Legal
Privacy Policy
Last Updated
1. Information We Collect
This Privacy Policy explains how Ethereon D Lab Pvt. Ltd. (operating as "Peak Studio," "we," "us," or "our") collects, uses, shares, and protects personal data when you visit peakstudio.ai (the "Site") or contact us about our design, automation, and product-development services.
We are committed to handling personal data lawfully and transparently under the laws that apply to you, including India's Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025 (the "DPDP Act"); the EU General Data Protection Regulation (the "GDPR"); the UK GDPR; and the California Consumer Privacy Act as amended by the CPRA (the "CCPA").
1.1. Who we are
For the purposes of the GDPR and DPDP Act, the data controller / data fiduciary is:
Entity: Ethereon D Lab Pvt. Ltd.
Registered address: [Registered Address]
Country of incorporation: India
Privacy contact: contact@peakstudio.ai
If you are in the EU/UK and we are required to appoint a representative under Article 27 GDPR / UK GDPR, our representative's details are: [EU/UK Representative name and address — see note in the publishing checklist].
Our Grievance Officer (as required under the DPDP Act) is: [Name], contact@peakstudio.ai, [phone].
1.2. Personal Data we Collect
We collect only what we need. Depending on how you interact with us, this includes:
Information you give us directly
Enquiry / contact form data: your name, email address, company name, and the content of your message.
Newsletter subscriptions: your email address (and any name you provide).
Any other information you choose to send us by email or other channels.2. How We Use Your Information
We use the information we collect to:
Provide and improve our design and development services that disrupt conventions
Communicate with you about projects and creative solutions
Share updates about our innovative approaches (with your consent)
Process payments and manage billing
Analyze website usage to enhance user experience
Comply with legal obligations
Information collected automatically
Usage and device data via analytics and cookies: IP address (often truncated/anonymised), browser and device type, pages viewed, referring URLs, and approximate location.
Advertising and marketing identifiers set by third-party cookies (see Section 6 and our Cookie Policy).
Client project data
When you engage us for services, you may share materials, files, or data relating to your business or your own users. How we handle that data is governed primarily by our separate engagement agreement, supplemented by Section 7 (AI and sub-processors) below.
We do not intentionally collect special-category / sensitive personal data through the Site, and we ask that you do not send it to us via the enquiry form.
3. Why we use your data and our legal basis
Purpose | Data used | Legal basis (GDPR/UK) | DPDP basis |
|---|---|---|---|
Responding to your enquiry | Contact form data | Legitimate interests / steps prior to a contract | Consent / legitimate use |
Sending you our newsletter | Email address | Consent | Consent |
Operating and securing the Site | Usage/device data | Legitimate interests | Legitimate use |
Analytics to improve the Site | Cookie/analytics data | Consent (where required) | Consent |
Advertising and remarketing | Ad-cookie data | Consent | Consent |
Delivering contracted services | Client project data | Contract | Contract / consent |
Meeting legal and tax obligations | As required | Legal obligation | Legal obligation |
Where our basis is consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.
4. How long we keep your data
We retain personal data only as long as necessary for the purpose it was collected, after which we delete or anonymise it:
Enquiry data: up to [e.g. 24 months] after our last contact, unless you become a client.
Newsletter data: until you unsubscribe, then removed within a reasonable period.
Client project data: per the retention terms in the relevant engagement agreement.
Analytics/advertising data: per the retention settings of the relevant provider (see Cookie Policy).
Under the DPDP Act, we erase personal data once its purpose is served or consent is withdrawn, subject to any legal retention requirement.
5. How we share your data
We do not sell your personal data. We share it only with:
Service providers / data processors who help us run the Site and business (hosting, email/newsletter platform, analytics, advertising partners) — see Section 7.
Professional advisers (legal, accounting) where necessary.
Authorities where required by law or to protect our rights.
A successor entity in the event of a merger, acquisition, or restructuring.
6. Cookies and tracking
We use cookies and similar technologies. Categories used on the Site:
Strictly necessary — required for the Site to function. Always on.
Analytics — e.g. Google Analytics, to understand how the Site is used. Set only with your consent where required.
Advertising / marketing — e.g. Meta and Google Ads cookies, used for measurement and marketing. Set only with your consent.
Where the law requires it (notably the EU/UK ePrivacy regime), non-essential cookies are set only after you opt in through our consent banner. You can change or withdraw your choices at any time via [cookie settings link].
Full details — including specific cookies, providers, and durations — are in our Cookie Policy. (See publishing checklist: the cookie table should be auto-generated by your consent-management tool.)
7. AI tools and sub-processors
Because Peak Studio is an AI-powered studio, we use third-party AI and automation tools as part of delivering our services. You should know:
We may process client-provided materials through third-party AI service providers acting as our sub-processors. A current list is available on request: contact@peakstudio.ai.
We take reasonable steps to use providers that do not train their models on your data and that offer business/enterprise data-protection terms. Where a tool does not meet this standard, we will not put your confidential or personal data into it without your instruction or consent.
We do not input special-category or unnecessary personal data into AI tools.
Our handling of client data, including AI processing and confidentiality, is governed in detail by our engagement agreement and, where personal data is involved, a Data Processing Agreement.
8. International data transfers
We are based in India, and our providers may be located in the US, EU, UK, and elsewhere. Where personal data is transferred across borders:
For EU/UK data, we rely on adequacy decisions or Standard Contractual Clauses (SCCs) / the UK International Data Transfer Addendum, with supplementary measures where needed.
For data subject to the DPDP Act, transfers are made consistent with the Act and any restrictions notified by the Indian government.
9. Your rights
Depending on where you live, you have some or all of the following rights:
Under GDPR / UK GDPR (EU/UK): access, rectification, erasure, restriction, portability, objection (including to direct marketing), and the right not to be subject to solely automated decisions with legal effect. You may also complain to your local supervisory authority.
Under the DPDP Act (India): access to a summary of your data and processing, correction and erasure, grievance redressal (via our Grievance Officer), and the right to nominate another person to exercise your rights.
Under CCPA/CPRA (California): to know, access, delete, and correct your data; to opt out of "sale" or "sharing" of personal information (note: our use of advertising cookies may constitute "sharing" — use [Do Not Sell or Share My Personal Information link]); to limit use of sensitive personal information; and to non-discrimination for exercising your rights.
To exercise any right, contact contact@peakstudio.ai. We will verify your identity and respond within the timeframe required by the applicable law.
10. Marketing communications
We send newsletters and marketing emails only with your consent. Every marketing email includes an unsubscribe link, and you can opt out at any time by emailing contact@peakstudio.ai.
11. Security
We use reasonable technical and organisational measures — including access controls, encryption in transit, and provider vetting — to protect personal data. No method of transmission or storage is fully secure, but we work to protect your information and review our safeguards periodically.
12. Data breaches
If a personal data breach occurs, we will assess it and notify the relevant authority and affected individuals where required, within the timeframes set by applicable law (including the Data Protection Board of India and, for GDPR, the relevant supervisory authority).
13. Children
The Site is not directed at children. We do not knowingly collect data from anyone under 18 (the DPDP threshold). If you believe a child has provided us data, contact us and we will delete it. Where children's data is processed, we comply with the verifiable parental-consent requirements of the DPDP Act.
14. Changes to this policy
We may update this policy from time to time. We will post the revised version here with a new "Last updated" date, and where changes are material, we will take additional steps to notify you where required.
15. Contact
Questions, requests, or complaints:
General / privacy: contact@peakstudio.ai
Grievance Officer (DPDP): [Name], contact@peakstudio.ai
Postal: Ethereon D Lab Pvt. Ltd., WeWork Princeville, Ground floor, off Intermediate Ring Road, Embassy Golf Links Business Park, Domlur, Bengaluru, Karnataka 560071
If you are in the EU/UK and remain unsatisfied, you may contact your data protection authority.
FAQ’s