Your privacy matters to us. This Policy explains what personal data we collect, why, how we protect it, and the rights you have under India's data-protection law.
This Privacy Policy explains how Colatch Media Private Limited ("Colatch", "we", "us" or "our"), the entity operating the website at colatch.com (the "Website") and the related services, collects, uses, shares and protects personal data. We act as a Data Fiduciary in respect of the personal data we determine the purpose and means of processing.
This Policy is published in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Digital Personal Data Protection Rules, 2025, the Information Technology Act, 2000 and the rules made under it (including the SPDI Rules, 2011 and the IT (Intermediary Guidelines) Rules, 2021). By using the Website or sharing your data with us, you acknowledge that you have read and understood this Policy.
The Data Fiduciary is:
Depending on how you interact with us, we may collect:
We process personal data for the following purposes, relying on your consent and/or the legitimate uses permitted under the DPDP Act:
Where processing relies on consent, you may withdraw it at any time (see "Your rights"). Withdrawal does not affect processing already carried out.
We use cookies and similar technologies to run the Website, remember preferences and understand usage. You can control these through our consent tools and your browser. Full detail is in our Cookie Policy.
Some of our service providers may store or process data outside India. Where we transfer personal data abroad, we do so in accordance with the DPDP Act and applicable restrictions, and require recipients to protect it to a standard consistent with this Policy.
We keep personal data only for as long as necessary for the purpose it was collected, to provide our services, and to meet legal, tax and accounting obligations — after which it is deleted or anonymised. Specific periods depend on the nature of the data and the engagement.
We maintain reasonable security practices and procedures, including access controls, encryption in transit and vendor due diligence, designed to protect personal data against unauthorised access, alteration, disclosure or destruction. No method of transmission over the internet is fully secure, so we cannot guarantee absolute security.
In the event of a personal data breach, we will notify the Data Protection Board of India and affected Data Principals as required under the DPDP Rules, 2025.
Subject to the DPDP Act, you have the right to:
To exercise any right, email grievance@colatch.com. We may need to verify your identity before acting on a request.
We do not direct the Website at children. Under the DPDP Act, we will not process the personal data of a child (a person under 18) without verifiable consent of a parent or lawful guardian, and we will not undertake tracking, behavioural monitoring or targeted advertising directed at children. For a person with a disability, we will obtain consent from their lawful guardian where applicable.
If you have any concern or complaint about how we handle your personal data, contact our Grievance Officer:
In line with the IT Rules, 2021, we will acknowledge your complaint within 24 hours and endeavour to resolve it within 15 days. If you are not satisfied, you may escalate to the Data Protection Board of India as provided under the DPDP Act.
We may update this Policy from time to time. The "Last updated" date above reflects the latest revision. Material changes will be notified through the Website or by email where appropriate.
Questions about this Policy can be sent to hello@colatch.com or grievance@colatch.com, or by post to [Registered Address, City, State, PIN].
Tell us about the brand and the goal. The more you share, the sharper our first proposal — and nothing here is binding.