Privacy Policy
Last Updated: May 17, 2026
1. Introduction
Cocaimo Digital Agency ("we," "our," or "us"), based in Kochi, Kerala, India, is committed to protecting your privacy. This Privacy Policy explains how your personal data is collected, used, and disclosed by Cocaimo, in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Information Technology Act, 2000, along with rules made thereunder.
2. Information We Collect
We collect personal data that you provide directly to us when you:
- Fill out a contact form on our website
- Sign up for our newsletter
- Engage with us on social media
- Communicate with us via email or phone
3. How We Use Your Information
We use the information we collect to provide, maintain, and improve our services, to develop new ones, and to protect Cocaimo and our users. This includes using AI-driven analytics to improve client ROI while maintaining strict data anonymity where possible. We process personal data only for the specified purpose for which you have given consent, in line with the DPDP Act's requirement of purpose limitation.
4. Data Security
We implement industry-standard security measures to protect your data. As an engineering-first agency, we prioritize technical safeguards, including encryption and secure server architectures, to prevent unauthorized access, in keeping with the reasonable security practices required under the Information Technology Act, 2000 and the DPDP Act.
5. Your Rights as a Data Principal
Under the DPDP Act, you (as a "Data Principal") have the right to:
- Access a summary of the personal data we hold about you and how it is processed
- Request correction or updating of inaccurate or incomplete personal data
- Request erasure of your personal data, subject to legal retention requirements
- Withdraw consent at any time, as easily as it was given
- Nominate another individual to exercise these rights on your behalf in the event of death or incapacity
- Register a grievance regarding the processing of your personal data
To exercise any of these rights, please contact our Grievance Officer using the details in Section 7 below.
6. Data Retention and Cross-Border Transfer
We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Where personal data is transferred outside India, such transfers are made in accordance with the DPDP Act and any restrictions notified by the Central Government.
7. Grievance Officer & Contact Us
If you have any questions about this Privacy Policy, wish to exercise your rights as a Data Principal, or have a grievance regarding how your personal data is processed, please contact our Grievance Officer at hello@cocaimo.com. We will endeavour to address your grievance within the timelines prescribed under the DPDP Act and its rules.