{ Legal }
Privacy Policy
Privacy Policy
Privacy Policy
Last updated 26 September 2026
This policy explains what personal data Polymath Digital collects through this website, why we collect it, who it is shared with, and what you can do about it. It applies to polymathdigital.co and to enquiries made through it.
1. Who we are
1. Who we are
Polymath Digital (“we”, “us”) is an independent search consultancy operating from India. For the purposes of the UK and EU GDPR we are the data controller for the personal data described here. Under India’s Digital Personal Data Protection Act, 2023 we are a data fiduciary.
You can reach us about anything in this policy at hello@polymathdigital.co.
2. What we collect
2. What we collect
Information you give us
When you submit the contact form, we collect your name, work email address, and the description of your problem. Your website URL and the situation you select are optional.
When you request an AI Visibility Snapshot, we collect your name, work email address, company name and website URL, and anything you add in the optional field. The website URL is required because it is what we analyse.
If you email us directly, we hold that correspondence.
Information collected automatically
Our host records standard server information when you load a page, including your IP address, browser type, referring page and the pages you view.
Information we look up about your business
To prepare a Snapshot we examine publicly available information about the website and company you give us, including how AI search systems and search engines describe it. This is business information, not personal data about you, but it may incidentally include the names of people published on that website.
3. Why we use it, and our legal basis
3. Why we use it, and our legal basis
Purpose
Purpose
Legal basis (UK/EU GDPR)
Legal basis (UK/EU GDPR)
Responding to your enquiry and arranging a call
Responding to your enquiry and arranging a call
Legitimate interests — you asked us to get in touch
Legitimate interests — you asked us to get in touch
Preparing and sending your AI Visibility Snapshot
Preparing and sending your AI Visibility Snapshot
Steps taken at your request prior to entering a contract
Steps taken at your request prior to entering a contract
Keeping a record of enquiries and clients
Keeping a record of enquiries and clients
Legitimate interests — running and defending the business
Legitimate interests — running and defending the business
Sending you marketing emails, if we ever do
Sending you marketing emails, if we ever do
Your consent, which you can withdraw at any time
Your consent, which you can withdraw at any time
Understanding site usage in aggregate
Understanding site usage in aggregate
Legitimate interests, and your consent where cookies require it
Legitimate interests, and your consent where cookies require it
Under the DPDP Act we process your data on the basis of the consent you give when you submit a form, for the purpose stated at the point of collection. You can withdraw that consent at any time — see section 7.
We do not sell personal data, and we do not share it for advertising.
4. Who we share it with
4. Who we share it with
We use a small number of service providers who process data on our behalf under contract:
Framer — website hosting and form delivery
HubSpot — customer relationship management; enquiry records are stored here
Google Workspace — email and documents
We may also disclose data where we are legally required to, or to establish or defend legal claims.
5. Where your data goes
5. Where your data goes
We operate from India and our providers store data in the United States and the European Union. Where personal data is transferred out of the UK or EEA, that transfer relies on the UK International Data Transfer Agreement or the European Commission’s Standard Contractual Clauses, as applicable, together with the safeguards our providers have in place.
6. How long we keep it
6. How long we keep it
Enquiries that don’t become clients — 24 months from the last contact, then deleted.
Snapshot requests — 24 months, so we can see whether anything changed if you come back.
Client records — for the length of the engagement and 6 years afterwards, for tax and legal purposes.
Marketing consent records — until you withdraw consent, plus a record of the withdrawal itself.
7. Your rights
7. Your rights
Wherever you are, you can ask us to give you a copy of your data, correct it, delete it, or stop using it. Email hello@polymathdigital.co and we will respond within 30 days.
If you are in the UK or EU
You have the right of access, rectification, erasure, restriction of processing, data portability, and objection to processing based on legitimate interests. Where we rely on consent you can withdraw it at any time without affecting processing already carried out. You can complain to the Information Commissioner’s Office in the UK, or to your national supervisory authority in the EU.
We do not currently target or market to residents of the EU or UK. If that changes we will appoint a representative under Article 27 of the UK and EU GDPR and name them here.
If you are in India
You have the right to access a summary of your data and how it is processed, to correction and erasure, to nominate someone to exercise your rights if you die or become incapacitated, and to a grievance redressal process. Raise a grievance with hello@polymathdigital.co. If we do not resolve it, you can approach the Data Protection Board of India.
If you are in California
You can ask what personal information we have collected and ask us to delete it. We do not sell or share personal information as those terms are defined under the CCPA, and we do not use it for cross-context behavioural advertising.
8. Cookies
8. Cookies
The site uses cookies that are necessary for it to function, and analytics cookies that help us see how it is used. If you are in the UK or EU, non-essential cookies are only set with your consent, which you can change or withdraw through the cookie banner. You can also block cookies in your browser, though parts of the site may then not work.
9. Security
9. Security
We keep personal data on access-controlled accounts with reputable providers, use multi-factor authentication, and limit access to people who need it. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security. If a breach affects your data we will notify you and the relevant authority as required — under the DPDP Act, all personal data breaches are notifiable regardless of severity.
10. Children
10. Children
This site and our services are for businesses. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us data, email us and we will delete it.
11. Changes
11. Changes
If we change this policy we will update the date at the top. If the change is significant we will say so on this page.
{ Legal }
Privacy Policy
Privacy Policy
Privacy Policy
Last updated 26 September 2026
This policy explains what personal data Polymath Digital collects through this website, why we collect it, who it is shared with, and what you can do about it. It applies to polymathdigital.co and to enquiries made through it.
1. Who we are
1. Who we are
Polymath Digital (“we”, “us”) is an independent search consultancy operating from India. For the purposes of the UK and EU GDPR we are the data controller for the personal data described here. Under India’s Digital Personal Data Protection Act, 2023 we are a data fiduciary.
You can reach us about anything in this policy at hello@polymathdigital.co.
2. What we collect
2. What we collect
Information you give us
When you submit the contact form, we collect your name, work email address, and the description of your problem. Your website URL and the situation you select are optional.
When you request an AI Visibility Snapshot, we collect your name, work email address, company name and website URL, and anything you add in the optional field. The website URL is required because it is what we analyse.
If you email us directly, we hold that correspondence.
Information collected automatically
Our host records standard server information when you load a page, including your IP address, browser type, referring page and the pages you view.
Information we look up about your business
To prepare a Snapshot we examine publicly available information about the website and company you give us, including how AI search systems and search engines describe it. This is business information, not personal data about you, but it may incidentally include the names of people published on that website.
3. Why we use it, and our legal basis
3. Why we use it, and our legal basis
Purpose
Purpose
Legal basis (UK/EU GDPR)
Legal basis (UK/EU GDPR)
Responding to your enquiry and arranging a call
Responding to your enquiry and arranging a call
Legitimate interests — you asked us to get in touch
Legitimate interests — you asked us to get in touch
Preparing and sending your AI Visibility Snapshot
Preparing and sending your AI Visibility Snapshot
Steps taken at your request prior to entering a contract
Steps taken at your request prior to entering a contract
Keeping a record of enquiries and clients
Keeping a record of enquiries and clients
Legitimate interests — running and defending the business
Legitimate interests — running and defending the business
Sending you marketing emails, if we ever do
Sending you marketing emails, if we ever do
Your consent, which you can withdraw at any time
Your consent, which you can withdraw at any time
Understanding site usage in aggregate
Understanding site usage in aggregate
Legitimate interests, and your consent where cookies require it
Legitimate interests, and your consent where cookies require it
Under the DPDP Act we process your data on the basis of the consent you give when you submit a form, for the purpose stated at the point of collection. You can withdraw that consent at any time — see section 7.
We do not sell personal data, and we do not share it for advertising.
4. Who we share it with
4. Who we share it with
We use a small number of service providers who process data on our behalf under contract:
Framer — website hosting and form delivery
HubSpot — customer relationship management; enquiry records are stored here
Google Workspace — email and documents
We may also disclose data where we are legally required to, or to establish or defend legal claims.
5. Where your data goes
5. Where your data goes
We operate from India and our providers store data in the United States and the European Union. Where personal data is transferred out of the UK or EEA, that transfer relies on the UK International Data Transfer Agreement or the European Commission’s Standard Contractual Clauses, as applicable, together with the safeguards our providers have in place.
6. How long we keep it
6. How long we keep it
Enquiries that don’t become clients — 24 months from the last contact, then deleted.
Snapshot requests — 24 months, so we can see whether anything changed if you come back.
Client records — for the length of the engagement and 6 years afterwards, for tax and legal purposes.
Marketing consent records — until you withdraw consent, plus a record of the withdrawal itself.
7. Your rights
7. Your rights
Wherever you are, you can ask us to give you a copy of your data, correct it, delete it, or stop using it. Email hello@polymathdigital.co and we will respond within 30 days.
If you are in the UK or EU
You have the right of access, rectification, erasure, restriction of processing, data portability, and objection to processing based on legitimate interests. Where we rely on consent you can withdraw it at any time without affecting processing already carried out. You can complain to the Information Commissioner’s Office in the UK, or to your national supervisory authority in the EU.
We do not currently target or market to residents of the EU or UK. If that changes we will appoint a representative under Article 27 of the UK and EU GDPR and name them here.
If you are in India
You have the right to access a summary of your data and how it is processed, to correction and erasure, to nominate someone to exercise your rights if you die or become incapacitated, and to a grievance redressal process. Raise a grievance with hello@polymathdigital.co. If we do not resolve it, you can approach the Data Protection Board of India.
If you are in California
You can ask what personal information we have collected and ask us to delete it. We do not sell or share personal information as those terms are defined under the CCPA, and we do not use it for cross-context behavioural advertising.
8. Cookies
8. Cookies
The site uses cookies that are necessary for it to function, and analytics cookies that help us see how it is used. If you are in the UK or EU, non-essential cookies are only set with your consent, which you can change or withdraw through the cookie banner. You can also block cookies in your browser, though parts of the site may then not work.
9. Security
9. Security
We keep personal data on access-controlled accounts with reputable providers, use multi-factor authentication, and limit access to people who need it. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security. If a breach affects your data we will notify you and the relevant authority as required — under the DPDP Act, all personal data breaches are notifiable regardless of severity.
10. Children
10. Children
This site and our services are for businesses. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us data, email us and we will delete it.
11. Changes
11. Changes
If we change this policy we will update the date at the top. If the change is significant we will say so on this page.
{ Legal }
Privacy Policy
Privacy Policy
Privacy Policy
Last updated 26 September 2026
This policy explains what personal data Polymath Digital collects through this website, why we collect it, who it is shared with, and what you can do about it. It applies to polymathdigital.co and to enquiries made through it.
1. Who we are
1. Who we are
Polymath Digital (“we”, “us”) is an independent search consultancy operating from India. For the purposes of the UK and EU GDPR we are the data controller for the personal data described here. Under India’s Digital Personal Data Protection Act, 2023 we are a data fiduciary.
You can reach us about anything in this policy at hello@polymathdigital.co.
2. What we collect
2. What we collect
Information you give us
When you submit the contact form, we collect your name, work email address, and the description of your problem. Your website URL and the situation you select are optional.
When you request an AI Visibility Snapshot, we collect your name, work email address, company name and website URL, and anything you add in the optional field. The website URL is required because it is what we analyse.
If you email us directly, we hold that correspondence.
Information collected automatically
Our host records standard server information when you load a page, including your IP address, browser type, referring page and the pages you view.
Information we look up about your business
To prepare a Snapshot we examine publicly available information about the website and company you give us, including how AI search systems and search engines describe it. This is business information, not personal data about you, but it may incidentally include the names of people published on that website.
3. Why we use it, and our legal basis
3. Why we use it, and our legal basis
Purpose
Purpose
Legal basis (UK/EU GDPR)
Legal basis (UK/EU GDPR)
Responding to your enquiry and arranging a call
Responding to your enquiry and arranging a call
Legitimate interests — you asked us to get in touch
Legitimate interests — you asked us to get in touch
Preparing and sending your AI Visibility Snapshot
Preparing and sending your AI Visibility Snapshot
Steps taken at your request prior to entering a contract
Steps taken at your request prior to entering a contract
Keeping a record of enquiries and clients
Keeping a record of enquiries and clients
Legitimate interests — running and defending the business
Legitimate interests — running and defending the business
Sending you marketing emails, if we ever do
Sending you marketing emails, if we ever do
Your consent, which you can withdraw at any time
Your consent, which you can withdraw at any time
Understanding site usage in aggregate
Understanding site usage in aggregate
Legitimate interests, and your consent where cookies require it
Legitimate interests, and your consent where cookies require it
Under the DPDP Act we process your data on the basis of the consent you give when you submit a form, for the purpose stated at the point of collection. You can withdraw that consent at any time — see section 7.
We do not sell personal data, and we do not share it for advertising.
4. Who we share it with
4. Who we share it with
We use a small number of service providers who process data on our behalf under contract:
Framer — website hosting and form delivery
HubSpot — customer relationship management; enquiry records are stored here
Google Workspace — email and documents
We may also disclose data where we are legally required to, or to establish or defend legal claims.
5. Where your data goes
5. Where your data goes
We operate from India and our providers store data in the United States and the European Union. Where personal data is transferred out of the UK or EEA, that transfer relies on the UK International Data Transfer Agreement or the European Commission’s Standard Contractual Clauses, as applicable, together with the safeguards our providers have in place.
6. How long we keep it
6. How long we keep it
Enquiries that don’t become clients — 24 months from the last contact, then deleted.
Snapshot requests — 24 months, so we can see whether anything changed if you come back.
Client records — for the length of the engagement and 6 years afterwards, for tax and legal purposes.
Marketing consent records — until you withdraw consent, plus a record of the withdrawal itself.
7. Your rights
7. Your rights
Wherever you are, you can ask us to give you a copy of your data, correct it, delete it, or stop using it. Email hello@polymathdigital.co and we will respond within 30 days.
If you are in the UK or EU
You have the right of access, rectification, erasure, restriction of processing, data portability, and objection to processing based on legitimate interests. Where we rely on consent you can withdraw it at any time without affecting processing already carried out. You can complain to the Information Commissioner’s Office in the UK, or to your national supervisory authority in the EU.
We do not currently target or market to residents of the EU or UK. If that changes we will appoint a representative under Article 27 of the UK and EU GDPR and name them here.
If you are in India
You have the right to access a summary of your data and how it is processed, to correction and erasure, to nominate someone to exercise your rights if you die or become incapacitated, and to a grievance redressal process. Raise a grievance with hello@polymathdigital.co. If we do not resolve it, you can approach the Data Protection Board of India.
If you are in California
You can ask what personal information we have collected and ask us to delete it. We do not sell or share personal information as those terms are defined under the CCPA, and we do not use it for cross-context behavioural advertising.
8. Cookies
8. Cookies
The site uses cookies that are necessary for it to function, and analytics cookies that help us see how it is used. If you are in the UK or EU, non-essential cookies are only set with your consent, which you can change or withdraw through the cookie banner. You can also block cookies in your browser, though parts of the site may then not work.
9. Security
9. Security
We keep personal data on access-controlled accounts with reputable providers, use multi-factor authentication, and limit access to people who need it. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security. If a breach affects your data we will notify you and the relevant authority as required — under the DPDP Act, all personal data breaches are notifiable regardless of severity.
10. Children
10. Children
This site and our services are for businesses. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us data, email us and we will delete it.
11. Changes
11. Changes
If we change this policy we will update the date at the top. If the change is significant we will say so on this page.