Privacy Policy

This website (goodshot.io) is operated by Bloom Media Private Limited, trading as GOODSHOT ("GOODSHOT", "we", "us", "our"), a social media marketing and Meta advertising studio based in India. This Privacy Policy explains what personal data we collect through this website, why we collect it, how we use and protect it, and the rights you have over it.

This policy is written to be consistent with India's Digital Personal Data Protection Act, 2023 (DPDP Act), as well as general international practice (including principles found in the EU's GDPR and the US's state privacy laws) for visitors who may be browsing from outside India.

We collect personal data in a few limited ways:

• Contact form submissions — when you fill out the "Connect" form on this site, we collect your name, phone number, email (if provided), business/brand name, Instagram handle, and whatever message you choose to send us.
• Direct communication — if you email us, call us, or message us on WhatsApp using the details on this site, we collect whatever information is contained in that conversation (e.g. your phone number, WhatsApp profile name, and message content).
• Automatically collected data — like most websites, our hosting and analytics tools may automatically log technical information such as your IP address, browser type, device type, pages visited, referring website, and approximate location (city/ country level), typically through cookies or similar technologies. What's actually collected here depends on the choice you make in our cookie banner — see Section 5.
• Client campaign data — if you are an existing or prospective client and we run social media or Meta advertising on your behalf, we may separately process data belonging to your business or your audience under the terms of our client agreement with you. This policy covers our website only; any client-specific data processing is governed by the separate service agreement between GOODSHOT and that client.

We use the personal data described above to:

• Respond to enquiries submitted through the Connect form, email, phone, or WhatsApp;
• Send you marketing communications about GOODSHOT — such as our services, case studies, offers, or updates — by email, WhatsApp, or phone, where you've shared those details with us. See Section 4 for how to opt out of this at any time;
• Understand how visitors use this website, and — where you've accepted marketing/analytics cookies — run and measure our own advertising, including building custom or lookalike audiences on platforms like Meta and Google (see Section 6);
• Maintain the security and proper functioning of the site;
• Comply with applicable law, or respond to lawful requests from public authorities.

We do not sell your personal data to unrelated third parties. Where we rely on your consent to process data (for example, marketing communications or non-essential cookies), you may withdraw that consent at any time by contacting us — see Section 12.

If you submit the Connect form or otherwise share your contact details with us, we may use them to send you marketing communications in addition to replying to your specific enquiry — for example, relevant case studies, service updates, or occasional offers, sent by email, WhatsApp, or phone.

You can opt out of marketing communications at any time, at no cost, by emailing info@goodshot.io, replying "STOP" to any WhatsApp message, or using the unsubscribe link in any marketing email. Opting out of marketing does not affect our ability to respond to an active enquiry or, where applicable, deliver a service you've engaged us for.

As GOODSHOT grows and launches new tools, products, or services, we may use the same contact information to tell existing enquirers and clients about them, always subject to the same opt-out described above.

When you first visit this site, a small banner lets you choose between "Accept all" and "Only necessary." That choice is stored on your own device and controls what runs during your visit:

• Necessary cookies — always active, regardless of your choice. These do things like remembering your cookie preference itself and keeping the site working correctly. They don't track you across other websites.
• Marketing and analytics cookies — only active if you choose "Accept all." These help us understand aggregate traffic patterns and, where such tools are installed on this site (for example, Google Analytics, Google Ads, or the Meta Pixel), measure and improve our own advertising.

You can change your choice at any time by clearing your browser's site data for goodshot.io, or through your browser's own cookie settings. Declining marketing cookies means your visit won't appear in our analytics or ad-platform reporting — we have no way to identify or look up an individual visitor's cookie choice, it only affects what loads in their own browser.

To grow our own business, we may use contact information you've shared with us (such as email addresses or phone numbers) to create custom or lookalike audiences on advertising platforms including Meta (Facebook/Instagram) and Google. This is done through those platforms' own secure matching tools, which use one-way hashing — the platform never sees your original contact details, only whether your device matches others, so we can show relevant ads to people who resemble our existing clients, or reach past visitors who've already shown interest in GOODSHOT (retargeting).

You can ask us to remove your data from any such audience at any time by contacting us at info@goodshot.io.

We may share personal data with:

• Service providers who help us run this website and business, such as our hosting provider (Vercel), our website/development platform (Lovable), our email delivery provider (Resend), and communication tools (WhatsApp Business, telephony) — solely so they can provide those services to us;
• Advertising platforms (such as Meta and Google), where you've accepted marketing cookies or where we use hashed contact data as described in Section 6, strictly to run and measure our own marketing;
• Legal or regulatory authorities, where we are required to do so by law, or to protect our legal rights.

We do not sell, rent, or trade your personal data to third parties for their own independent marketing purposes.

Where we work with a business as a client, we may want to showcase the results, creative work, or brand name in our own marketing — for example, on this website's Insights section, in our portfolio, in pitches to prospective clients, or on social media. We will always ask for your specific, separate permission before publicly naming your brand or publishing results tied to your business. Being a client does not, by itself, mean your name or numbers will be used publicly.

Some of our service providers (for example, our website hosting and email delivery) store and process data on servers located outside India, including in the United States. Where this happens, we take reasonable steps to ensure those providers apply appropriate security and confidentiality safeguards to your data.

We retain enquiry and communication data only for as long as reasonably necessary to respond to your enquiry, maintain a business record of the conversation, meet any legal, accounting, or reporting obligations, or — where you haven't opted out — continue sending you marketing communications. If you ask us to delete your data or opt out and we have no legal obligation to keep it, we will do so within a reasonable timeframe.

We take reasonable technical and organisational measures to protect the personal data we hold against unauthorised access, loss, misuse, or alteration. No method of transmission or storage is ever 100% secure, and we cannot guarantee absolute security, but we work to keep the data we collect appropriately protected.

Subject to applicable law (including the DPDP Act, 2023 in India), you have the right to:

• Ask us what personal data we hold about you;
• Ask us to correct inaccurate or incomplete data;
• Ask us to erase your personal data, where we have no legal obligation to retain it;
• Withdraw any consent you previously gave us, including opting out of marketing communications and advertising audiences at any time;
• Ask how your data has been used or shared, and with whom;
• Nominate another individual to exercise these rights on your behalf in the event of death or incapacity, as provided under the DPDP Act;
• Register a grievance regarding how we've handled your data (see below).

To exercise any of these rights, or to raise a grievance, contact us at info@goodshot.io. We will acknowledge grievances promptly and aim to resolve them without undue delay.

This website and our services are directed at businesses and individuals over the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

This site may link to third-party websites (for example, our Instagram profile or client work). We are not responsible for the privacy practices of those third-party sites, and we encourage you to review their privacy policies separately.

We may update this Privacy Policy from time to time to reflect changes in our practices, new services or products, or for legal, operational, or regulatory reasons. The "Last updated" date at the top of this page will always reflect the most recent revision. Continued use of this website after changes are posted constitutes acceptance of the updated policy.

If you have questions, requests, or grievances regarding this Privacy Policy or how your data is handled, contact us at:

Bloom Media Private Limited (GOODSHOT)
Email: info@goodshot.io
Phone: +91 88004 34379