DATA PROTECTION & PRIVACY POLICY
(Shopify Embedded Application – Gold Standard Version)
Last Updated: 01 May 2026
This Data Protection & Privacy Policy (“Policy”) sets out the principles, practices, safeguards, and commitments governing the access, processing, storage, retention, and protection of data by Adbuffs Media Private Limited (“Adbuffs Media”, “Company”, “we”, “us”, or “our”) through a Shopify-embedded application (“Application”).
This Policy is framed in accordance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”), applicable rules, notifications, and prevailing best practices.
Adbuffs Media acts solely as a data processor and processes personal data strictly on documented instructions of the Client. The Client remains the data fiduciary.
Name, contact details, address details, purchase history, demographic indicators and behavioural metrics relating only to the Client.
Financial and payment data are expressly excluded.
Data shall be used exclusively for ad optimisation, analytics, reporting and lawful digital marketing services for the Client.
Access is restricted on a need-to-know basis. Personnel are bound by confidentiality and internal policies.
Data is purged every 90 days during engagement and within 90 days post-termination unless legally required.
All data principal rights requests shall be routed through the Client. Adbuffs Media shall assist upon instruction.
Reasonable technical and organisational safeguards are implemented with quarterly hygiene checks.
Includes detection, containment, client notification and cooperation.
Data may be processed on secure cloud infrastructure inside or outside India with safeguards. No sale or independent transfer.
This Policy may be updated to reflect regulatory changes.
Queries may be raised through channels specified in the Service Agreement.