Legal
Privacy Policy
Effective date: 9 June 2026 · MagicWorks IT Solutions Pvt. Ltd.
This policy is issued in compliance with the Digital Personal Data Protection Act, 2023 (India) and the rules made thereunder.
Contents
1. About This Policy
MagicWorks IT Solutions Pvt. Ltd. (“MagicWorks”, “we”, “us”, or “our”) operates the website magicworksitsolutions.com and provides digital marketing, web development, AI consultation, and platform consultation services to businesses across India.
This Privacy Policy explains what personal data we collect from visitors to our website, why we collect it, how we use and protect it, and what rights you have over it. It applies to all personal data collected through this website, our contact and enquiry forms, newsletter and whitepaper subscriptions, and any direct correspondence with us.
We are the Data Fiduciary in respect of personal data collected through this website, as defined under the Digital Personal Data Protection Act, 2023 (“DPDP Act”). You, the individual providing your data, are the Data Principal.
Please read this policy carefully. By submitting any form on this website or providing us with your personal data, you consent to the practices described here.
2. Data We Collect
We collect personal data only when you voluntarily provide it or when it is generated automatically through your use of this website.
| Category | Data collected |
|---|---|
| Contact and enquiry forms | Name, email address, phone number (optional), company name (optional), website URL (optional), service interest, and the message you type. |
| Newsletter subscription | Email address, and the page or source from which you subscribed. |
| Whitepaper download | Email address and the whitepaper title you requested. |
| Usage data (automatic) | IP address, browser type, device type, pages visited, time spent, referring URL, and approximate geographic region. Collected via server logs and analytics tools. |
| Cookie data | Session and preference data stored as cookies. See Section 8 for details. |
We do not collect sensitive personal data such as financial account details, health data, religious or political beliefs, biometric data, or any data falling within the special categories defined under the DPDP Act.
You can browse this website without submitting any personal data. Personal data is only collected when you choose to interact with a form or subscription on this site.
3. How We Use Your Data
We use personal data only for the purpose for which it was collected, or for a purpose that is directly compatible with that original purpose. The specific purposes are:
- Responding to enquiries: When you submit a contact or discovery-call form, we use your name, email, phone number, and message to respond to your enquiry and discuss our services with you.
- Newsletter delivery: When you subscribe to our newsletter, we use your email address to send you our published insights, guides, and occasional service updates. You can unsubscribe at any time via the link in every email.
- Whitepaper delivery: When you request a whitepaper, we use your email address to send you the requested PDF and, with your consent, to add you to our mailing list for related content.
- Service delivery: If you become a client, we use the contact and company details you provide to manage our engagement, deliver work, and communicate with you about the project.
- Website improvement: We use aggregated, anonymised usage data to understand how visitors interact with this website and improve its content, structure, and performance. This data is not linked to individual identities.
- Legal and compliance obligations: We may process personal data to comply with applicable law, respond to lawful requests from government or regulatory authorities, or enforce our rights.
We do not sell, rent, or trade your personal data to third parties for their own marketing purposes. We do not use your personal data for automated decision-making or profiling in any way that produces a legal or similarly significant effect on you.
4. Legal Basis for Processing
Under the DPDP Act 2023, we process personal data on the following grounds:
- Consent: For newsletter subscriptions, whitepaper downloads, and marketing communications, we rely on your free, specific, informed, and unambiguous consent given at the point of data collection. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.
- Legitimate use: For responding to your direct enquiries, fulfilling service agreements, and managing client relationships, we process data as necessary to carry out the purpose for which you provided the data.
- Legal obligation: We may process data to comply with requirements under Indian law, including responding to lawful orders from courts or authorities.
6. Data Retention
We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Our standard retention periods are:
| Data type | Retention period |
|---|---|
| Enquiry / contact form submissions | 3 years from the date of submission, or until you request deletion. |
| Newsletter subscriptions | Until you unsubscribe, plus 30 days for processing. |
| Whitepaper download records | 3 years from the date of download, or until you request deletion. |
| Client engagement records | 7 years from the end of the engagement, in accordance with applicable commercial and tax law. |
| Usage and analytics data | Aggregated data indefinitely; IP address logs purged after 12 months. |
When data is no longer required, we delete or anonymise it securely. You may request earlier deletion subject to Section 9 (Your Rights) below.
7. Cross-Border Data Transfers
Some of our technology providers (including Supabase and Resend) may store or process data on servers located outside India. We only transfer personal data to countries or territories that provide an adequate level of data protection, or where we have put in place appropriate safeguards such as standard contractual clauses or equivalent mechanisms consistent with the DPDP Act 2023 and any rules or notifications issued by the Government of India thereunder.
By submitting personal data through this website, you acknowledge that your data may be processed outside India subject to the protections described above.
9. Your Rights Under the DPDP Act 2023
As a Data Principal under the DPDP Act 2023, you have the following rights in respect of personal data we hold about you:
Right to access information
You have the right to request a summary of the personal data we hold about you and the purposes for which it is being processed.
Right to correction and erasure
You have the right to request that we correct inaccurate or incomplete personal data, or that we erase personal data that is no longer necessary for the purpose for which it was collected, subject to any legal retention obligations.
Right to withdraw consent
Where we process your data on the basis of your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal. To unsubscribe from emails, use the link in any email we send you. To withdraw consent for other processing, contact our Grievance Officer.
Right to grievance redressal
You have the right to have your grievance regarding our processing of your personal data redressed in an expeditious, fair, and reasonable manner. See Section 13 for how to raise a grievance.
Right to nominate
Under the DPDP Act, you have the right to nominate another individual who may, in the event of your death or incapacity, exercise your rights in relation to your personal data. To register a nominee, contact our Grievance Officer.
To exercise any of these rights, write to us at legal@magicworksitsolutions.com. We will respond within the time periods prescribed under the DPDP Act (generally within 30 days, or as may be specified by the Data Protection Board of India). We may need to verify your identity before processing your request.
If you are not satisfied with our response, you may file a complaint with the Data Protection Board of India once it is constituted and operational under the DPDP Act.
10. Children’s Privacy
This website is directed at businesses and business professionals. We do not knowingly collect personal data from persons under 18 years of age. Where processing of personal data of a child (defined as any person below 18 years under the DPDP Act) is required, we will obtain verifiable consent from the parent or legal guardian before collecting such data.
If you believe we have inadvertently collected personal data from a person under 18, please contact us immediately at legal@magicworksitsolutions.com and we will delete it promptly.
11. Security
We implement reasonable technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These include:
- HTTPS encryption for all data transmitted to and from this website.
- Access controls that restrict internal access to personal data to those with a legitimate need.
- Use of reputable, security-certified infrastructure and data processors.
- Regular review of our security practices.
No method of electronic transmission or storage is completely secure. While we take reasonable steps to protect your data, we cannot guarantee absolute security. You transmit personal data to us at your own risk.
12. Data Breach Notification
In the event of a personal data breach that is likely to result in harm to affected Data Principals, we will notify the Data Protection Board of India as required under the DPDP Act 2023. We will also notify affected individuals promptly in the manner prescribed by the Board, providing information about the nature of the breach, the data affected, and the steps we are taking to address it.
13. Grievance Officer
In accordance with the DPDP Act 2023, we have designated a Grievance Officer to address concerns and complaints about the processing of personal data. If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, please contact:
Grievance Officer
Name: Sudhir Dilip Dixit
Organisation: MagicWorks IT Solutions Pvt. Ltd.
Address: 201, Vasant Bahawa, Survey No. 20, Near La Valle Casa, Bavdhan, Pune, Maharashtra, India
Email:
Phone:
Response time: We will acknowledge your grievance within 48 hours and resolve it within 30 days of receipt, or within the period prescribed by the Data Protection Board of India.
If your grievance is not resolved to your satisfaction, you may escalate it to the Data Protection Board of India once the Board is constituted and operational under the DPDP Act.
14. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, the services we offer, or applicable law. When we make material changes, we will update the effective date at the top of this page. We encourage you to review this page periodically.
Continued use of this website after changes are published constitutes your acknowledgment of the updated policy. If we make changes that materially affect how we process data for which you have given consent, we will seek fresh consent where required.
This Privacy Policy was last reviewed and updated on 9 June 2026. It supersedes all previous versions. For questions about this policy, contact us at legal@magicworksitsolutions.com.