Anti-Spam Policy
Our commitment to responsible, consent-based communication.
Our Commitment
Increeks is committed to responsible, transparent, and consent-based digital communication. We believe that your inbox belongs to you. We will never send unsolicited commercial messages, never sell or rent our mailing lists, and always honour your communication preferences promptly.
This Anti-Spam Policy applies to all electronic communications sent by Increeks, our employees, contractors, affiliates, and any third parties acting on our behalf. It applies to email, SMS, push notifications, and any other form of electronic messaging we may use.
Violations of this policy by our staff or agents are treated as disciplinary matters. We expect the same standards from any marketing or communication vendor we engage.
What Is Spam
'Spam' refers to unsolicited bulk electronic messages sent without the recipient's prior consent, typically for commercial or promotional purposes. Spam harms recipients, clogs networks, and undermines trust in digital communication.
Common characteristics of spam include:
- Messages sent without the recipient's express or implied consent.
- Deceptive, misleading, or false subject lines or sender identities.
- Failure to include a working unsubscribe mechanism.
- Continued messaging after an unsubscribe request has been made.
- Use of harvested, purchased, or scraped email lists.
- Disguising the commercial nature of a message.
- Use of forged headers or spoofed sender addresses.
Increeks prohibits all of the above practices absolutely and without exception.
Our Email Practices
How We Obtain Consent
Consent is the foundation of our communication programme. We collect consent in the following ways:
Express (Opt-In) Consent
Express consent is obtained when a person takes a clear, affirmative action to receive communications from us. Examples include:
- Ticking an unchecked checkbox on a sign-up form (we never use pre-ticked boxes).
- Submitting a 'Subscribe' form on our website.
- Downloading gated content (e.g., a case study or whitepaper) where the consent to receive related communications is clearly disclosed.
- Verbally or in writing requesting to be added to our newsletter or communications list at an event.
Implied Consent
In limited circumstances, and only where permitted by applicable law, we may send communications based on implied consent — for example, where you are an existing client and we are communicating about directly relevant services. Implied consent is time-limited and subject to your right to opt out at any time.
Consent Records
We maintain records of how and when consent was obtained for every subscriber, including: the date and time of consent, the mechanism used, and the specific consent language presented. These records are available on request and support compliance with GDPR, CASL, and other applicable laws.
No Pre-Ticked Boxes
In accordance with GDPR Article 7 and CASL requirements, we never use pre-ticked consent checkboxes. Consent must always be an active, affirmative choice.
Opt-Out & Unsubscribe
CAN-SPAM Act Compliance
CASL Compliance (Canada)
Canada's Anti-Spam Legislation (CASL, S.C. 2010, c. 23) is among the world's strictest anti-spam laws. It applies to commercial electronic messages (CEMs) sent to or from Canada. Increeks complies with CASL as follows:
- Express consent required: We obtain express consent before sending CEMs to Canadian recipients, except where an implied consent exemption clearly applies under CASL s. 10.
- Implied consent: Where we rely on implied consent (e.g., existing business relationships), we track the basis and duration of that consent and cease sending when the implied consent period expires (generally 2 years for existing business relationships, 6 months for inquiries).
- Consent records: We maintain records of the basis for consent, including the date, mechanism, and language presented.
- Identification: Every CEM includes our legal name, mailing address, and a valid contact email address.
- Unsubscribe mechanism: Every CEM includes a functional unsubscribe mechanism honoured within 10 business days.
- No installation of software without consent: We do not use computer programs that alter settings, gather personal information, or send messages without explicit consent, in accordance with CASL's anti-malware provisions.
India IT Act Compliance
As an Indian company headquartered in Hyderabad, Increeks Private Limited operates under the following Indian legal framework governing electronic communications:
Information Technology Act, 2000 (and Amendments)
- We comply with the IT Act 2000 and the IT (Amendment) Act 2008, which govern the sending of electronic messages and prohibit the sending of obscene, menacing, or offensive messages.
- We do not use computer resources to communicate information that is knowingly false, offensive, or intended to cause annoyance, inconvenience, or injury to any person.
TRAI Regulations
- Where we send SMS or voice communications to Indian mobile numbers, we comply with the Telecom Regulatory Authority of India (TRAI) Telecom Commercial Communications Customer Preference Regulations, 2018 (TCCCPR), including registration on the Distributed Ledger Technology (DLT) platform, use of approved sender IDs (headers), and registered content templates.
- We respect Do Not Disturb (DND) / National Customer Preference Register (NCPR) preferences and do not send promotional messages to registered DND numbers.
Digital Personal Data Protection Act, 2023 (DPDP Act)
- Personal data used for email marketing (including email addresses) is processed under the consent requirements of the DPDP Act. Consent is free, specific, informed, unconditional, and unambiguous.
- Data principals have the right to withdraw consent for marketing communications at any time, which we facilitate through our unsubscribe mechanism.
GDPR & Email Marketing
For recipients in the European Economic Area (EEA) and the United Kingdom, Increeks processes personal data for email marketing in accordance with the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and the UK GDPR.
- Lawful basis — Consent: We rely on consent (GDPR Article 6(1)(a)) as our lawful basis for sending marketing emails. Consent is obtained via a clear, affirmative opt-in action; we never use pre-ticked boxes.
- Right to withdraw: You may withdraw consent for marketing emails at any time, without detriment, by using the unsubscribe link in any of our emails or by contacting us directly. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
- Consent records: We record the date, time, mechanism, and wording of each consent capture, as required by GDPR Article 7(1).
- Privacy Notice: At the point of consent capture, we provide a clear link to our Privacy Policy, explaining how the email address will be used, for how long it will be retained, and with whom it may be shared.
- Data minimisation: We collect only the minimum personal data necessary for the email communication purpose — typically an email address and, where needed for personalisation, a first name.
- Retention: We retain marketing consent records for the duration of the subscription plus 3 years for compliance evidence purposes.
- ePrivacy / PECR: For recipients in the UK, we also comply with the Privacy and Electronic Communications Regulations (PECR), which require opt-in consent for marketing emails to individuals.
Reporting Spam
Enforcement
Violations of this Anti-Spam Policy — whether by employees, contractors, or third-party vendors acting on Increeks' behalf — are treated as serious disciplinary matters.
- Internal staff: Employees or contractors who send unsolicited commercial messages, use non-compliant email practices, or circumvent our consent mechanisms may face disciplinary action up to and including termination.
- Third-party vendors: Any marketing or communication vendor found to be in violation of this policy will be subject to immediate termination of the engagement and, where legally warranted, will be held financially liable for fines, penalties, or damages arising from their non-compliance.
- Regulatory enforcement: Non-compliance with CAN-SPAM can result in penalties of up to USD $51,744 per email. Non-compliance with CASL can result in penalties of up to CAD $10,000,000 per violation. We take these risks seriously and invest in ongoing compliance training and tooling.