Who We Are
Maddog Global is a full-service digital marketing agency based in India, providing services including SEO, performance marketing, social media management, web design and development, branding, content marketing, and marketing automation to businesses in India, the United Kingdom, the United States, Australia, Canada, the UAE, Ireland, Singapore, New Zealand and across Europe.
For the purposes of India's Digital Personal Data Protection Act 2023 (DPDP Act) and the DPDP Rules 2025, Maddog Global acts as the Data Fiduciary in respect of personal data collected through our website and digital channels. For clients in the European Union or United Kingdom, Maddog Global acts as the Data Controller for the purposes of the General Data Protection Regulation (GDPR) and UK GDPR respectively.
Registered Business: Maddog Global LLP | Delhi, India | Website: maddogworld.com | Email: info@maddogworld.com | Phone: +91 721 779 3189
This Privacy Policy applies to all visitors to our website at maddogworld.com, prospective clients who contact us through any digital channel, existing clients whose data we process as part of delivering our services, and individuals who interact with our content on third-party platforms including social media.
Data We Collect
We collect personal data in two ways: data you provide to us directly with your knowledge and consent, and data collected automatically when you visit our website.
2.1 Data You Provide Directly
- Contact and inquiry information: When you submit a contact form, request a free audit, book a consultation or reach out to us through any channel, we collect your full name, email address, phone number, company or business name, and the message or inquiry content you provide.
- Business information: When you engage us for services, we may collect your company registration details, website URL, current marketing spend, target markets, and other business information relevant to the services you have requested.
- Communication data: Records of emails, calls and other communications you have with our team, including enquiries and support requests.
- Payment information: Billing name, address and invoice-relevant details. We do not store card numbers or payment credentials — all payment processing is handled by PCI-DSS compliant payment processors and we receive only transaction confirmation.
- Testimonials and case studies: With your explicit written permission, we may collect and publish your name, company name, photograph and feedback as a testimonial or case study on our website and marketing materials.
2.2 Data Collected Automatically
- Technical data: IP address, browser type and version, device type (mobile, tablet, desktop), operating system, screen resolution and time zone.
- Usage data: Pages visited on our website, the order in which you visited them, time spent on each page, links clicked, search terms used on our site, and the source from which you arrived (direct, search engine, referral, paid advertisement).
- Cookie data: Data stored on your device through cookies, pixels and similar tracking technologies as described in Section 5 of this Policy.
What we never collect: We do not collect Aadhaar numbers, PAN numbers, bank account details, passwords, biometric data, racial or ethnic origin, religious beliefs, political opinions, medical information, or any other sensitive personal data as defined under the DPDP Act 2023, unless explicitly required for a specific contracted service and with your documented consent.
How We Use Your Data
We collect and use your personal data only for specific, clearly defined purposes. We do not use your data for any purpose beyond what is stated in this Policy without obtaining fresh, explicit consent from you.
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Responding to your enquiries and contact form submissions | Name, email, phone, message content | Consent (DPDP) / Legitimate Interest (GDPR) |
| Delivering digital marketing and agency services to clients | Business info, contact details, campaign data | Contract performance |
| Sending service updates, proposals and project communications | Email, phone, name | Contract performance / Consent |
| Sending marketing communications (newsletters, offers, insights) | Email, name | Explicit consent — opt-in only |
| Improving our website performance and user experience | Usage data, technical data, cookie data | Legitimate Interest / Consent for non-essential cookies |
| Running targeted advertising campaigns (Google Ads, Meta Ads) | Cookie data, device identifiers, IP address | Consent via cookie consent mechanism |
| Fraud prevention, security and legal compliance | Technical data, IP address, transaction records | Legal obligation / Legitimate Interest |
| Generating anonymised performance analytics and reports | Aggregated, anonymised usage data | Legitimate Interest |
We will never use your personal data to make automated decisions that produce legal or similarly significant effects on you without your explicit consent and the option to request human review of any such decision.
Legal Basis for Processing
Every instance of personal data processing at Maddog Global is supported by one of the following lawful bases, in accordance with both India's DPDP Act 2023 and the EU General Data Protection Regulation (GDPR).
- Consent: Where you have given us clear, specific, freely given and unambiguous consent to process your data for a defined purpose — such as subscribing to our newsletter or agreeing to cookie tracking. Under the DPDP Act 2023, consent must be explicit and purpose-specific. Under GDPR, consent must be equally clear and as easy to withdraw as it is to give. You may withdraw your consent at any time by contacting us at info@maddogworld.com.
- Contract performance: Where processing is necessary to fulfil a contract we have with you — for example, delivering the digital marketing services you have engaged us for, issuing invoices, or communicating about your ongoing projects.
- Legal obligation: Where processing is required to comply with a legal obligation applicable to us under Indian law, EU law or other applicable jurisdiction — such as tax record-keeping, responding to regulatory requests, or complying with court orders.
- Legitimate interest: Where processing is necessary for our legitimate business interests, provided those interests are not overridden by your fundamental rights and freedoms. This includes website security monitoring, fraud prevention, improving our services based on aggregated analytics, and follow-up communications with prospective clients who have expressed a genuine interest in our services.
DPDP Act 2023 Compliance: Under India's Digital Personal Data Protection Act 2023 and DPDP Rules 2025 (effective November 2025), Maddog Global processes personal data of Indian residents strictly on a consent-first basis. We provide notice before collecting data, maintain purpose limitation, and honour all Data Principal rights including access, correction, erasure and grievance redressal through our designated Grievance Officer.
Cookies and Tracking Technologies
Our website uses cookies — small text files placed on your device — and similar tracking technologies including pixels and local storage. We use cookies to make our website function correctly, to understand how visitors use it, and (with your consent) to show you relevant advertising.
| Cookie Type | Purpose | Examples | Consent Required |
|---|---|---|---|
| Strictly Necessary | Enable core website functions — contact forms, security, navigation. The website cannot function without these. | Session cookies, CSRF protection, WordPress login | No — essential for operation |
| Analytics & Performance | Understand how visitors navigate the website so we can improve it. Data is aggregated and anonymised. | Google Analytics 4 (GA4), Hotjar, Microsoft Clarity | Yes — opt-in consent required |
| Marketing & Advertising | Track visits across websites to show you relevant adverts on Google, Facebook, Instagram and other platforms. | Google Ads pixel, Meta Pixel (Facebook), LinkedIn Insight Tag | Yes — opt-in consent required |
| Preference / Functional | Remember your preferences and settings to personalise your experience — such as language or region. | Language preference, cookie consent decision | Yes — consent required |
Managing Your Cookie Preferences
When you first visit our website, a cookie consent banner gives you the choice to accept or decline non-essential cookies. You can change your preferences at any time through your browser settings or by contacting us. Most modern browsers allow you to refuse cookies or delete cookies already stored on your device. Please note that refusing certain cookies may affect the functionality of our website.
- Google Chrome: Settings → Privacy and Security → Cookies and other site data
- Mozilla Firefox: Settings → Privacy and Security → Cookies and Site Data
- Safari: Preferences → Privacy → Manage Website Data
- Microsoft Edge: Settings → Cookies and Site Permissions → Cookies and Site Data
You can also opt out of interest-based advertising from Google at adssettings.google.com and from Meta at facebook.com/settings/?tab=ads.
Third-Party Tools and Services
To deliver our services, operate our website and run marketing campaigns, we use a number of trusted third-party tools and platforms. Each of these providers processes certain data in accordance with their own privacy policies. We have listed below the key tools we use and their data handling implications.
| Tool / Platform | Category | Data Processed | Privacy Policy |
|---|---|---|---|
| Google Analytics 4 (GA4) | Website analytics | Anonymised usage data, pages visited, session duration, device type, geographic region | policies.google.com/privacy |
| Google Ads | Paid advertising | Cookie identifiers, conversion events, audience lists for retargeting | policies.google.com/privacy |
| Meta Business Suite (Facebook/Instagram) | Paid advertising & social | Meta Pixel data: page views, events, conversion signals — with IP masking enabled | facebook.com/privacy/policy |
| HubSpot / Zoho CRM | CRM and email marketing | Name, email, company, inquiry details of prospects and clients who have consented | legal.hubspot.com/privacy-policy |
| WhatsApp Business API | Client communication | Phone number, message content for opted-in clients and prospects only | whatsapp.com/legal/privacy-policy |
| WordPress (website platform) | Website CMS | Form submissions, comments, user account data (for registered users only) | automattic.com/privacy |
| Cloudflare | Security & CDN | IP addresses, request logs for security monitoring and DDoS protection | cloudflare.com/privacypolicy |
| Stripe / Razorpay | Payment processing | Billing name, address, transaction data — card data never touches our servers | stripe.com/privacy |
Our website may contain links to third-party websites. Once you leave our website, this Privacy Policy does not apply. We encourage you to read the privacy policies of any external sites you visit. We are not responsible for the privacy practices of third-party websites.
Data Sharing and Disclosure
We do not sell, rent or trade your personal data. We do not sell your personal information to advertisers, data brokers or any other third party. Your data is used solely to serve you and deliver our agency services.
We share personal data only in the following limited circumstances:
- Service providers and data processors: We share data with trusted companies who help us operate our business — such as our hosting provider, analytics platforms, CRM software, email delivery services and payment processors. These companies are contractually bound to process data only on our instructions, maintain appropriate security, and not use your data for their own purposes. All such providers are identified in Section 6.
- Legal compliance and law enforcement: We may disclose personal data to government authorities, law enforcement agencies or courts where we are legally required to do so under applicable Indian law, EU law, or the law of any other jurisdiction where we operate. We will notify you of any such disclosure where permitted by law.
- Business transfers: In the event of a merger, acquisition, restructuring or sale of all or part of Maddog Global's business, your personal data may be transferred as part of that transaction. We will notify you before your data is transferred and becomes subject to a different privacy policy.
- With your explicit consent: We may share your data with any other party where you have given us specific, written permission to do so — for example, featuring your company in a case study or sharing your portfolio work as a reference for a prospective client with your prior approval.
Data Retention
We retain personal data only for as long as is necessary to fulfil the purpose for which it was collected and to comply with our legal, accounting and reporting obligations. When personal data is no longer required, we securely delete or anonymise it.
| Data Category | Retention Period | Reason |
|---|---|---|
| Contact form enquiries (non-clients) | 24 months from last contact | To follow up on enquiries and maintain a record of pre-sales interactions |
| Client project and service records | 7 years after project completion | Legal obligation — financial records and contract documentation |
| Marketing consent records (email subscribers) | Until consent withdrawn + 6 months | To demonstrate lawful basis for marketing communications |
| Website analytics data (GA4) | 14 months (GA4 default) | To analyse trends and improve website performance |
| Financial and billing records | 7 years | Indian tax law (Income Tax Act 1961) and GST compliance requirements |
| Communication records (email, WhatsApp) | 3 years after last communication | Dispute resolution and business continuity |
| Cookie and tracking data | Up to 13 months (browser-based) | Analytics and ad platform measurement requirements |
After the applicable retention period, we will securely delete your personal data from our systems and from those of any third-party processors. Where full deletion is not technically possible (for example, in backup archives), we will isolate and protect the data from any further processing until deletion is possible.
Your Rights Over Your Data
You have significant rights over your personal data. These rights apply to all individuals whose data Maddog Global processes, whether you are in India, the EU, the UK, or anywhere else we operate. We are committed to honouring these rights promptly and without unnecessary barriers.
Right to Access
Request a copy of all personal data we hold about you and information about how we process it.
Right to Correction
Request that inaccurate or incomplete personal data we hold about you is corrected or updated.
Right to Erasure
Request deletion of your personal data where there is no lawful basis for us to continue holding it.
Right to Restrict
Request that we stop actively processing your data while retaining it — for example, during a dispute.
Right to Portability
Receive your personal data in a structured, machine-readable format to transfer to another service provider.
Right to Object
Object to processing based on legitimate interests, including direct marketing and profiling activities.
Right to Withdraw Consent
Withdraw consent for any processing based on consent at any time, without affecting prior lawful processing.
Right to Grievance Redressal
Under the DPDP Act 2023, raise a grievance with our Grievance Officer and receive a response within 30 days.
Right to Complain
Lodge a complaint with India's Data Protection Board or your local data protection authority if unsatisfied with our response.
To exercise any of these rights, email us at info@maddogworld.com with the subject line "Data Rights Request" and we will respond within 30 days. We will ask you to verify your identity before processing any request to protect your data from unauthorised access. There is no charge for submitting a rights request unless the request is unfounded or excessive.
Data Security
We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration or disclosure. Our security practices include:
- SSL/TLS encryption on all data transmitted between your browser and our website (HTTPS enforced across the entire domain)
- Access controls ensuring only authorised team members can access personal data, on a need-to-know basis with role-based permissions
- Two-factor authentication (2FA) required for all team member access to systems containing personal data
- Regular security audits and vulnerability assessments of our website and internal systems
- Encrypted storage for sensitive client data and project files using industry-standard encryption at rest
- Daily backups with encryption and ransomware protection for business continuity
- Vendor security standards — all third-party processors we use are required to maintain appropriate security standards equivalent to or exceeding our own
Data breach notification: In the event of a personal data breach that is likely to affect your rights and freedoms, we will notify you and the relevant authorities (India's Data Protection Board and/or applicable EU/UK supervisory authority) within the timeframes required by applicable law — 72 hours under GDPR and as required under the DPDP Act 2023. If you believe your data has been compromised, please contact us immediately at info@maddogworld.com.
Children's Privacy
Maddog Global's website and services are intended exclusively for business professionals and adults aged 18 years and above. We do not knowingly collect personal data from individuals under the age of 18.
Under India's DPDP Act 2023, personal data of children (under 18) requires verifiable parental or guardian consent before processing. We do not target our services at children and our website contains no content directed at minors.
If we become aware that we have inadvertently collected personal data from a person under 18 without verified parental consent, we will take immediate steps to delete that data from our records. If you believe we may have collected data from a child, please contact us immediately at info@maddogworld.com.
International Data Transfers
Maddog Global is based in India and serves clients across India and 9 international markets. As a result, your personal data may be processed by our team in India and by our third-party service providers whose servers or operations may be located outside of India.
When we transfer personal data internationally, we ensure appropriate safeguards are in place to protect your data to a standard equivalent to India's DPDP Act 2023 and, where applicable, to GDPR standards. These safeguards include:
- Using only third-party processors who maintain GDPR-aligned data processing agreements and demonstrate adequate data protection standards
- Ensuring Standard Contractual Clauses (SCCs) are in place for any transfers of EU or UK resident data outside the European Economic Area
- Applying data minimisation principles so that only the minimum necessary data is transferred for any given purpose
- Relying on processors such as Google, Meta, HubSpot and Stripe who maintain internationally recognised compliance certifications (ISO 27001, SOC 2 Type II) and whose data transfer mechanisms have been reviewed by applicable regulators
By using our website or engaging our services from outside India, you acknowledge that your data may be processed in India where data protection laws may differ from those in your home country. We take all reasonable steps to ensure your data remains protected regardless of where it is processed.
Changes to This Policy
This Privacy Policy is a living document that we review and update regularly to reflect changes in our business practices, applicable law, and evolving privacy standards. The date of the most recent revision is displayed prominently at the top of this page and in the Table of Contents.
When we make material changes to this Policy — for example, changes that significantly affect how we collect, use or share your data — we will notify you in the following ways:
- A prominent notice on our website homepage for a period of at least 30 days following the change
- An email notification to subscribers of our marketing communications and to active clients whose data is affected
- An updated "Last Modified" date at the top of this Privacy Policy page
Where required by law, we will seek fresh consent from you before any material change takes effect. For minor or administrative changes that do not affect how your data is fundamentally processed, we will update this Policy without providing advance notice, but the updated date will always reflect the latest version.
We encourage you to review this Privacy Policy periodically. Your continued use of our website or services after any changes are posted constitutes your acceptance of the updated Policy in respect of non-material changes.
Contact Us and Grievance Officer
For any questions, concerns or requests relating to this Privacy Policy or the personal data we hold about you, please contact our Privacy and Data Protection point of contact:
| Contact Detail | Information |
|---|---|
| Business Name | Maddog Global |
| Website | maddogworld.com |
| Privacy Email | info@maddogworld.com |
| Phone | +91 721 779 3189 |
| Contact Page | maddogworld.com/contact-us/ |
| Response Time | Within 3 business days of receipt of your request |
Grievance Officer (DPDP Act 2023)
Under India's Digital Personal Data Protection Act 2023, Maddog Global has designated a Grievance Officer to handle data protection complaints and grievances from Data Principals (individuals whose data we process). To raise a grievance, please email info@maddogworld.com with the subject line "DPDP Grievance". We will acknowledge your grievance within 7 days and resolve it within 30 days.
Supervisory Authorities
If you are unhappy with our response to any privacy concern, you have the right to contact the relevant supervisory authority:
- India: Data Protection Board of India (to be fully constituted under the DPDP Act 2023)
- European Union: Your local EU Data Protection Authority (DPA) — find your country's DPA at edpb.europa.eu
- United Kingdom: Information Commissioner's Office (ICO) — ico.org.uk
- Australia: Office of the Australian Information Commissioner (OAIC) — oaic.gov.au
Have a Privacy Question?
We take every privacy query seriously. Whether you want to exercise your rights, understand how your data is used, or simply ask a question about this Policy, our team responds within 2 business hours.