City-Maps.online (Sole Proprietorship) ("we", "us") operates City Maps (city-maps.online), which builds free websites and growth tools for local businesses. This policy explains what personal data we collect, why, how long we keep it, and the rights you have.
To create and run your website, deliver enquiries/bookings/orders, provide support, process payments, and send service communications. Our lawful basis is your consent and the performance of the service you request. Marketing calls/messages are sent only to contacts for whom consent exists.
We do not sell personal data. We share only with processors needed to run the service (payment gateway Razorpay, communication and hosting providers) under appropriate safeguards.
If you choose to connect your Google account, we request the Google Business Profile permission (https://www.googleapis.com/auth/business.manage) so that you can manage your own Google Business Profile from your City-Maps dashboard - for example update business information, publish posts and photos, and read or reply to your customer reviews. We access only the profiles you control, we never access other users’ data, and we do not sell or transfer this data. Access tokens are stored encrypted at rest and are used solely to perform actions you initiate. You can disconnect Google at any time from the dashboard, which revokes our access.
We keep personal data only as long as needed for the purpose above or as required by law. Leads, call logs and CRM records are reviewed periodically and stale personal data is deleted. You may request earlier deletion at any time.
To exercise any right, email citymapsonline.kd@gmail.com or use our data deletion request page.
We use HTTPS, security headers, rate limiting, access controls and encryption in transit. No method is perfectly secure, but we work to protect your data.
Grievance Officer, City-Maps.online • citymapsonline.kd@gmail.com • WhatsApp 917350785606. We aim to respond within the timelines set by the DPDP Act and IT Rules.
Our services are intended for business use by adults (18+). We do not knowingly collect personal data of children. If you believe a child has provided data, contact our Grievance Officer for deletion.
We may update this policy; the latest version will always be available on this page.