PRIVACY POLICY.

1. Scope

This policy covers personal data we process through the Site and through direct interactions with you (email, project inquiries, scheduling calls). It does not cover the internal handling of a client's project materials, which is governed by the separate agreement we sign with that client.

2. What we collect

We do not intentionally collect sensitive personal data (such as financial account details, health, or biometric data) through the Site. Please do not submit such information via the contact form.

3. How we use your data (purposes & lawful basis)

We process your data to:

• respond to your inquiry, prepare proposals, and communicate about potential or ongoing projects;
• schedule and conduct calls or meetings;
• operate, secure, and improve the Site and understand how it is used;
• send you updates or marketing about WIB only where you have consented, and you can withdraw consent at any time (see Section 7);
• comply with legal obligations and enforce our Terms.

Our lawful bases are your consent, and the legitimate uses / legitimate interests of operating and growing our business (such as responding to a request you initiated and keeping the Site secure), as permitted under the DPDP Act and, where relevant, the GDPR.

4. Where your data is stored and who processes it

Form submissions and inquiry data are received and managed through WIB's own internal application and stored using Google Drive / Google Workspace. We use a limited set of trusted third-party processors to run our business, which may include:

Some of these providers are located outside India and may process your data on servers in other countries. Where data is transferred internationally, we rely on the recipient's own safeguards and applicable contractual protections. We do not sell your personal data.

5. Cookies and tracking

The Site uses:

• Essential cookies — required for the Site to function.
• Analytics cookies — to measure and improve Site performance.
• Third-party / marketing cookies — set by embedded content and pixels from Meta/Instagram and YouTube, and used for measurement and advertising.

Where required by law (including for visitors in the EU/UK), we will request your consent for non-essential cookies via a cookie banner, and you can change or withdraw your choices at any time. You can also control cookies through your browser settings; disabling some cookies may affect how the Site works.

6. How long we keep your data

We keep inquiry and correspondence data for as long as needed to respond to you and, if we work together, for the duration of our relationship plus a reasonable period afterwards for legal, accounting, and record-keeping purposes. Marketing data is kept until you unsubscribe or withdraw consent. Analytics data is retained per the retention settings of our analytics provider.

7. Your rights

Subject to applicable law, you may:

• access the personal data we hold about you;
• request correction or updating of inaccurate or incomplete data;
• request erasure of your data;
• withdraw consent at any time (including unsubscribing from marketing via the link in any marketing email);
• nominate another person to exercise your rights in the event of death or incapacity (as provided under the DPDP Act);
• raise a grievance about how we handle your data.

Visitors in the EU/UK also have rights to restrict or object to processing and to data portability under the GDPR. To exercise any of these rights, email projects@worstisbetterr.com. We will respond within the timelines required by applicable law.

8. Grievance redressal

If you have any concern or complaint about our handling of your personal data, contact our grievance point of contact at projects@worstisbetterr.com with the subject line "Data Grievance." We will acknowledge and work to resolve your concern in accordance with the DPDP Act. If you are unsatisfied, you may escalate to the Data Protection Board of India.

9. Security

We apply reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Children

The Site and our services are intended for businesses and professionals and are not directed at children. We do not knowingly collect personal data from anyone under 18. Under the DPDP Act, processing a child's data requires verifiable parental consent, which we do not seek because the Site is not meant for children.

11. Third-party links

The Site may link to third-party websites and platforms (including our social media). We are not responsible for their content or privacy practices. Review their policies before providing any information.

12. Changes to this policy

We may update this policy from time to time. The "Last updated" date reflects the latest version. Material changes will be reflected on this page.