Your privacy matters to us. This policy explains what personal data Sunday Labs collects, why we collect it, and the choices you have. In short: we collect only what we need, we never sell it, and we never use your data to train general-purpose AI models.
Who we are
Sunday Labs is a brand of Magic Blooms Media Private Limited, a company incorporated in India (“Sunday Labs”, “we”, “us” or “our”). We provide AI, data and digital transformation consulting services through sundaylabs.io (the “Site”).
This policy applies only to the Site and to our consulting services. Other products and websites operated by Magic Blooms Media Private Limited are covered by their own privacy policies.
Information we collect
Information you give us
- Contact and enquiry details such as your name, work email, company, role and anything you write in a message or form.
- Business information you share with us while we scope or deliver an engagement.
- Recruitment information if you apply to work with us, such as your CV and professional history.
Information collected automatically
- Technical data such as IP address, browser type, device information, pages visited and referring URLs.
- Cookies and similar technologies as described in our Cookie Policy.
Client data processed during engagements
When we work with a client’s systems or datasets, we process that data only on the client’s documented instructions and under a written agreement. In that role we act as a data processor for the client, and the client’s own privacy notice governs that data.
How we use your information
- To respond to enquiries and provide proposals and quotes.
- To deliver, manage and improve our consulting services.
- To send service communications and, where you have agreed, occasional updates about our work. You can unsubscribe at any time.
- To operate, secure and improve the Site, including analysing aggregated usage.
- To assess job applications.
- To comply with legal obligations and to establish, exercise or defend legal claims.
We do not sell your personal data, and we do not use client data to train general-purpose AI models.
Legal basis for processing
Depending on where you are, we rely on one or more of the following: your consent; the performance of a contract with you or steps taken at your request before entering into one; compliance with a legal obligation; and our legitimate interests in running and growing a consulting business, where those interests are not overridden by your rights. For individuals in India, we process digital personal data in accordance with the Digital Personal Data Protection Act, 2023 and applicable rules.
Sharing your information
We share personal data only where necessary, with:
- Service providers who host our infrastructure, provide email, analytics, CRM or productivity tools, under contracts that require them to protect it.
- AI and cloud providers used to deliver a specific engagement, only with the client’s approval and under appropriate data-processing terms.
- Group companies and affiliates, where needed to provide our services.
- Professional advisers and authorities where required by law or to protect our rights.
- A successor entity in the event of a merger, acquisition or sale of assets, subject to this policy.
International transfers
Our service providers may process data outside India. Where we transfer personal data internationally we take reasonable steps, including contractual safeguards, to ensure it receives an adequate level of protection and that the transfer is permitted under applicable law.
Data retention
We keep personal data only as long as needed for the purposes described above, including to meet legal, accounting and reporting requirements. Enquiry data is generally kept for up to 24 months after our last interaction unless a relationship continues. Client engagement data is retained or deleted in line with the relevant contract.
Security
We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls based on least privilege, multi-factor authentication and regular review of our vendors. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
Your rights
Subject to applicable law, you may have the right to:
- access the personal data we hold about you and obtain a summary of how it is processed;
- correct, complete or update inaccurate data;
- request erasure of your data;
- withdraw consent at any time, without affecting processing that took place before withdrawal;
- object to or restrict certain processing, and request data portability where applicable;
- nominate another person to exercise your rights in the event of death or incapacity; and
- raise a grievance with us and, if unresolved, with the Data Protection Board of India or your local supervisory authority.
To exercise any of these rights, email privacy@sundaylabs.io. We may need to verify your identity before responding.
Children
The Site and our services are intended for businesses and are not directed at anyone under 18. We do not knowingly collect personal data from children.
Third-party links
The Site may link to other websites. We are not responsible for the privacy practices of other sites and encourage you to read their policies.
Changes to this policy
We may update this policy from time to time. The “Last updated” date above shows when it was last revised. Material changes will be highlighted on this page.
Grievance officer and contact
If you have questions or complaints about this policy or our handling of your data, contact our Grievance Officer:
Email: privacy@sundaylabs.io
Magic Blooms Media Private Limited (operating as Sunday Labs)
Gurugram, Haryana, IndiaWe aim to acknowledge grievances within 48 hours and resolve them within 30 days.