Privacy Policy

gsjmedia (“gsjmedia,” “we,” “us”) is a registered sole proprietorship in India. We operate gsjmedia.co and provide outbound systems, lead generation, AI automation, CRM and related services to B2B businesses. This policy explains what personal information we handle and how.

One distinction shapes everything below, so we will be explicit about it. When you visit our site or contact us, we are the controller. We decide what is collected and why, and this policy applies to you directly. When we run campaigns for a client, we are the processor. The client decides who is contacted and why, and we act on their instructions. If you received a campaign email and want out, we action the opt-out immediately and pass the request to the client, who controls that data.

Information you give us: name, work email address, company name, job title, phone number where you provide it, and anything you include when you contact us, book a call, join a waitlist or download our free lead lists.

Information collected automatically: IP address, approximate location derived from it, device and browser type, pages visited, referring source, interaction events, and the campaign parameters on the link you arrived through.

Business contact data we process for clients: names, work email addresses, job titles, employer, publicly stated company information, and engagement signals such as whether a message was opened or replied to.

What we do not collect: we do not knowingly collect special category data such as health, biometric, religious or political information; we do not take payment card numbers on this site; and we do not buy or use scraped consumer lists.

We use the information we collect to:

Provide and maintain our services; improve the site’s functionality and how people experience it; communicate with you through updates, offers and service messages; respond to your enquiries and provide support; and comply with our legal obligations.

Where GDPR or UK GDPR applies, our legal bases are: performance of a contract or pre-contract steps taken at your request, for providing services; legitimate interests, for operating and securing the site and for B2B direct marketing; consent, for analytics and advertising cookies and for marketing where the law requires it, which you can withdraw at any time; and legal obligation, for tax and accounting records. Where India’s Digital Personal Data Protection Act 2023 applies, we rely on your consent or on a legitimate use permitted by that Act.

We do not sell or rent personal data, and we do not share it for cross-context behavioural advertising as defined under California law.

We share personal information in three situations: with service providers that help us operate, each under an agreement limiting what they may do with it; with law enforcement or regulators where required by law or a valid legal request; and with a successor if the business is transferred, in which case this policy continues to apply until you are told otherwise.

The providers we actually use, by category: hosting and infrastructure: Vercel, Supabase. Analytics and tag management: Google Analytics, Google Tag Manager. Email delivery and outreach: Smartlead, Instantly, and the mailbox providers behind them. CRM and scheduling: GoHighLevel, Cal.com. Data enrichment and automation: Clay, n8n. AI processing: Anthropic, OpenAI, used to draft and classify campaign messages. We do not permit these providers to train foundation models on client data.

If you are in the EU, the UK, California or India, you have rights over your personal information. We apply them to everyone who asks, wherever they are, because maintaining two standards is not worth the effort of sorting people into them.

Access a copy of what we hold; rectification of anything inaccurate; erasure, subject to records we must keep by law; restriction of processing; data portability in a machine-readable format; and the right to object, including to direct marketing.

In California, you also have the right to know what we collect and disclose, to correct, to limit use of sensitive personal information, and not to be discriminated against for exercising any of these. In India, you have rights to access, correction, erasure and grievance redressal under the DPDP Act 2023, and the right to nominate someone to exercise them for you.

Marketing opt-out. Every marketing email carries a working unsubscribe link and unsubscribing takes effect immediately. You can also reply to any message asking to be removed. Opting out of marketing does not stop service messages about an active engagement.

To exercise any of these, write to info@gsjmedia.co. We may need to confirm your identity first, and we respond within 30 days. There is no charge unless a request is manifestly unfounded or excessive.

We keep personal information only as long as necessary for the purposes set out in this policy, unless a longer period is required by law. In practice: enquiries and marketing contacts, up to 24 months after your last interaction with us; client campaign data, for the term of the engagement and then deleted or returned within 60 days unless the client instructs otherwise in writing; financial and tax records, up to 7 years as required by Indian law. Suppression and opt-out records are kept indefinitely, deliberately, because the only way to guarantee we never contact you again is to remember that you asked us not to.

We are based in India, and our providers operate in India, the United States and the European Union. Your information may therefore be transferred to and processed in countries other than your own, whose data protection laws may differ. Where we transfer personal data out of the EEA or the UK, we rely on an adequacy decision or on Standard Contractual Clauses with the receiving provider. By using the site you consent to this transfer.

We use strictly necessary cookies to make the site work, and analytics and similar technologies to understand how it is used so we can improve it. Analytics and advertising tags are held in a denied state by default, so nothing non-essential writes to storage on your device and our analytics runs in an aggregated, cookieless mode. You can disable or clear cookies through your browser settings, though blocking strictly necessary cookies may break parts of the site.

We use administrative, technical and physical safeguards to protect personal information, including access controls, encryption in transit, least-privilege access to client systems, and agreements with every provider that touches personal data. No method of transmission or storage is completely secure, and we do not claim otherwise. If a breach affects personal information we control, we will notify the relevant authority and, where the breach is likely to result in a high risk to you, notify you directly, without undue delay and within the time limits the applicable law sets. Where we act as processor for a client, we notify that client without undue delay so they can meet their own obligations.

Our site links to third-party websites and tools we do not control. We are not responsible for their content or their privacy practices. Read their policies before giving them your information.

Our site and services are for businesses and are not directed at anyone under 18. We do not knowingly collect personal information from children. If you believe a child has given us personal information, tell us and we will delete it.

We may update this policy as our services or the law change. Changes will be posted on this page with an updated “Last updated” date, and where a change materially affects your rights we will make reasonable efforts to tell you directly.

For questions about this policy, to exercise your rights, or to raise a grievance about how we handle personal information, including grievances under India’s Digital Personal Data Protection Act 2023, write to info@gsjmedia.co. We acknowledge grievances within 7 days and aim to resolve them within 30. If you are in the EEA or the UK and remain unsatisfied, you may also complain to your local supervisory authority.