns:

• Strictly Necessary Cookies: Essential for page routing, session security, CSRF defense, and server-side state persistence.
• Performance & Analytics (GA4): Google Analytics 4 utilizes anonymized IP addresses to assess aggregate traffic velocity, bounce rates, and navigation paths.
• Marketing Pixels: We may utilize conversion attribution tags (such as Google Ads or Meta Pixel) to determine advertising campaign effectiveness.

You can adjust your browser settings at any time to block or notify you about cookies. Disabling certain essential cookies may affect specific interactive features, such as our web ROI simulator.

Virtual Agency does not disclose client information to non-essential third parties. Information may only be shared under the following limited conditions:

• Verified Technical Infrastructure: Trusted cloud and server partners (LiteSpeed, Cloudflare CDN edge servers, secure transactional mail servers) operating under strict non-disclosure obligations.
• Client-Authorized Advertising Platforms: When managing ad spend on your behalf with platforms like Google LLC (Google Ads) or Meta Platforms (Facebook/Instagram Ads).
• Statutory & Legal Mandates: Where compelled by valid court orders, government authorities, or law enforcement bodies in accordance with applicable laws in India.

We enforce multi-tiered organizational and technical security measures to safeguard against unauthorized access, loss, alteration, or disclosure:

• Cryptographic Transit Security: 256-bit TLS/SSL encryption across all public web routes, forms, and administrative endpoints.
• Hardened Cloud Infrastructure: Cloudflare DDoS edge mitigation, automated firewall filtering, and secure server-level isolation.
• Access Controls: Role-based least-privilege administrative access controls, ensuring client project files are accessible only to assigned engineers.
• Sanitized Input Processing: Strict input sanitization and verification on all form submissions to prevent SQL injection and cross-site scripting (XSS).

We retain personal identification data only for as long as necessary to fulfill the objectives for which it was gathered, including:

• Consultation Inquiries: Retained for up to 24 months to support prospective project scoping and follow-up consultation requests.
• Active Client Accounts: Retained for the duration of the master service agreement plus standard statutory periods (typically 7 years for financial and contractual documentation under Indian tax law).
• Server Telemetry Logs: Raw IP access logs are cycled and deleted automatically every 90 days.

Depending on your jurisdiction and subject to statutory exceptions, you hold specific enforceable rights regarding your personal information:

• Right to Access: You may request copies of personal information maintained in our systems.
• Right to Rectification: You may request corrections to inaccurate, outdated, or incomplete details.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal contact records, subject to ongoing contractual or legal obligations.
• Right to Withdraw Consent: You may withdraw consent for marketing communications or data collection at any time.
• Right to Data Portability: You may request an export of your provided data in a structured, standard machine-readable format.

To exercise any of these rights, email our compliance desk at info@virtualagency.in. We respond to verified requests within thirty (30) business days.

In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, if you have questions, feedback, or grievances regarding our privacy protocols, please contact our designated Grievance Officer: