Privacy Policy

Last updated: 21 September 2026

This policy explains what personal information Brand Knights collects, why we collect it, who we share it with, and the choices and rights you have. It applies to our website at brandknights.in, to messages you send us on WhatsApp, Facebook Messenger and Instagram, to enquiries you make through our forms and advertisements, and to our pages on Facebook, Instagram and LinkedIn.

Who we are

Brand Knights is a digital marketing agency based in India. In this policy, “we”, “us” and “our” mean Brand Knights. For the personal information described in this policy, Brand Knights is the “controller” (in India, the “data fiduciary”): we decide why and how it is used. You can reach us at rishi@brandknights.in.

Information we collect

Information you give us

• Your name, phone number, email address, company name and job title.
• The content of your messages and any files or images you send us.
• Details you submit in a contact form or an enquiry form on our website.
• Details about an order or service you buy from us, including billing details. Card payments are handled by our payment providers, and we do not store your full card number.

Information from messaging platforms

When you message us on WhatsApp, Facebook Messenger or Instagram, the platform gives us your public profile name, your profile picture where available, and an identifier for your account (such as your WhatsApp phone number or your Messenger or Instagram user ID). We do not receive your password or your private profile information.

Information from lead forms on advertising platforms

If you fill in a lead form on Meta (Facebook or Instagram), Google, TikTok, Microsoft Advertising or LinkedIn in response to one of our advertisements, the platform passes us the details you entered in that form.

Information collected automatically

When you visit our website, we and our providers collect technical information such as your IP address, device and browser type, language, the pages you view, the website you came from, and the date and time of your visit. Some of this is collected using cookies and similar technologies, described below.

Cookies and similar technologies

Cookies are small files stored on your device. Similar technologies include pixels and tags, which are small pieces of code that record how visitors use a website or respond to an advertisement. We use:

• Essential cookies, which keep our website working, for example to remember your session or protect our forms against spam. These do not need your consent.
• Analytics and performance cookies, which show us how visitors use the site so we can improve it. We may use tools such as Google Analytics and Jetpack Stats.
• Advertising cookies and tags, which measure how our advertisements perform and, where you allow it, show you relevant advertisements. We may use the Meta Pixel, the Google Ads and Google tag, the TikTok Pixel, the Microsoft Advertising UET tag and the LinkedIn Insight Tag.

Where the law requires your consent (for example in the European Economic Area and the United Kingdom), we only set analytics and advertising cookies after you agree to them. You can change or withdraw your choice at any time through the cookie settings on our website, and you can also block or delete cookies in your browser settings. Blocking cookies may affect how parts of our website work.

How we use it and why

Where the GDPR or UK GDPR applies, we rely on the legal bases below.

• To reply to your messages and enquiries and to provide the services you ask for. Legal basis: taking steps at your request before a contract, and performing a contract.
• To keep records of our conversations, run our business and keep our systems secure. Legal basis: our legitimate interests in running a well-organised and secure business.
• To understand how our website is used and to measure and improve our advertising. Legal basis: your consent, where the law requires it; otherwise our legitimate interests.
• To send you marketing about our services. Legal basis: your consent, or our legitimate interests where the law allows. You can unsubscribe at any time.
• To meet legal, tax and accounting obligations. Legal basis: legal obligation.

We do not sell your personal information. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects. Automatic first replies to messages are only acknowledgements.

Advertising and measurement

We may run advertisements for ourselves and for our clients on several platforms. These platforms process information about how people interact with our website and advertisements, under their own privacy policies:

• Google (Google Ads, Google Analytics). Google uses cookies to serve and measure advertisements based on a person’s visits to our site and other sites. Read how Google uses information from sites or apps that use its services, see the Google Privacy Policy, and manage personalised advertising in Google Ads Settings. You can also install the Google Analytics opt-out add-on.
• Meta (Facebook and Instagram). See the Meta Privacy Policy and your ad preferences.
• TikTok. See the TikTok Privacy Policy.
• Microsoft Advertising (including Bing). See the Microsoft Privacy Statement and your Microsoft ad settings.
• LinkedIn. See the LinkedIn Privacy Policy and your LinkedIn advertising settings.

You can also opt out of interest-based advertising from many companies at youronlinechoices.com (Europe) and optout.aboutads.info (United States).

Messages on WhatsApp, Messenger and Instagram

When you message our WhatsApp Business number, our Facebook Page or our Instagram account, your message passes through the platform (Meta) to our team inbox. We use a shared inbox tool, hosted on servers that we control, so our team can read and reply in one place. Our tools may send an automatic first reply to confirm we received your message. We only use your messages to respond to you and to keep a record of the conversation.

Meta processes your messages under its own terms and privacy policies: the Meta Privacy Policy, the Instagram Privacy Policy and the WhatsApp Privacy Policy.

Who we share it with

We share personal information only when needed:

• Platform and advertising providers such as Meta, Google, TikTok, Microsoft and LinkedIn, which carry your messages to us, provide lead forms, or measure our advertising.
• Service providers (processors) that host our website and systems, send email, process payments or provide analytics, and only for those purposes and under written terms.
• Professional advisers such as accountants and lawyers.
• Authorities and other parties, where the law requires it, to protect our rights, or if our business is sold or reorganised.

We do not sell your personal information.

Transfers outside your country

We are based in India, and our providers may process information in India, the United States and other countries. If you are in the European Economic Area or the United Kingdom, your information may be transferred outside those areas. Where that happens, we use appropriate safeguards, such as the European Commission’s Standard Contractual Clauses or an adequacy decision, or another lawful transfer mechanism.

How long we keep it

• Enquiries and conversations: for up to 24 months after our last contact with you, unless you become a client.
• Client and billing records: for as long as the law requires us to keep accounting and tax records.
• Marketing contact details: until you unsubscribe or ask us to delete them.
• Cookie and analytics data: for the period shown in each provider’s cookie settings.

When information is no longer needed, we delete it or make it anonymous.

How we protect it

Our messaging and business systems are protected with access controls and encrypted connections, and only team members who need the information to do their work can see it. No system is completely secure, so we cannot guarantee absolute security, but we work to protect your information and to fix problems promptly. If a breach affects your personal information, we will notify you and the relevant authorities where the law requires it.

Your rights

Everyone

You can ask us to tell you what personal information we hold about you, correct information that is wrong, delete your information, and stop using it for a purpose you no longer agree to. Email us at rishi@brandknights.in. We may need to confirm who you are first, and we will reply within 30 days.

If you are in the European Economic Area or the United Kingdom

Under the GDPR and UK GDPR you also have the right to restrict how we use your information, to receive your information in a portable format, to object to processing based on our legitimate interests or for direct marketing, and to withdraw your consent at any time (this does not affect processing that happened before you withdrew it). You can complain to your local data protection authority, for example the Information Commissioner’s Office in the United Kingdom, although we would appreciate the chance to fix the problem first.

If you are in India

Under the Digital Personal Data Protection Act, 2023, you can request access to, correction of and erasure of your personal data, use our grievance process (email us and we will reply within 30 days), and nominate another person to exercise these rights on your behalf if you die or become unable to.

If you are in California or another US state with a privacy law

You may have the right to know what personal information we collect, to delete or correct it, and to opt out of the sale or sharing of your personal information for targeted advertising. We do not sell personal information. Some advertising cookies may count as “sharing” under some state laws, and you can turn them off in our cookie settings or with a browser signal such as Global Privacy Control. We will not treat you unfairly for using these rights.

Deleting your data

In the email, include the name and the account you used to message us (for example your WhatsApp number, or your Facebook or Instagram name), so we can find your conversations. We will delete the personal information linked to that account from our systems and confirm by email within 30 days, except for records we must keep by law.

Messages you sent through WhatsApp, Facebook or Instagram may also remain on those platforms. To remove them there, use the tools in your account on that platform.

Children

Our services are for businesses and are not directed at anyone under 18. We do not knowingly collect personal information from children. If you believe a child has sent us information, please email us and we will delete it.

Changes to this policy

We may update this policy from time to time, for example when we start using a new advertising platform or a new tool. When we do, we will change the “Last updated” date at the top of this page. If we make a significant change, we will tell you in a clear way, such as with a notice on our website.

Contact us

Brand Knights
Website: brandknights.in
Email: rishi@brandknights.in