Privacy Policy.

Beqick Consultancy Services LLP (LLPIN ACK-5188) (“Beqick”, “we”, “us”) runs beqick.com. We are a growth agency, studio and AI lab based in Hyderabad, India. Registered office: 3-1-5/IC/410, Ishta City Apartment, Upperpally, Hyderguda, Kismathpur, Hyderabad, Telangana 500030

Beqick is the Data Fiduciary for your personal data under India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”). For visitors in the EU, EEA or UK, we are the controller under the GDPR. This policy covers this website, the ₹999 Growth Gap Scan booking, our WhatsApp and email conversations, the AI chat assistant, and the services we provide to clients.

What you give us. Your name, email address, phone or WhatsApp number, company, website and anything you type into a form: booking the Scan, joining a waitlist, asking for a free resource, or writing to us. If you book the Scan, we also receive your booking time and the answers you give on the scheduling form.

Payment details. Razorpay processes the ₹999 Scan payment. We receive the payment ID, order ID, amount, status and the contact details you entered. We never see or store your full card number, CVV, UPI PIN or net-banking password.

Conversations. Messages you send us on WhatsApp or by email, and messages you type into the AI chat assistant on this site, together with our replies.

Collected automatically. Our host keeps standard server logs: IP address, browser and device type, the page requested and the time. We use your IP address, held briefly, to rate-limit form submissions and stop abuse. If you accept analytics and advertising cookies, Google Analytics and the Meta Pixel also collect usage data: pages viewed, clicks, approximate location, device and referral source. Vercel Speed Insights measures how fast pages load. It sets no cookies and does not identify you.

We do not knowingly collect sensitive data such as health, financial account, religious or biometric data. Please don’t send it to us.

• To answer you and provide what you asked for: replying to enquiries, running the Scan, sending the free resources you request, and delivering services you engage us for. Basis: you provided the data for this purpose (DPDP Act s.7(a)) and, under the GDPR, to perform a contract with you or take steps before one.
• To take payment and keep accounts: processing payments, issuing GST invoices, and keeping records that tax and accounting law requires. Basis: contract and legal obligation.
• To measure the site and our ads using Google Analytics, the Meta Pixel and Meta Conversions API. Basis: your consent, given on the cookie bar. No consent, no tracking.
• To send you updates, such as a waitlist opening or a “Get notified” launch message. Basis: your consent. Every message tells you how to opt out.
• To keep the site secure: rate limiting, fraud prevention and debugging. Basis: our legitimate interest in a safe, working service (GDPR), and legitimate use under the DPDP Act.

We don’t sell your data, and we don’t share it with anyone except the processors below. Each one handles it only to provide its service to us, under its own data-protection terms.

• Razorpay Software Private Limited (India): payment processing for the ₹999 Scan.
• Calendly LLC (USA): scheduling the Scan session. Receives your name, email, chosen time and scheduling-form answers.
• Meta Platforms (Meta Platforms Ireland Ltd / Meta Platforms, Inc., USA):
  · Meta Pixel in your browser, only after you accept cookies;
  · Conversions API, server-side, only after you accept cookies. It receives your email, phone and name as one-way SHA-256 hashes, plus your IP address, browser user-agent, the Meta cookie IDs (_fbp, _fbc) and the event (such as a lead or a purchase) so Meta can measure our ads without receiving plain contact details;
  · WhatsApp Business (WhatsApp LLC / WhatsApp Ireland Ltd), when you message us on WhatsApp.
• Google Analytics 4 (Google LLC, USA / Google Ireland Ltd): site analytics, only after you accept cookies.
• Vercel Inc. (USA): website hosting, server logs and Speed Insights. Our server functions run in Vercel’s Mumbai region.
• Supabase Inc. (USA; our database is hosted in Mumbai, India): our database for enquiries, contacts, payment records, conversation logs and security counters.
• Anthropic PBC (USA): runs the AI chat assistant. What you type into the chat is sent to Anthropic so it can generate a reply. Under Anthropic’s commercial terms, that data is not used to train its models. Please don’t share sensitive information in the chat.

We may also disclose data where the law requires it, for example to tax authorities or under a valid court or government order.

Some processors above are based in, or use servers in, the USA or the EU. The DPDP Act allows these transfers unless the Government of India restricts a country, and we’ll stop any transfer it restricts. For visitors from the EU, EEA or UK, transfers rely on the processors’ Standard Contractual Clauses or an adequacy decision, such as the EU–US Data Privacy Framework.

Strictly necessary. Always on, no consent needed.

• bq_scan (cookie, 45 minutes): set only after a verified ₹999 Scan payment, so you can reach the scheduling step. It is signed and HttpOnly, so only our server can read it. It holds only the booking details you typed.
• bq-cookie-consent (browser local storage, until you clear it): remembers your cookie choice so we don’t ask again.

Analytics and advertising. Only if you press Accept. These scripts aren’t loaded at all until you accept. If you choose Essential only, they never load.

• Google Analytics: _ga, _ga_* (up to 2 years).
• Meta Pixel: _fbp, _fbc (up to 90 days).

Third-party embed. The Calendly scheduler on the booking step may set its own cookies inside its frame, which it needs to work.

Changing your mind. Use Cookie settings in the footer of any page to reopen the cookie bar and change your choice. You can also clear cookies and site data in your browser at any time.

• Enquiries, waitlist and lead details: 24 months after your last interaction with us, then deleted. Sooner if you ask.
• Payment records and invoices: 8 years, as Indian tax and LLP accounting law requires.
• Client project data: for the engagement plus 3 years, then deleted or returned to you.
• WhatsApp, email and AI chat conversations: 24 months after the last message, unless they form part of a client engagement.
• Security data: rate-limit counters are deleted within 1 day. Server logs are kept for our host’s standard log-retention period. One-time codes expire within minutes and are stored only as hashes.
• Analytics: Google Analytics event data is kept for 14 months.
• Booking cookie: 45 minutes.

Under the DPDP Act, you can:

• get a summary of the personal data we hold about you and how we use it, and who we have shared it with;
• have it corrected, completed, updated or erased;
• withdraw consent at any time. It is as easy as giving it, and doesn’t affect anything done before;
• nominate someone to exercise these rights if you die or become incapacitated;
• have a grievance addressed by our Grievance Officer. If you’re unhappy with the outcome, you can complain to the Data Protection Board of India.

If you are in the EU, EEA or UK, you also have the rights to access, rectification, erasure, restriction, data portability and objection, including to any processing based on legitimate interests. You can complain to your local data-protection authority.

To use any of these rights, email service@beqick.com or WhatsApp us. We may ask you to confirm your identity. We will respond within 30 days. Some data, such as invoices, we must keep by law even after an erasure request, and we’ll tell you when that applies.

Marketing opt-out: reply STOP to any WhatsApp message, or use the unsubscribe link in any email.

All traffic is encrypted with HTTPS. Our database can be reached only by our server, and every table is locked by row-level security. Secret keys never reach the browser. One-time codes are stored only as hashes, and access is limited to the people who need it. If a breach affects your personal data, we will tell you and the Data Protection Board of India as the DPDP Act requires. For EU/UK visitors, we will notify the relevant authority within 72 hours where the GDPR requires it.

Our services are for businesses and adults. We don’t knowingly collect personal data from anyone under 18, and we don’t track or target ads at children. If you believe a child has given us their data, contact the Grievance Officer and we’ll delete it.

For any question, request or complaint about your personal data, contact our Grievance Officer:

Nallamilli Yaswanth Reddy
Grievance Officer, Beqick Consultancy Services LLP
Email: service@beqick.com
Phone: +91 91439 55555
Address: 3-1-5/IC/410, Ishta City Apartment, Upperpally, Hyderguda, Kismathpur, Hyderabad, Telangana 500030

We acknowledge every grievance within 48 hours and resolve it within 30 days. That is well inside the period the DPDP Rules allow.

When this policy changes, we update the date at the top of the page. If a change affects how we use data you’ve already given us, we’ll tell you before it takes effect and, where needed, ask for your consent again. See also our Terms of Service and Refund & Cancellation Policy.