Privacy Policy

This Privacy Policy explains how BrainyDX Technologies (“BrainyDX”, “we”, “us” or “our”) collects, uses, discloses and protects information about visitors to our website at https://brainydx.com (the “Website”) and about clients, prospects and other individuals who interact with us in connection with our software, web development, digital marketing, consulting, hardware engineering, and event management services (together, the “Services”).

This Privacy Policy applies to the Website and to any other online or offline channel through which we collect personal information in connection with the Services (collectively, the “Platform”). It does not apply to third-party websites, tools or platforms that we do not own or control, even where we link to them or use them to deliver our Services.

By using the Platform or providing us with your personal information, you agree to the collection, use and disclosure of that information as described in this Privacy Policy. If you do not agree with this Policy, please do not use the Platform or provide us with your personal information.

BrainyDX is a global business, and we run marketing and advertising campaigns, including through Google Ads, targeted at businesses across Australia, the United Kingdom, the United States, Canada, the European Union, the United Arab Emirates, India and other markets. We have drafted this Policy with reference to applicable data protection laws including the UK General Data Protection Regulation and the Data Protection Act 2018 (“UK GDPR”), the EU General Data Protection Regulation (“GDPR”), the Privacy Act 1988 (Cth) and the Australian Privacy Principles (“APPs”), the California Consumer Privacy Act as amended by the California Privacy Rights Act (“CCPA/CPRA”), Canada’s Personal Information Protection and Electronic Documents Act (“PIPEDA”), and India’s Information Technology Act, 2000 and rules made thereunder (collectively, “Data Protection Laws”). Where this Policy refers to your “rights” below, the specific rights available to you will depend on which Data Protection Laws apply to you and where you are located.

If you are under 18 years of age, please review this Policy together with a parent or legal guardian before using the Platform or submitting any personal information to us.

1. Information We Collect

Non-Personal Information

When you visit our Website, we may automatically collect information that does not, on its own, identify you, such as the pages you viewed, the order in which you viewed them, the date and time of your visit, the website that referred you to us, your browser type and operating system, your approximate location, and your device and IP address. We use this information to understand how visitors use our Website and to improve its content, speed and usability.

 

Personal Information You Provide to Us

We collect personal information that you choose to give us, for example when you:

  • Fill in a “Get a Quote”, contact, callback, or newsletter sign-up form on our Website
  • Book a call or consultation with our team
  • Email, call, or message us (including via WhatsApp)
  • Correspond with us during a project, proposal or engagement
  • Attend an event, webinar or exhibition we host or participate in
  • Apply for a role with us via our Careers page

This may include your name, company name, job title, email address, phone number, country/location, project details or requirements, file links (e.g. design or 3D model files), and any other information you choose to share with us.

 

Information We Receive from Other Sources

We may receive information about you from third parties, such as advertising and analytics partners (e.g. Google, Meta), business directories, referral partners, or publicly available sources, and combine it with information we collect directly from you.

2. Cookies, Tracking Technologies and Advertising

We use cookies, pixels, tags and similar technologies on our Website to operate it, remember your preferences, analyse traffic, and measure and improve our advertising, including campaigns run through Google Ads.

We use, or may use, tools such as Google Analytics, Google Ads (including conversion tracking and remarketing), and equivalent tools from other advertising platforms (e.g. Meta/Facebook, LinkedIn). These tools may place cookies on your device that allow us and our advertising partners to:

  • Measure which pages you visited and which ads or links led you to our Website
  • Show you BrainyDX ads on other websites and apps after you have visited our Website (“remarketing”)
  • Measure the effectiveness of our advertising campaigns
  • Understand aggregate visitor behaviour on our Website

These cookies do not, by themselves, reveal your name or contact details to us or to advertising platforms; they work through identifiers linked to your browser or device. Where required by law (including in the UK and EEA), we will request your consent before setting non-essential cookies, via a cookie banner or similar mechanism, and you can withdraw that consent at any time.

You can control or delete cookies through your browser settings, and you can opt out of personalised advertising using tools such as Google’s Ad Settings, the Google Analytics Opt-out Browser Add-on, the Network Advertising Initiative opt-out page, or the Your Online Choices / Digital Advertising Alliance opt-out pages. Please note that disabling cookies may affect how parts of the Website function.


Google-Specific Disclosures

We use Google Analytics and Google Ads Advertising Features, including remarketing, Google Display Network Impression Reporting, and demographics and interest reporting. Third-party vendors, including Google, use first-party cookies (such as the Google Analytics cookie) and third-party cookies (such as the Google Ads cookie) together to report on how your ad impressions, other uses of ad services, and interactions with these ad impressions and ad services relate to visits to our Website. You can learn more about how Google collects and uses data at Google’s “How Google uses information from sites or apps that use our services” page, and you can manage the ads you see and opt out of Google Analytics for Display Advertising through Google Ad Settings.

Our Website does not currently respond to “Do Not Track” browser signals. Where required by applicable law, we will honour recognised opt-out or universal consent signals (such as the Global Privacy Control) as a valid request to opt out of the sale or sharing of personal information.

3. How We Use Your Information

We use the information we collect to:

  • Respond to your enquiries and provide you with quotes, proposals or the Services you request
  • Communicate with you about your project, account or ongoing engagement
  • Operate, maintain, and improve the Website and our Services
  • Send you marketing communications about our Services, offers or content, where you have consented or where otherwise permitted by law (you can opt out at any time — see Section 8)
  • Run and measure the performance of our advertising campaigns, including on Google Ads
  • Comply with our legal, tax, accounting and regulatory obligations
  • Detect, investigate and prevent fraud, misuse or security incidents

Where the GDPR or UK GDPR applies to you, we rely on one or more of the following legal bases: your consent, the steps necessary to enter into or perform a contract with you, our legitimate business interests (such as marketing our Services and keeping our Website secure), and compliance with a legal obligation.

4. How We Share Your Information

We do not sell your personal information. We may share it with:

  • Service providerswho support our business, such as hosting providers, CRM and email platforms, scheduling tools (e.g. Google Calendar/Meet), analytics providers, and payment processors, under confidentiality and data-processing terms
  • Advertising and analytics platforms(such as Google and Meta), to the extent described in Section 2
  • Professional advisers, such as lawyers, auditors and accountants, where necessary
  • Government or regulatory authorities, where required to comply with a legal obligation, court order, or to protect our rights, property or safety, or those of others
  • A successor entity, in the event of a merger, acquisition, restructuring or sale of all or part of our business, in which case your information may be transferred as part of that transaction

Any third party we share personal information with is only permitted to use it for the purpose for which it was shared and in a manner consistent with this Policy.

5. International Data Transfers

BrainyDX is headquartered in India, and our team, offices and service providers (including cloud hosting, analytics and advertising providers) may be located in India, Singapore, and other countries. If you are located in the UK, Australia, the EU/EEA, the US, Canada or elsewhere, your information may be transferred to, stored, and processed in India or other countries whose data protection laws may differ from those of your home country. Where required — for example, for transfers of personal data originating in the UK or EEA — we take appropriate steps, such as relying on standard contractual clauses or equivalent safeguards, to ensure your information continues to be protected in line with this Policy and applicable Data Protection Laws.

6. Data Retention

We retain personal information for as long as necessary to provide the Services, respond to your enquiry, maintain our business records, and comply with our legal, tax and regulatory obligations, after which it is deleted or anonymised.

7. Security

We use reasonable technical and organisational measures — including access controls, encryption in transit, and restricted internal access — to protect your personal information from unauthorised access, alteration, disclosure or destruction. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your Rights and Choices

Depending on where you are located and the Data Protection Laws that apply to you (including the UK GDPR and the Australian Privacy Act), you may have the right to:

  • Accessthe personal information we hold about you
  • Correctinaccurate or incomplete information
  • Request deletionof your personal information
  • Object to or restrictcertain processing, including direct marketing
  • Withdraw consentat any time, where processing is based on consent
  • Request a copyof your information in a portable format, where applicable
  • Lodge a complaintwith your local data protection authority (for example, the UK Information Commissioner’s Office (ICO) or the Office of the Australian Information Commissioner (OAIC))

To opt out of marketing emails, calls or messages, use the unsubscribe link in our emails or contact us using the details in Section 11. Please allow up to 30 days for opt-out requests to take effect across all our systems. Opting out of marketing does not affect communications we need to send you to deliver an active project or service.

To exercise any other right listed above, please contact us using the details in Section 11. We may need to verify your identity before actioning your request, and we will respond within the timeframe required by applicable law.

California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the right to: know what personal information we collect, use, disclose and (where applicable) “share” or “sell”; request deletion or correction of your personal information; opt out of the “sale” or “sharing” of your personal information (including cross-context behavioural advertising via cookies, as described in Section 2); and not be discriminated against for exercising these rights. We do not sell personal information for money. To exercise your California rights, contact us using the details in Section 11 or adjust your cookie preferences as described in Section 2.

Canada (PIPEDA)

If you are located in Canada, you have the right to access and request correction of your personal information, and to withdraw consent to its collection, use or disclosure, subject to legal or contractual restrictions, by contacting us using the details in Section 11.

9. Third-Party Links

Our Website may contain links to third-party websites, tools or social media platforms that we do not own or control. This Privacy Policy does not apply to those third-party sites, and we encourage you to review their own privacy policies before providing them with any information.

10. Children’s Privacy

Our Services are directed at businesses and professionals, and the Platform is not intended for use by children. We do not knowingly collect personal information from individuals under the age of 18. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

11. Contact Us

If you have any questions about this Privacy Policy or wish to exercise any of your rights, please contact us at:

BrainyDX Technologies 125, Second Floor, Shahpur Jat, Siri Fort, New Delhi – 110049, India Email: contact@brainydx.com Phone: +91 99999 88014

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, Services, or legal requirements. Any changes will be posted on this page with an updated “Last updated” date. We encourage you to review this page periodically. Your continued use of the Platform after changes are posted constitutes your acceptance of the updated Policy.

13. Governing Law

This Privacy Policy is governed by the laws of India, without prejudice to any mandatory data protection rights you may have under the laws of the UK, Australia, the EU/EEA, or your country of residence.