1. Scope
This Data Policy applies to information and data handled by Finch Technologies (“Finch”, “we”, “us”) in connection with our website, enquiries, proposals, client projects, suppliers and business operations. It complements our Privacy Policy.
2. Data categories
Depending on the engagement, data may include:
- Business contact details and professional information.
- Project briefs, documents, creative assets, website content and communications.
- Website, campaign, analytics and performance data.
- Technical logs, account identifiers and security events.
- Personal data that a client lawfully provides or instructs Finch to process.
Clients should avoid sending sensitive personal data unless it is necessary, lawful and covered by agreed safeguards.
3. Purpose and lawful handling
Finch uses data only for defined business purposes such as responding to enquiries, delivering contracted services, maintaining systems, measuring campaign performance, improving services, protecting security, meeting legal obligations and managing business records. Where applicable, personal data is handled on a valid legal basis and in accordance with notices, consent or instructions required by law.
Where Finch acts as a service provider or processor for a client, the client remains responsible for determining the purpose and lawful basis of its processing unless the written agreement says otherwise.
4. Access and sharing
Access is limited to personnel and authorised service providers who need the data for their assigned work. Data may be shared with hosting, cloud, analytics, communication, advertising or project tools used to deliver services; professional advisers; or public authorities where legally required. Service providers are expected to protect information and use it only for authorised purposes.
Finch does not sell personal data as a business model.
5. Security safeguards
We aim to use proportionate safeguards such as access controls, strong authentication where available, secure configuration, backups, software updates, confidentiality obligations and limited access. No website, transmission or storage system can be guaranteed completely secure.
6. Retention and deletion
Data is retained only for as long as reasonably needed for the stated purpose, project delivery, support, legitimate business records, dispute resolution or legal requirements. At the end of a project, return or deletion of client data will follow the applicable agreement and technical feasibility, subject to lawful retention obligations and backup cycles.
7. Requests, corrections and incidents
Requests relating to personal data can be sent to support@finchtechnologies.com. We may need to verify identity and clarify the relevant project or system. If a suspected data incident affects information under our control, we will assess it and take steps required by applicable law and contract, including notifying affected parties or authorities where required.
India’s Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025 have phased commencement provisions. Applicable requirements will be followed as they come into force. See the Ministry of Electronics and Information Technology for official updates.
8. Contact
For data-related questions, contact support@finchtechnologies.com or use our Start a Project page.