Privacy Policy
Last updated: December 2026 · DPDP Act 2023 (India) compliant
1. About this policy
Holdstill Records ('we', 'us', 'our') values your privacy. This policy explains how we collect, use, store and protect personal data when you visit our website and interact with our services. This policy is written to comply with the Digital Personal Data Protection Act, 2023 (India), effective 2026, and other applicable laws.
2. Data we collect
When you submit our booking or contact forms, we collect: your full name, email address, phone number, preferred meeting date and time, your preferred discussion topic, and any optional message you provide. We may also collect anonymised analytics (page views, device type) via cookies.
3. Purposes of processing
We process this data only for the specific purposes for which you give consent: (a) scheduling and conducting your consultation; (b) responding to your enquiry; (c) operational record keeping; and, only with your explicit opt-in, (d) sending occasional marketing emails about case studies, insights and offers.
4. Lawful basis & consent
Under the DPDP Act 2023, we rely on your explicit, unambiguous consent. Our consent checkboxes are never pre-ticked, are separate for necessary processing vs. marketing, and use clear language about what you're consenting to.
5. Your rights
You may at any time: access the data we hold about you; request correction; request erasure; withdraw consent (which will stop further processing without affecting prior lawful processing); nominate another individual to exercise your rights in your absence; and file a complaint with the Data Protection Board of India.
6. Withdrawing consent
Withdraw your consent by emailing privacy@holdstillrecords.com. Marketing emails also include a one-click unsubscribe link. Withdrawal is processed within 7 working days.
7. Sharing & transfers
We do not sell your personal data. We share it only with: (a) Google LLC, to issue a calendar invitation and Google Meet link for your consultation; (b) authorised internal personnel on a need-to-know basis. We do not transfer data outside India except as required for the specific service (e.g. Google services) and only with appropriate safeguards.
8. Retention
Booking enquiry data is retained for 24 months after the consultation, then deleted, unless you have given separate marketing consent. Marketing list data is retained until you unsubscribe.
9. Security
Data is encrypted in transit (TLS) and stored on servers located in India. Access is limited to authorised personnel using individual credentials and audit logs.
10. Children
Our services are not directed at individuals under 18. We do not knowingly collect personal data from children. If you believe we have done so, please contact us and we will delete it.
11. Contact / Grievance officer
Holdstill Records — Grievance Officer · Email: privacy@holdstillrecords.com · We respond to all DPDP-related requests within statutory timelines.
Have a privacy concern or want to exercise a right under DPDP 2023? Email privacy@holdstillrecords.com or return to the homepage.