1. Introduction
   LeadWorks Digital (“we,” “our,” or “us”) is committed to protecting the privacy of individuals in accordance with the General Data Protection Regulation (“GDPR”) and the CAN-SPAM Act. This policy outlines how we collect, use, store, and safeguard personal data and ensures compliance with anti-spam regulations.

2. Legal Basis for Data Processing
   We process personal data based on the following lawful grounds:

• Consent:When individuals provide explicit consent for data collection.
• Contractual Necessity:When data processing is required to fulfill contractual obligations.
• Legal Obligation:Compliance with legal or regulatory requirements.
• Legitimate Interests:When processing is necessary for legitimate business interests, provided it does not override individuals’ rights.

3. Personal Data We Collect
   We may collect and process the following categories of personal data:

• Identifiers:Name, email address, phone number, job title, company name.
• Business Information:Company details, transaction records, and preferences.
• Technical Information:IP address, device details, and browsing history.
• Communication Data:Emails, inquiries, and interactions with our website.

4. How We Use Personal Data
   We use personal data to:

• Provide and personalize our services.
• Conduct marketing and lead generation activities.
• Enhance website experience and analytics.
• Comply with legal and regulatory obligations.
• Ensure security and fraud prevention.

5. CAN-SPAM Compliance & Email Communication
   In accordance with the CAN-SPAM Act, we:

• Do not use false or misleading subject lines.
• Clearly identify promotional messages as advertisements.
• Provide our physical address in all email communications.
• Allow recipients to opt-out of future emails.
• Honor opt-out requests promptly.

To unsubscribe from our marketing emails, follow the instructions at the bottom of our emails or contact us at amit.belhekar@leadworksdigital.com.

6. Data Retention
   We retain personal data only as long as necessary for its intended purpose or as required by law. When no longer needed, data is securely deleted or anonymized.

7. Data Subject Rights
   Under GDPR, individuals have the following rights:

• Right to Access:Obtain details about the personal data we hold.
• Right to Rectification:Request correction of inaccurate data.
• Right to Erasure:Request deletion of personal data (“right to be forgotten”).
• Right to Restriction:Limit how we process personal data.
• Right to Data Portability:Request transfer of personal data.
• Right to Object:Object to data processing based on legitimate interests.
• Right to Withdraw Consent:Withdraw consent at any time.

To exercise these rights, contact us at amit.belhekar@leadworksdigital.com.

8. Data Security Measures
   We implement robust security measures to protect personal data, including:

• Data encryption and secure storage.
• Access controls and authentication mechanisms.
• Regular security audits and compliance checks.
• Employee training on data protection.

9. Data Transfers & Third Parties
   We may transfer personal data to trusted third parties for:

• Service provision and operational support.
• Compliance with legal and regulatory requirements.
• Business analytics and marketing.

When transferring data outside the EU, we ensure compliance with GDPR through appropriate safeguards, including Standard Contractual Clauses.

10. Data Breach Response
    In case of a data breach, LeadWorks Digital will:

• Investigate and contain the breach immediately.
• Notify affected individuals and authorities where required.
• Implement corrective actions to prevent future incidents.

11. Updates to This Policy
    We may update this GDPR & CAN-SPAM Privacy Policy periodically. Any changes will be reflected with an updated effective date.

12. Contact Information
    For any questions or requests regarding this policy, please contact us:

• Email:belhekar@leadworksdigital.com
• Address:Ss Ii/49 Sector-8, Kopar Khairna, Thane, Thane, Thane, Maharashtra, India, 400709

LeadWorks Digital is dedicated to ensuring compliance with GDPR, CAN-SPAM, and protecting your privacy rights.