Data Protection Policy

​

​​Effective Date: 12-07-2025
Last Updated: 11-08-2025

​

Monkey Studio (“we”, “our”, “us”) is committed to protecting the personal data of our clients, collaborators, and website visitors. This Privacy Policy explains how we collect, use, store, and protect your data in compliance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and applicable global privacy standards.

​

1. Information We Collect

We collect the following categories of personal data:

• Identity & Contact Data: Name, email address, phone number, business name, social media handles

• Business Information: Brand details, collaboration preferences, project requirements

• Usage Data: IP address, browser type, operating system, device identifiers, and browsing activity (via analytics tools)

• Communications & Content: Messages, forms, creative submissions, and any files you send us

 

2. Purpose of Processing

We process your personal data for the following purposes:

• To provide and improve our marketing and creative services

• To respond to inquiries, proposals, and collaboration requests

• To send relevant updates, offers, and information about our services (with your consent)

• To maintain legal and compliance records

• To conduct analytics and improve website functionality

• To protect against fraud, unauthorized access, and misuse

​

3. Legal Basis for Processing

We process data based on:

• Your consent (e.g., when submitting a form or subscribing)

• Performance of a contract (e.g., fulfilling agreed services)

• Legal obligations (e.g., record retention, compliance with law)

• Legitimate interests (e.g., improving our services, securing systems)

 

4. Data Retention

We retain personal data only as long as necessary for the purposes outlined above, unless a longer retention period is required by law.
When no longer needed, data is securely deleted using industry-standard methods.

 

5. Data Sharing & Disclosure

We may share your data with:

• Service Providers (e.g., hosting providers, analytics platforms, CRM tools) — bound by confidentiality agreements

• Legal or Regulatory Authorities when required under applicable laws
  We do not sell or rent your personal data to third parties.

 

6. Consent & Withdrawal

When we rely on consent for processing, it is:

• Specific and informed

• Collected via explicit action (e.g., form checkbox)

• Not bundled with unrelated terms

You may withdraw consent at any time by emailing help@monkeystudio.in.

 

7. Your Rights

As a Data Principal under the DPDP Act, you have the right to:

1. Access your personal data held by us

2. Correct inaccurate or incomplete data

3. Request erasure (“Right to be Forgotten”)

4. Withdraw consent to processing

 

How to exercise your rights:
Send an email with subject as "Help with Monkey Studio's Privacy Policy" to help@monkeystudio.in with your request. We will acknowledge within 7 working days and respond within 30 days.

 

8. Security Measures

We have implemented reasonable technical and organizational measures to protect your data, including:

• HTTPS encryption across our website

• Regular, secure data backups

• Access control to restrict unauthorized handling

• Documented data mapping of all collection and storage points

• Ongoing vulnerability scans and system monitoring

• Periodic staff training on security and privacy

 

9. Data Breach Protocol

We maintain a Standard Operating Procedure (SOP) for responding to data breaches:

1. Immediate Investigation by internal team

2. Technical Forensics involving an independent legal & ethical hacking team

3. Containment & Mitigation of impact

4. Notification to the Data Protection Board of India and affected individuals within the required timeline

5. Post-incident Review to strengthen future prevention

 

10. Cross-Border Data Transfers

We do not transfer personal data outside India at this time.
If this changes, we will update this policy and ensure all required safeguards are implemented.

 

11. Grievance Redressal

Our Data Protection Officer (DPO) is:

Kunal (Operations' Guy), Email: help@monkeystudio.in

 

We acknowledge grievances within 7 working days and aim to resolve them within 30 days, following our documented grievance redressal SOP.

​

12. Training & Compliance

Our team undergoes continuous training on:

• DPDP Act, 2023 requirements

• Relevant international data protection laws (e.g., GDPR, CCPA)

• Secure handling and ethical processing of personal data

 

13. Changes to This Policy

We may revise this Privacy Policy periodically. Updates will be posted on www.monkeystudio.in with the new “Last Updated” date.

We encourage you to review it regularly.