Effective Date: 03/08/2026

Last Updated: 03/08/2026

Welcome to 3C Brand Hub (“we,” “our,” or “us”). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website (https://3cbrandhub.com/) or engage our branding, web design, and digital marketing services.

We are committed to protecting your privacy and ensuring compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act, India), the General Data Protection Regulation (GDPR / UK GDPR), and other applicable global data protection laws.

1. Data Fiduciary Identity

For the purposes of applicable data protection laws, the Data Fiduciary (or Data Controller) responsible for your personal data is:

3C Brand Hub

First floor, Ariyattil Building, Vakkatt Road, Chakkaraparamb

Vennala, Ernakulam, Kerala, India. Pin: 682032

Email: [email protected]

Phone: +91 8921625012

2. What Personal Data We Collect and Why (Purpose Limitation)

We only collect personal data that is strictly necessary for specific, lawful purposes.

3. How We Collect Your Data

We collect your data through:

• Direct Interactions: When you fill out our “Book a Consultation” form, email us, or call us.
• Automated Technologies: When you interact with our website, we use cookies and analytics tools (e.g., Google Analytics, Meta Pixel) to collect usage data. (You can manage this via our Cookie Consent Banner).
• Third Parties: From client referrals or publicly available corporate directories (e.g., LinkedIn).

4. Data Sharing and Third-Party Disclosures

We do not sell your personal data. We only share your data with trusted third-party service providers (Data Processors) strictly for operational purposes:

• Hosting & Cloud Infrastructure: To securely host our website and client data.
• CRM & Communication Tools: To manage client communications and project updates.
• Analytics & Marketing: To track website performance (only with your active cookie consent).
• Legal Compliance: We may disclose data to law enforcement or government authorities if required by law.

5. Cross-Border Data Transfers

As a global agency, we may transfer your personal data to servers located outside your country of residence.

• For EU/UK Residents: If we transfer data outside the European Economic Area (EEA) or the UK, we ensure it is protected by Standard Contractual Clauses (SCCs) or an adequacy decision.
• For Indian Residents: Data is processed in compliance with cross-border transfer regulations under the DPDP Act.

6. Data Retention Period

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy:

• Client Project Data: Retained for the duration of the contract, plus 10 years for tax and legal compliance.
• Marketing Inquiries: Retained for 10-30 years. If no contract is signed, it will be securely deleted.
• Analytics Data: Retained as per the lifecycle of the specific cookie (usually 12–24 months).

7. Your Privacy Rights

Depending on your jurisdiction, you have specific rights regarding your personal data.

Rights under the DPDP Act (India) & GDPR:

1. Right to Access: Request a copy of the personal data we hold about you.
2. Right to Correction: Request correction of inaccurate or incomplete data.
3. Right to Erasure (Right to be Forgotten): Request deletion of your data when it is no longer necessary for the stated purpose.
4. Right to Withdraw Consent: Withdraw your consent at any time (e.g., unsubscribing from emails or revoking cookie consent) with the same ease as providing it.
5. Right to Grievance Redressal: The right to have complaints resolved within a designated timeframe.
6. Right to Nominate (DPDP Act): Nominate an individual to exercise your rights in the event of death or incapacity.

How to Exercise Your Rights:

To exercise any of these rights, please email our Grievance Officer at [email protected]. We will acknowledge your request within 7 days and process it within 30 days.

8. Notice to EU and UK Residents (GDPR Compliance)

This section replaces our former standalone GDPR policy. If you are located in the EEA or the UK, you have the right to lodge a complaint with a supervisory authority in your country of residence if you believe our processing of your personal data violates applicable law. We rely on the lawful bases of Consent, Performance of a Contract, and Legitimate Interest as outlined in Section 2.

9. Notice to California Residents (CCPA/CPRA)

We do not “sell” or “share” personal information for cross-context behavioral advertising as defined by the CCPA. We collect B2B data strictly for providing services. California residents may request to know the categories of data we collect and request deletion by contacting us.

10. Grievance Redressal Mechanism (Mandatory under India DPDP Act)

In compliance with Section 13 of the Digital Personal Data Protection Act, 2023, we have appointed a Grievance Officer to address any concerns regarding your personal data.

Grievance Officer Details:

• Name: Sreeja
• Designation: Grievance Officer / Data Protection Officer
• Email: [email protected]
• Address: 3C Brandhub, First floor, Ariyattil Building, Vennala, Ernakulam, Kerala, India – 682032

We will acknowledge your grievance within 7 days and resolve it within 30 days. If you are unsatisfied with the resolution, you have the right to escalate your complaint to the Data Protection Board of India.

11. Policy Updates

We may update this Privacy Policy to reflect legal or operational changes. We will notify you of significant changes by updating the “Last Updated” date at the top of this page.