Information we collect

We collect personal information in three broad categories.

A. Information you provide to us

• Identity and contact data (name, business email, phone number, job title, employer, country)
• Account and login data when you register on the site
• Order, billing and invoice data when you purchase a report or engage us for custom research
• Free-text content you submit through enquiry, sample-request, customisation, "speak with an analyst" or careers forms
• Any other information you voluntarily share with our analysts during interviews, calls, or correspondence

B. Information we collect automatically

• Device and browser data (IP address, browser type, operating system, device identifiers)
• Usage data (pages visited, time on page, referring URL, search terms, downloaded files)
• Cookies and similar tracking technologies (see Section 05)

C. Information from third parties

• Publicly available business information (LinkedIn, company websites, regulatory filings)
• Information from our payment processors confirming transaction status
• Information from analytics, advertising and CRM partners (e.g., Google Analytics, HubSpot, LinkedIn Insight)

How we use information

We use the personal information we collect for the following purposes:

• To deliver reports and services you have purchased, including issuing licences and access credentials
• To process payments and issue invoices, tax documents and receipts
• To respond to sample, customisation, pricing and consulting enquiries
• To send service communications (order confirmations, report updates, analyst calls)
• To send marketing communications about reports, insights and events, where permitted by law and subject to your right to opt out at any time
• To improve our website, content and services through analytics
• To prevent fraud, abuse, unauthorised access and to protect MMA's legal interests
• To comply with legal, regulatory, tax and accounting obligations

Legal bases for processing

Where GDPR or equivalent legislation applies, we rely on the following legal bases:

Cookies & tracking

We use cookies and similar technologies to keep the site working, remember your preferences, measure traffic, and run targeted marketing. The categories are:

• Strictly necessary cookies. Required to operate the site, log in, and complete a purchase. These cookies cannot be disabled.
• Functional cookies. Remember your preferences such as language, country, and currency.
• Analytics cookies. Measure how visitors use the site (Google Analytics, Hotjar, or equivalent).
• Marketing cookies. Used by us and our advertising partners (Google Ads, LinkedIn Insight, Meta Pixel) to measure and target campaigns.

You can manage non-essential cookies through our cookie banner or your browser settings. Withdrawing consent will not affect the lawfulness of processing carried out before withdrawal.

Sharing & disclosure

We do not sell personal information. We share personal information only in the following circumstances:

• Service providers acting on our instructions. Payment processors (Razorpay, Stripe, PayPal), email and CRM platforms (HubSpot, Mailchimp), cloud hosting (AWS, Google Cloud), analytics (Google Analytics), and customer support tools.
• Professional advisors. Lawyers, auditors, and accountants where required for legitimate business purposes.
• Corporate transactions. In the event of a merger, acquisition, financing, or restructuring, subject to confidentiality obligations.
• Legal obligations. When required by law, court order, regulator request, or to protect MMA's rights, property, safety, or those of our clients, users, or the public.

Third-party services

Our website may contain links to third-party websites, plug-ins and applications (LinkedIn, YouTube, Twitter/X, payment gateways, embedded videos). Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control those third parties and are not responsible for their privacy practices. We recommend you read the privacy policy of every website you visit.

International transfers

Because MMA serves clients globally, personal information may be transferred to and processed in countries other than the country in which you reside, including India, the United States, the United Kingdom, and the European Economic Area. These countries may have data protection laws that differ from those of your country.

Where required by GDPR, UK GDPR or the DPDP Act, we put in place appropriate safeguards for international transfers, including Standard Contractual Clauses, adequacy decisions, or other legally recognised mechanisms.

Data retention

We retain personal information for as long as is necessary to fulfil the purposes for which it was collected, including for legal, accounting, tax, audit or reporting requirements. Specifically:

• Account and order data. Retained for the duration of the client relationship plus seven (7) years for tax and audit purposes.
• Marketing data. Retained until you withdraw consent or unsubscribe, plus a short period to process the request.
• Website analytics. Retained for up to 26 months in aggregated, pseudonymised form.
• Enquiry and free-text submissions. Retained for up to 24 months unless an active client relationship is in place.

Your rights

Depending on the jurisdiction you are in, you have the following rights with respect to your personal information:

• Right of access. Request a copy of the personal information we hold about you.
• Right of correction. Request that we correct inaccurate or incomplete information.
• Right to erasure. Request deletion of your personal information ("right to be forgotten").
• Right to restrict processing. Request that we stop or limit how we use your information.
• Right to data portability. Request that we transfer your information to another controller in a structured, commonly used format.
• Right to object. Object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent. Withdraw any consent you have given us at any time.
• Right to lodge a complaint. With the Data Protection Board of India (under the DPDP Act), your national supervisory authority in the EU/UK, or another competent regulator.

To exercise any of these rights, please email Bilal@marketmindsadvisory.com. We will respond within 30 days, or the period required by applicable law.

Security

We take the security of personal information seriously and apply industry-standard technical and organisational measures including encryption in transit (TLS 1.2+), encryption at rest for sensitive data, role-based access controls, periodic security reviews, vendor due diligence, and employee training. However, no system is ever 100% secure. If we become aware of a personal data breach affecting your information, we will notify you and the relevant authorities as required by applicable law.

Children's privacy

MMA's services are intended for business and professional users and are not directed to children under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal information from a child, we will delete it promptly.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements or business operations. We will post the updated version on this page and update the "Effective" date at the top. For material changes, we will provide additional notice (such as an email or a banner on the site).