Global Surat ("Global Surat", "we", "us" or "our") is a digital growth studio headquartered in Surat, India, with teams in Canada and the United Kingdom. This policy explains how we collect, use, share and protect personal information when you visit our website (the "Website"), contact us, use the Business Growth Planner, subscribe to our newsletter, apply to work with us, or engage us as a client.
Our mobile games and apps are covered by a separate policy written for app users: the App Privacy Policy.
At a glance
We collect the information you give us, such as the details in an enquiry form, plus a limited amount of technical information collected automatically when you browse.
We use it to reply to you, deliver our services, run and improve the Website, and meet our legal obligations.
We do not sell your personal information, and we do not share it with others for their own marketing.
You can ask us to access, correct or delete your information at any time by writing to connect@globalsurat.com.
1. Who is responsible for your information
Global Surat is responsible for the personal information described in this policy. Under the EU and UK General Data Protection Regulation we are the "controller", and under India's Digital Personal Data Protection Act, 2023 (the "DPDP Act") we are the "data fiduciary". Our contact details are at the end of this policy.
When we deliver services to a client and handle personal information on that client's behalf, for example a customer list used to build an advertising audience, the client is responsible for that information and we act on its instructions. Section 9 explains how that works.
2. Information we collect
Information you give us
Enquiries and project briefs: your name, email address, phone number, company, website, country, the services you are interested in, your budget range and anything you write in your message.
Business Growth Planner: your name and phone number, your email address and website or brand name if you choose to give them, and the business figures you enter, such as prices, costs, order volumes and delivery rates.
Newsletter: your email address.
Job applications and hiring enquiries: your CV, contact details, work history, portfolio links, answers to application questions and anything else you choose to include.
Calls and correspondence: information you share when you book a call, email us, message us on WhatsApp or social media, or speak with our team.
Clients and suppliers: business contact details, billing and tax information such as a GST or VAT number and billing address, contracts and payment records.
Information collected automatically
When you browse the Website, we and our analytics providers may collect your IP address, browser and device type, operating system, the page that referred you, the pages you view and for how long, your approximate location (city or country, derived from your IP address) and cookie identifiers. Our Cookie Policy explains the technologies involved and how to control them.
Information from other sources
We may receive information about you from public professional sources such as LinkedIn and company websites, from clients or partners who refer you to us, from recruitment platforms when you apply through them, and from advertising and analytics platforms in the form of reports about our own campaigns.
We do not ask for sensitive information, such as health, financial account or biometric details, through the Website, and we ask you not to include it in forms or messages. The Website does not collect payment card details.
3. How we use your information
We use personal information only for the purposes below. For visitors in the EEA and UK, the legal basis we rely on is shown in brackets.
To reply to enquiries and prepare proposals (steps taken at your request before entering a contract, and our legitimate interest in responding to people who contact us).
To deliver our services and manage client relationships, including onboarding, reporting, invoicing and collecting payment (performance of a contract, and legal obligations such as tax and accounting rules).
To run the Business Growth Planner: saving your scenarios, recognising your browser when you return, producing your report and following up about your results (your consent, and our legitimate interest in providing a tool you asked to use). You can ask us to stop following up at any time.
To send our newsletter (your consent). Every issue includes an unsubscribe link.
To assess job applications and hiring enquiries (steps taken at your request before entering a contract, and our legitimate interest in recruiting).
To understand and improve the Website through analytics (our legitimate interests, or your consent where the law requires it).
To tell business contacts about our services (our legitimate interests; you can opt out at any time).
To keep the Website and our systems secure, prevent spam and abuse, and detect fraud (our legitimate interests).
To meet legal obligations and establish, exercise or defend legal claims (legal obligation and legitimate interests).
Under the DPDP Act, we process your personal data on the basis of the consent you give when you submit a form or contact us, or for a legitimate use the Act permits. You can withdraw your consent at any time by writing to us. Withdrawing consent does not affect processing that took place before it.
4. How we share information
We share personal information only as described here:
Service providers who help us run our business, such as hosting and infrastructure, email and communication tools, customer relationship and project management software, meeting scheduling (for example Calendly), analytics (for example Google Analytics and Google Tag Manager), advertising measurement (for example the Meta Pixel), and accounting and payment services. They may use the information only to provide their service to us.
Our own team in India, Canada and the United Kingdom, on a need-to-know basis.
Advertising and technology platforms when we run campaigns on a client's instructions.
Professional advisers such as lawyers, accountants and auditors, under a duty of confidentiality.
Authorities and others when the law, a court order or a lawful request requires it, or when it is necessary to protect the rights, property or safety of Global Surat, our clients or others.
A buyer or successor if our business, or part of it, is reorganised, merged or sold. We will make sure your information stays protected under terms at least as strong as these.
Anyone else with your consent or at your direction.
We do not sell personal information.
5. Cookies and advertising
We use cookies and similar technologies to operate the Website, remember your choices, measure how it is used and, where enabled, measure our own advertising. The Cookie Policy lists them and explains how to control them.
Where we display advertising on the Website or use advertising tags to measure our own campaigns, third-party vendors, including Google, may use cookies to serve ads based on your previous visits to this and other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to this and other sites on the internet. You can opt out of personalised advertising from Google at My Ad Center, and from many other vendors at optout.aboutads.info or youronlinechoices.eu. To learn how Google uses information from websites and apps that use its services, visit policies.google.com/technologies/partner-sites.
6. International transfers
We work from India, Canada and the United Kingdom, and some of our service providers process information in other countries, including the United States. When we transfer personal information out of the EEA or the UK, we rely on an adequacy decision or on appropriate safeguards such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum. Transfers out of India are made in line with the DPDP Act and any restrictions notified by the Government of India.
7. How long we keep information
Enquiries that do not lead to an engagement: up to 24 months after our last contact with you.
Client and supplier records: for the length of the engagement, then for as long as tax, accounting and other legal requirements demand, usually up to 8 years.
Business Growth Planner: up to 24 months after you last use it, or sooner if you ask us to delete it. "Forget this browser" disconnects your browser from your saved scenarios; to have the scenarios themselves deleted, write to us.
Job applications: up to 12 months after the role is filled or closed, unless you agree to us keeping your application longer or you join our team.
Newsletter: until you unsubscribe. We then keep your email address on a suppression list so that we do not contact you again.
Analytics data: up to 14 months.
When information is no longer needed, we delete it or anonymise it so that it can no longer identify you.
8. How we protect information
We use encryption in transit, access controls based on each person's role, the principle of least privilege, careful selection of service providers and confidentiality commitments from our team. For example, the cookie the Business Growth Planner uses to recognise your browser holds a random token, and we store only a one-way hash of it. No system is completely secure, but if a breach affects your information we will notify you and the relevant authorities as the law requires, including the Data Protection Board of India, the UK Information Commissioner's Office or the Office of the Privacy Commissioner of Canada.
9. Information we handle for our clients
To deliver our services we may be given access to a client's advertising accounts, analytics properties, online store, customer relationship management system or customer lists. In that role we process personal information only on the client's documented instructions, keep it confidential, protect it with appropriate security and do not use it for our own purposes. These commitments are set out in our Service Terms and, where required, in a data processing agreement.
The client is responsible for having a lawful basis for the processing and for giving people any notice or obtaining any consent that is needed, for example before uploading a customer list to an advertising platform. If you are a customer of one of our clients and want to exercise your rights, please contact that business first. We will help it respond.
10. Your rights
Depending on where you live, you may have the right to access the personal information we hold about you, to have it corrected, completed or deleted, to restrict or object to how we use it (including for direct marketing), to receive a copy in a portable format, to withdraw consent, and to complain to a regulator.
India
Under the DPDP Act you may request a summary of your personal data and how it is processed, ask for it to be corrected, completed, updated or erased, use our grievance redressal process, and nominate another person to exercise your rights if you die or become unable to do so. If you are not satisfied with our response to a grievance, you may complain to the Data Protection Board of India.
European Economic Area, United Kingdom and Switzerland
You have the rights set out in the GDPR and the UK GDPR. You may also complain to your local data protection authority. In the UK, that is the Information Commissioner's Office at ico.org.uk.
Canada
Under the Personal Information Protection and Electronic Documents Act (PIPEDA) you may access your personal information, challenge its accuracy and withdraw consent, subject to legal and contractual limits. You may also complain to the Office of the Privacy Commissioner of Canada.
United States
Residents of California and other states with privacy laws may have the right to know what personal information we collect and how we use and disclose it, to delete and correct it, to opt out of its "sale" or "sharing" for cross-context behavioural advertising, and not to be discriminated against for exercising these rights. We do not sell personal information. If our use of advertising cookies counts as "sharing" under your state's law, you can opt out by blocking those cookies as described in the Cookie Policy or by contacting us. You may use an authorised agent to make a request on your behalf.
How to make a request
Write to connect@globalsurat.com with "Privacy request" in the subject line. We may need to confirm your identity before we act. We will respond within 30 days, or sooner where the law requires, and there is no charge unless a request is clearly unfounded or excessive.
11. Marketing messages
You can stop receiving marketing emails at any time by using the unsubscribe link in any message or by replying to ask us to stop. We will still send messages you need about an engagement, an application or a request you have made.
12. Children
The Website is intended for businesses and professionals and is not directed at children. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, please contact us and we will delete it.
13. Links to other websites
The Website links to other websites and services, such as social networks, booking tools and client websites. Their owners are responsible for their own privacy practices, and we encourage you to read their policies.
14. Changes to this policy
We may update this policy as our services, the law or our practices change. We will change the "Last updated" date at the top of this page and, if the changes are significant, we will give a prominent notice on the Website or tell you directly where appropriate.
15. Contact us and grievance officer
Global Surat
A-502, Pragati IT Park, Mota Varachha, Surat, Gujarat, India
Email: connect@globalsurat.com
Phone: +91 90332 17529
Grievance Officer. If you have a complaint about how we handle your personal information, write to our Grievance Officer at connect@globalsurat.com with "Grievance" in the subject line. We will acknowledge your complaint within 72 hours and aim to resolve it within 30 days.
Last updated 24 September 2026