Privacy Policy & Statutory Data Protection Notice
Effective: January 1, 2026 • Fully Updated for DPDP Act 2026 • Data Fiduciary: Design Quixo India
Zero Data Selling
We strictly never sell, rent, monetize, or trade your personal numbers, email, portfolio, or design assets to third-party brokers.
256-Bit SSL Encryption
All brief details, contact numbers, designer credentials, and creative file transfers are encrypted in transit and securely hosted.
Full DPDP 2026 Rights
Under DPDP Act 2023/2026, both Clients and Designers retain the complete right to access, correct, or request permanent deletion of their data.
Design Quixo India acts as a Data Fiduciary under the Digital Personal Data Protection Act, 2023 and the DPDP Rules 2025/2026. Prior to or at the time of collecting personal data, we provide this comprehensive, itemized notice detailing the exact categories of personal data processed, the specified purpose for which each item is processed, the manner in which you may exercise your Data Principal rights, and how you may lodge a complaint with our Grievance Officer or the Data Protection Board of India.
1 Introduction & Statutory Scope (DPDP Act 2023 & Rules 2025/2026)
Design Quixo India ("Company", "we", "our", or "us") is dedicated to safeguarding the privacy, confidentiality, and integrity of the digital personal data entrusted to us by our clients, website visitors, and creative freelance partners.
This Privacy Policy sets out how we collect, store, process, transfer, and protect your Personal Information in strict adherence to:
- Digital Personal Data Protection Act, 2023 (DPDP Act) and the Digital Personal Data Protection Rules, 2025 / 2026.
- Section 43A and Section 79 of the Information Technology Act, 2000.
- The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI Rules).
- Global privacy standards including the EU General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA/CPRA) for international interactions.
2 Categories of Data Principals & Personal Data Collected
In accordance with Section 5 of the DPDP Act, we collect only the minimum personal data strictly necessary to deliver high-speed manual graphic design services. We categorize data into two distinct Data Principal streams:
Category A: Client Data Principals (Customers Ordering Designs)
- Contact & Identifiers: Name, WhatsApp Number, Calling Phone Number, and Email Address.
- Project Brief & Creative Assets: Text copy, brand guidelines, reference images, high-resolution product photos, color palettes, and vector logos provided for design generation.
- Transaction & Billing Data: Payment transaction reference numbers, payment mode (UPI, card, net banking), billing addresses, and GSTIN (where GST invoicing is requested). Note: Design Quixo does NOT store credit/debit card numbers or UPI PINs. All payments are securely handled by RBI-regulated payment aggregators.
Category B: Designer / Creator Data Principals (Freelance Graphic Designers)
- Full Legal Identity: Real full legal name and optional profile photo/avatar.
- Direct Calling & WhatsApp Phone Number (+91 Mobile): For urgent brief allocation, client design requests, and admin support calls.
- Verified Official Email Address: Verified via real-time 6-digit email OTP for secure login, password recovery, and tax/payout statements.
- Professional Portfolio & Skills: Portfolio URLs (Behance, Dribbble, Drive), work samples, and design software proficiency tags (Photoshop, Illustrator, Figma, CorelDraw).
- Digital E-Signature: Drawn or script digital signature provided during onboarding, collected strictly and exclusively for stamping and legally executing the Creator Code of Conduct & Payout Agreement PDF. Never reused or shared for any other purpose.
- Zero Bank or Financial Data Stored on Platform: Design Quixo does NOT collect or store bank account numbers, debit cards, or UPI PINs on its website servers. All 60% creator earnings settlements are coordinated directly and transparently via verified official WhatsApp.
- Security & Session Logs: Login timestamps, IP address, and browser session telemetry for fraud prevention and account protection.
Designer / Creator Data Protection & Consent Policy (DPDP 2026)
Under the Digital Personal Data Protection Act, 2023 & Rules 2025/2026, independent Creators and Graphic Designers applying to join the Design Quixo network are entitled to complete transparency regarding what data is stored, why it is stored, and their rights:
Full legal name, phone/WhatsApp number, verified email address, portfolio links, tool skill tags, and digital signature for agreement stamping. We do NOT store bank or UPI details on this platform.
To verify your craftsmanship, route appropriate client design briefs to your workstation, enable rapid phone/WhatsApp coordination, execute your creator agreement, and maintain statutory audit records.
Only authorized Design Quixo platform dispatch coordinators. Your personal contact details and digital signature are strictly confidential and NEVER sold or shared with third-party advertisers.
You may withdraw your consent or request complete erasure of your designer profile and personal data at any time upon clearing pending jobs and earnings.
Consent Protocol: During designer onboarding at Designer Registration, every applicant must explicitly review the Personal Data Disclosure notice and provide free, specific, informed, and unconditional consent via an unbundled affirmative checkbox before their application can be submitted.
4 Lawful Basis & Purposes of Data Processing (Section 6 DPDP Act)
Design Quixo processes personal data only where there is a clear lawful basis under the DPDP Act 2023/2026:
- Express & Unambiguous Consent: Collected through explicit affirmative action during client job requests and designer application onboarding.
- Contractual Performance: Processing required to allocate orders, deliver high-speed design proofs in 30-60 minutes, and transfer 60% payments to creators.
- Official WhatsApp Notifications: Transmitting order confirmations, milestone updates, revision previews, and delivery links exclusively via our verified official WhatsApp Business desk (+91 86024 20897).
- Statutory Compliance: Maintaining tax invoices, GST audit trails, and financial records as mandated by Indian law.
- Platform Security & Anti-Fraud: Protecting creators and clients against identity theft, platform circumvention, cyber attacks, and unauthorized off-platform solicitation.
5 Strict "No-Sale" Guarantee for Personal Data
Our Unconditional Privacy Guarantee:
Design Quixo will NEVER sell, rent, monetize, barter, trade, or disclose your personal contact details, WhatsApp numbers, email addresses, designer portfolio drafts, or client creative briefs to third-party advertisers, data aggregators, or marketing brokers. Your data is used exclusively to deliver your design projects.
6 Data Processors & Security Safeguards
We disclose your information only to trusted technical processors bound by strict statutory non-disclosure and data processing agreements:
- Cloud Infrastructure Providers: Highly secure database and hosting providers (Supabase, Firebase, Cloudflare, Google Cloud Platform) enforcing enterprise-grade 256-bit encryption.
- Communication Infrastructure: Official WhatsApp Business API / Meta infrastructure for transmitting order alerts, proof previews, and deliverable links.
- Authorized Payment Gateways: PCI-DSS certified, RBI-approved Indian payment aggregators for digital payments and earnings payouts.
- Statutory Authorities: Disclosed only if strictly required by a court order, lawful warrant, or statutory investigation under Indian jurisprudence.
Your Statutory Rights Under the DPDP Act 2023 & Rules 2025/2026
As a Data Principal (whether a client ordering designs or a creator registered on our platform), you enjoy the following statutory rights under Chapter III of the DPDP Act:
1. Right to Access (Section 11)
You may request a summary of the personal data being processed about you, categories of third parties with whom data has been shared, and any other processing information.
2. Right to Correction (Section 12)
You have the right to request correction, updating, or completion of any inaccurate, misleading, or outdated personal data held by us.
3. Right to Erasure (Section 12)
You may request the permanent deletion of your personal data when it is no longer necessary for the purpose for which it was collected, subject only to statutory tax retention mandates.
4. Right to Nominate (Section 14)
You have the statutory right to nominate another individual who shall exercise your data rights in the event of death or incapacity.
5. Right to Withdraw Consent
You may withdraw your consent at any time as easily as giving consent. Upon withdrawal, we cease processing your personal data unless required by statutory law.
6. Right to Grievance Redressal (Section 13)
You have the right to lodge a formal complaint with our designated Grievance Officer, and escalate unresolved complaints to the Data Protection Board of India.
8 Children's Privacy Protection (Section 9 DPDP Act)
Design Quixo adheres strictly to Section 9 of the DPDP Act 2023/2026:
- We do not knowingly collect personal data from or onboard individuals under eighteen (18) years of age without verifiable parental consent.
- We do not undertake tracking, behavioral monitoring, or targeted advertising directed at children or minors.
- If we learn that personal data of a child has been collected without verified parental authorization, we take immediate steps to permanently delete such information from our records.
9 Data Retention & Deletion Schedule
We retain your design files and transaction details for as long as your account remains active or as needed to provide you with re-download access to previous deliverables. Billing records and GST invoices are preserved for a period of up to 7 years in compliance with Section 36 of the Central Goods and Services Tax Act, 2017.
Upon your formal written request to our Compliance Support Desk, all identifiable marketing and personal records not required for statutory compliance will be permanently purged within thirty (30) calendar days.
Cookies & Tracking Technologies Policy
A cookie is a small alphanumeric text file placed on your device by your web browser when you visit Design Quixo. Cookies allow our platform to recognize your browser, maintain active sessions, remember your design draft inputs, and ensure smooth, responsive website performance.
1. Strictly Necessary / Essential Cookies (Always Active)
These cookies and browser local storage tokens are essential for the operation of Design Quixo. They enable secure authentication, maintain your design order draft while filling forms, prevent CSRF attacks, and verify legitimate browser sessions. Without these cookies, our core services cannot function.
2. Functional & Preference Cookies
These cookies remember your preferences—such as your selected city, recent service category lookups, language choices, and cookie consent status—so you don't have to re-enter them on subsequent visits.
3. Performance & Diagnostic Telemetry
We collect anonymous, aggregated technical metrics regarding page loading speeds, screen responsiveness, and error logs to continually optimize platform speed and fix mobile layout issues.
Statutory Grievance Redressal Officer & Data Protection Board
In accordance with Rule 5(9) of the SPDI Rules and the Digital Personal Data Protection Act, 2023 & Rules 2025/2026, the details of our designated Grievance Redressal Officer are provided below:
Designated Officer
Grievance & Data Protection Officer
Data Fiduciary Entity
Design Quixo India
Official Email Desk
Official WhatsApp Desk
+91 86024 20897
Registered Operations Hub
Design Quixo Operations Hub, Indore, Madhya Pradesh - 452001, India
Statutory SLA: Grievance complaints are acknowledged within twenty-four (24) to forty-eight (48) hours of receipt and definitively resolved within seven (7) to fifteen (15) working days.
Statutory Right of Escalation to the Data Protection Board of India (DPBI): If you are not satisfied with the resolution provided by our Grievance Officer, or if no response is received within the statutory period, you have the legal right under Section 13 of the DPDP Act to file a complaint before the Data Protection Board of India.
12 Modifications to this Privacy Policy
We may revise this Privacy Policy periodically to reflect technological updates, changes to platform features, or new guidelines notified by the Data Protection Board of India. Any revisions will be published on this page with an updated "Last Revised" date. Continued use of Design Quixo after revisions signifies your acceptance of the modified policy.
Have a Privacy Question or Data Request?
Contact our compliance desk on WhatsApp or email us anytime. We are happy to assist with data access, corrections, erasure requests, or statutory inquiries under DPDP Act 2026.
