Privacy Policy

Privacy Policy

Goa Prism Digital Media (“GPDM”, “we”, “our” or “us”) respects your privacy and is committed to handling personal data responsibly, transparently and securely. This Privacy Policy explains how we collect, use, store, disclose and protect personal data when you access or interact with GPDM’s websites, publications, digital platforms, social-media properties, newsletters, events, campaigns, business services and other offerings that link to this Policy (collectively, the “Services”).

This Policy is intended to be read together with any specific notice, consent form, subscription form, event form, campaign terms, partner agreement or other communication provided at the point where personal data is collected. Where a specific notice conflicts with this Policy, the specific notice will apply to that particular processing activity to the extent permitted by law.

Important By using the Services or providing personal data to GPDM, you acknowledge that you have read this Privacy Policy. Where consent is required, GPDM will request it through an appropriate notice, checkbox, form, communication or other affirmative action.

Policy at a Glance

Item	Summary
Data Fiduciary	Goa Prism Digital Media, Panaji, Goa, India.
Main contact	[email protected]; +91 89990 85172.
Data we may collect	Contact details, account or form information, business enquiries, submissions, technical and usage data, cookie data, transaction records, preferences and communications.
Why we use it	To provide and improve services, publish or respond to submissions, manage subscriptions and events, process commercial enquiries, deliver communications, measure audiences, serve advertising, maintain security and comply with law.
Sharing	With authorised personnel, service providers, hosting/analytics/advertising partners, payment providers, professional advisers, authorities where required, and business successors subject to appropriate safeguards.
Your choices	You may request access to information about processing, correction, completion, updating, erasure, withdrawal of consent, grievance redressal and nomination, where applicable.
Retention	Only for as long as reasonably necessary for the stated purpose, legal obligations, recordkeeping, dispute resolution, security and legitimate business requirements.

Contents

• 1. Who We Are and Scope
• 2. Personal Data We Collect
• 3. How We Collect Personal Data
• 4. How and Why We Use Personal Data
• 5. Cookies, Analytics and Advertising Technologies
• 6. Editorial Submissions, News Tips and User Content
• 7. When We Share Personal Data
• 8. International Processing and Storage
• 9. Data Retention
• 10. Data Security
• 11. Your Rights and Choices
• 12. Children’s Privacy
• 13. Third-Party Links and Social Media
• 14. Changes to this Policy
• 15. Contact and Grievance Redressal

1. Who We Are and Scope

Goa Prism Digital Media is a media, publishing, digital content, brand communication and audience-engagement company headquartered in Goa, India. GPDM operates or supports multiple editorial, publishing, tourism, hospitality, lifestyle, business, events and digital-media initiatives, including properties and brands that may be identified as Goa Prism, Incredible Goa, Incredible Food & Hospitality, Explore Goa, GPDM Talks and other present or future GPDM initiatives, where those properties link to or expressly adopt this Policy.

For purposes of applicable data-protection law, GPDM generally acts as the “Data Fiduciary” for personal data collected through the Services. In some commercial arrangements, GPDM may process personal data on behalf of a client, partner, event organiser, advertiser or another entity. In those situations, the relevant entity’s privacy notice and contractual arrangements may also apply.

This Policy applies to online and offline interactions with GPDM, including website visits, newsletters, forms, subscriptions, competitions, surveys, events, award nominations, job applications, business and advertising enquiries, listing requests, partner portals, editorial submissions, news tips, photographs, videos and communications with our team.

2. Personal Data We Collect

The personal data we collect depends on how you interact with GPDM and which Service you use. We may collect the following categories:

2.1 Information you provide directly

• Identity and contact data, such as name, email address, telephone number, postal address, city, organisation, designation and social-media handle.
• Account, registration and profile data, such as login credentials, preferences, profile details and verification information where a Service requires an account.
• Business and professional data, such as company name, industry, role, website, business profile, advertising requirements, listing details, billing information, GST details and communication history.
• Editorial and user-submission data, such as news tips, press releases, photographs, videos, comments, feedback, corrections, nominations, testimonials, interview material, contributor biographies and supporting documents.
• Subscription and marketing preferences, such as newsletter choices, campaign consent, preferred topics and opt-out requests.
• Event and award data, such as registration details, attendee information, guest information, nomination material, dietary/accessibility preferences where voluntarily provided, and photographs or recordings created at the event.
• Recruitment data, such as résumé/CV, employment history, education, portfolio, references, compensation expectations and information shared during recruitment.
• Transaction and payment-related data, such as order details, invoices, subscription or event payments and payment status. Payment-card or bank details may be collected and processed directly by a third-party payment provider; GPDM generally does not store complete card details.
• Communications data, including emails, messages, call notes, complaints, support requests and other correspondence.

2.2 Information collected automatically

• Technical data, including Internet Protocol address, device identifiers, browser type, operating system, device type, language, time zone and approximate location derived from IP address.
• Usage data, including pages viewed, links clicked, referring pages, visit dates and times, session duration, search terms, downloads, interactions and error logs.
• Cookie and similar-technology data, including advertising identifiers, analytics identifiers, preference cookies and consent choices.
• Security data, including logs used to detect spam, fraud, malicious activity, abuse, unauthorised access or attempts to disrupt the Services.

2.3 Information from third parties and public sources

We may receive personal data from social-media platforms, analytics and advertising providers, payment providers, event or campaign partners, public directories, business websites, press releases, public records, publicly available professional profiles, contributors, agencies, clients, readers and other lawful sources. Where reasonably required, GPDM will provide an appropriate notice or rely on another lawful basis permitted by applicable law.

3. How We Collect Personal Data

• when you visit, browse, search or interact with a GPDM website or digital property;
• when you register, subscribe, create an account, comment, vote, enter a competition, complete a survey or submit a form;
• when you contact us by email, phone, messaging application, social media or in person;
• when you purchase, advertise, sponsor, list a business, register for an event, nominate a person or organisation, or use a commercial Service;
• when you submit editorial material, a news tip, photograph, video, correction, complaint, review, testimonial or other content;
• through cookies, analytics tools, advertising technologies, server logs and similar technologies;
• from partners, service providers, clients, public sources and lawful third-party sources.

4. How and Why We Use Personal Data

GPDM processes personal data for clear and legitimate purposes. Depending on the context, we may use personal data to:

• provide, operate, maintain, personalise and improve the Services;
• create or administer accounts, subscriptions, registrations, memberships, events, awards, campaigns and partner relationships;
• respond to enquiries, proposals, complaints, correction requests, support needs and business communications;
• review, verify, edit, publish, display, distribute or otherwise manage editorial submissions and user-provided content, subject to applicable editorial standards and permissions;
• process advertising, sponsorship, listing, content, design, promotional, publishing or other commercial requests;
• send service communications, confirmations, invoices, notices, updates and security messages;
• send newsletters, offers, event invitations, promotional communications or audience updates where permitted, and manage your preferences;
• measure audiences, understand reader interests, analyse performance, improve content strategy and optimise user experience;
• display, measure and manage advertising, including personalised or contextual advertising where lawfully permitted;
• detect, prevent and investigate fraud, spam, cyber incidents, policy violations, misuse, illegal activity and threats to GPDM, users or the public;
• protect GPDM’s legal rights, editorial independence, systems, personnel, users and business interests;
• comply with legal obligations, court orders, regulatory requirements, tax and accounting duties, lawful government requests and recordkeeping requirements;
• carry out corporate transactions, audits, due diligence, restructuring, financing, sale or transfer of assets, subject to appropriate safeguards.

4.1 Legal grounds and permitted uses

Where applicable, GPDM processes personal data on the basis of your consent, for certain legitimate uses recognised by applicable law, to perform or take steps related to a contract or requested service, to comply with legal obligations, to protect vital interests, or for other lawful grounds available in the relevant jurisdiction. Where processing is based on consent, you may withdraw consent through the method described in Section 11, without affecting processing already carried out lawfully before withdrawal.

5. Cookies, Analytics and Advertising Technologies

GPDM websites may use cookies, pixels, tags, local storage, software-development kits and similar technologies. These technologies help websites function, remember preferences, understand traffic, improve performance, prevent abuse and support advertising.

5.1 Types of technologies we may use

• Essential technologies required for security, network management, accessibility, account authentication, consent management and core website operation.
• Preference technologies that remember language, location, display choices and other settings.
• Analytics technologies that help GPDM understand visits, readership, navigation, engagement and technical performance.
• Advertising technologies used by GPDM and advertising partners to deliver, cap, measure and report advertisements and, where permitted, to personalise advertising.

Advertising and analytics partners may include services such as Google products, MGID and other providers selected by GPDM from time to time. These third parties may use their own cookies or identifiers and process data under their own privacy notices. The availability of advertising, cookie and opt-out controls may vary by browser, device, partner and jurisdiction.

You can usually control cookies through the consent banner (where provided), browser settings, device settings or partner opt-out tools. Blocking some cookies may reduce functionality, prevent preferences from being remembered, or affect the relevance and measurement of advertising.

6. Editorial Submissions, News Tips and User Content

GPDM is a media organisation. Information submitted for publication may be handled differently from ordinary customer-service data because editorial work can involve public-interest reporting, verification, archiving and publication. When you submit a press release, tip, correction, photograph, video, comment, nomination, profile, interview response, testimonial or other material, you represent that you are authorised to provide it and that GPDM may contact you to verify or discuss it.

Unless a separate written agreement provides otherwise, material submitted for publication may be edited, fact-checked, formatted, published, syndicated, promoted, archived or removed in accordance with GPDM’s editorial judgment, applicable law and platform rules. Information included in published content may remain available in archives, search engines, social-media shares, screenshots, print copies and third-party records even after GPDM updates or removes the original content.

Confidential tips Do not send highly sensitive or confidential material through ordinary web forms or social-media messages. Contact GPDM first and request an appropriate secure communication method. GPDM cannot guarantee source confidentiality merely because information was submitted to us.

7. When We Share Personal Data

GPDM does not sell personal data as a standalone commodity. We may disclose personal data only as reasonably necessary for the purposes described in this Policy, including to:

• GPDM personnel, contributors and authorised contractors who need the information for their work;
• website hosts, cloud providers, email and newsletter providers, analytics providers, advertising networks, consent-management providers, security vendors, customer-support tools, payment providers, printers, distributors, event vendors and other service providers;
• clients, advertisers, sponsors, event partners, nominees, contributors or collaborators where disclosure is necessary for a requested service, campaign, event or project and is appropriately disclosed or authorised;
• professional advisers, including lawyers, accountants, auditors, insurers and consultants;
• law-enforcement bodies, courts, regulators, government authorities or other persons where disclosure is required by law, legal process, public-interest obligation, or necessary to protect rights, safety and security;
• a purchaser, investor, lender, successor or other party involved in a merger, acquisition, restructuring, financing, insolvency, sale of assets or similar corporate transaction, subject to confidentiality and legal safeguards;
• other persons with your direction, consent or at your request.

Service providers are expected to process personal data only for authorised purposes and to apply reasonable security and confidentiality protections. Some third parties, such as independent advertising, analytics, payment or social-media providers, may act as separate data fiduciaries/controllers under their own privacy policies.

8. International Processing and Storage

GPDM is based in India, but some service providers may store or process personal data in other countries. Where personal data is transferred or made accessible outside India, GPDM will take reasonable steps to use lawful transfer arrangements and safeguards required by applicable law, including any country-specific restrictions notified by competent authorities.

9. Data Retention

GPDM retains personal data only for as long as reasonably necessary for the purpose for which it was collected, including to provide services, maintain records, preserve editorial archives, comply with legal, tax, accounting and contractual obligations, resolve disputes, enforce agreements, prevent fraud and maintain security.

Retention periods vary by data type and context. For example, enquiry records may be retained to manage follow-up and business history; invoices and accounting records may be retained for statutory periods; recruitment records may be retained for a reasonable hiring period; consent and opt-out records may be retained to demonstrate compliance; security logs may be retained for incident investigation; and published editorial content may be retained as part of GPDM’s historical archive.

When personal data is no longer required, GPDM will take reasonable steps to delete, anonymise, de-identify or securely archive it, subject to legal and technical limitations and any overriding public-interest, editorial, security or recordkeeping requirement.

10. Data Security

GPDM uses reasonable administrative, technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration, loss, misuse or destruction. Measures may include access controls, authentication, secure hosting, software updates, backups, anti-malware controls, vendor assessment, confidentiality obligations and incident-response procedures.

No website, network, transmission method or storage system is completely secure. You are responsible for protecting your passwords, devices and accounts and for using caution when sending information over the internet. If you believe your interaction with GPDM is no longer secure, contact us promptly using the details in Section 15.

Where required by applicable law, GPDM will assess personal-data breaches and provide notifications to affected individuals and/or competent authorities within the applicable time and manner.

11. Your Rights and Choices

Subject to applicable law, verification of identity, and permitted exceptions, you may have the right to:

• obtain information about the personal data being processed and the processing activities carried out by GPDM;
• request correction, completion or updating of inaccurate or incomplete personal data;
• request erasure of personal data that is no longer necessary or where another lawful ground does not require its retention;
• withdraw consent where processing is based on consent;
• opt out of promotional emails or messages by using an unsubscribe link, replying with an opt-out request or contacting GPDM;
• raise a grievance and receive a response through GPDM’s grievance-redressal channel;
• nominate another individual to exercise applicable rights in the event of death or incapacity, where the law provides such a right;
• exercise any additional right made available under applicable law.

To exercise a privacy right, email [email protected] with the subject line “Privacy Request”. Please state your name, contact details, the relevant GPDM Service, the right you wish to exercise and enough information to locate the relevant data. GPDM may request reasonable proof of identity or authority to protect personal data from unauthorised disclosure or deletion.

GPDM will respond within the period required by applicable law. A request may be limited or refused where permitted by law, including where it would adversely affect another person’s rights, reveal confidential information, interfere with lawful journalistic/editorial activity, compromise security, conflict with legal obligations or require deletion of records that GPDM must retain.

12. Children’s Privacy

GPDM’s general Services are not designed to knowingly collect personal data directly from children for behavioural monitoring or targeted advertising. Where GPDM knowingly processes personal data of a child, GPDM will seek verifiable consent from a parent or lawful guardian and apply additional safeguards where required by applicable law, unless a lawful exemption applies.

Parents or guardians who believe a child has provided personal data to GPDM without appropriate consent should contact [email protected]. GPDM will review the request and take appropriate action consistent with law, the child’s interests and any relevant editorial or public-interest considerations.

13. Third-Party Links and Social Media

The Services may contain links, embeds, widgets, advertisements or integrations provided by third-party websites, applications, video platforms, social-media networks, payment providers or other services. GPDM does not control those third parties and is not responsible for their privacy, security or content practices. Review the relevant third party’s privacy notice before providing personal data or using its service.

When you interact with GPDM through a social-media platform, both GPDM and the platform may receive information about the interaction. Your use of the platform is governed by the platform’s own terms and privacy policy.

14. Changes to this Policy

GPDM may update this Privacy Policy to reflect changes in law, regulation, technology, services, business practices or data-processing activities. The revised Policy will be posted on the relevant GPDM website with an updated effective date. Where required, GPDM will provide additional notice or request renewed consent.

We encourage you to review this Policy periodically. Continued use of the Services after an updated Policy becomes effective will be subject to the updated Policy, except where applicable law requires a different form of acceptance.

15. Contact and Grievance Redressal

Questions, privacy requests, complaints or concerns about this Policy or GPDM’s handling of personal data may be sent to:

Contact	Privacy & Grievance Officer
Organisation	Goa Prism Digital Media (GPDM)
Email	[email protected]
Phone	+91 89990 85172
Address	2nd Floor, Udyog Bhavan, Panaji, Goa 403001, India

Please include enough information for GPDM to understand and address your concern. GPDM may contact you for clarification or identity verification. If you are not satisfied with GPDM’s response, you may pursue the remedies available to you under applicable law, including approaching the competent data-protection authority or adjudicatory body once and to the extent its jurisdiction applies.

Version control Policy version 1.0 • Effective 5 August 2026 • Approved for publication by Goa Prism Digital Media.