Privacy Policy

What is collected, and why

Three things, each with a single stated purpose, as India’s Digital Personal Data Protection Act 2023 requires.

• Contact form. Your name, email address, enquiry type, an optional budget and your message. Purpose: to reply to you. Stored until you ask for it to be deleted.
• 1:1 session bookings. Your name, email address, timezone, an optional phone number and your answers to the intake questions. Purpose: to run and confirm the session, and to create the calendar invitation. Payment records are retained for accounting and tax.
• Resources. Your email address, an optional name, what you claimed or bought, and how many times you have downloaded it. Purpose: to send you the download link and keep it working. Records of paid orders are retained for accounting and tax.
• Anti-spam. A one-way salted hash of your IP address, used only to rate-limit form submissions. The IP address itself is never stored, and the hash cannot be reversed into one.

What is not collected

No advertising trackers, no cross-site profiling and no third-party analytics cookies. Page-view statistics are aggregate and carry no personal identifier.

Who else sees your data

Only the services needed to run the site, and only the parts they need:

• Hostinger — hosts the site and its database, which stores the records above
• Cloudinary — stores images, video and documents
• Backblaze — stores downloadable resource files, privately, and the site’s daily database backup
• Resend — sends transactional email
• Razorpay — processes payments. Card details are entered on Razorpay and are never seen by, or stored on, this site.
• Google Calendar — creates the session invitation and Meet link
• Cloudflare — DNS, CDN, the anti-spam check, and visit statistics (Cloudflare Web Analytics: no cookies, no fingerprinting, and never on a private article or a booking link)

Your data is never sold, and never shared for marketing.

Your rights

You may ask for a copy of what is held about you, ask for it to be corrected, or ask for it to be deleted. Send the request through the contact form and it will be actioned within 30 days.

Financial records attached to a completed payment are retained where law requires it, even after a deletion request. Everything else is removed.

Cookies

Reading this site sets no cookies at all.

A single browser storage entry remembers your light or dark theme preference. It is not a cookie, it is never sent to the server, and it contains nothing but the word light, dark or system.

Pages with a form — the contact form, booking and resources — set a strictly necessary security cookie that stops other sites submitting the form in your name. It holds no personal data and expires when you close the browser or after a few hours.

Signing in to the admin sets a session cookie. That applies only to the site owner.

Changes

Material changes will be reflected in the “last updated” date at the top of this page.