Privacy Policy
This Privacy Policy explains how Vatsal Garg ("we", "us", "our") collects, uses, and protects your personal data when you use vatsalgarg.com (the "Website"). We are committed to handling your data responsibly and in accordance with India's Digital Personal Data Protection Act, 2023 ("DPDP Act") and other applicable laws.
1. Information we collect
Information you provide. When you use a form on the Website, you may provide:
- Contact form — your name, email address, organisation (optional), purpose, and message.
- Consultation booking — your name, email address, organisation (optional), selected format, date and time preference, and any context you choose to share.
- Newsletter — your email address.
Information collected automatically. Our hosting and security providers may process limited technical data — such as your IP address, browser type, and request metadata — to deliver the site, prevent abuse, and keep it secure. We do not use advertising or tracking cookies.
Local storage. The Website may store small, non-identifying preferences in your browser to improve your experience. This stays on your device and is not transmitted to us.
2. How we use your information
- To respond to your enquiries and correspond with you.
- To arrange and conduct educational consultations you request.
- To send the newsletter, if and only if you have subscribed (you can opt out at any time).
- To operate, maintain, secure, and improve the Website, including preventing spam and abuse.
- To comply with applicable legal obligations.
3. Legal basis and consent
Under the DPDP Act, we process your personal data on the basis of the consent you provide when you submit a form, or for other legitimate uses permitted by law. You may withdraw your consent at any time by contacting us (see "Your rights" and "Contact" below); withdrawal does not affect processing carried out before withdrawal.
4. Service providers (data processors)
We do not sell your personal data. We share it only with service providers who process it on our behalf to operate the Website:
- Web3Forms — receives form submissions and forwards them to our email.
- Cloudflare Turnstile — provides bot/spam protection for our forms.
- Vercel — hosts the Website and processes basic request data.
- Google Fonts — serves fonts and may receive your IP address when fonts load.
These providers process your data under their own privacy terms. Some may store or process data on servers located outside India.
5. Data retention
We retain personal data only for as long as necessary to fulfil the purpose for which it was collected (for example, to respond to your enquiry or to keep you subscribed to the newsletter), or as required to comply with legal obligations, after which it is deleted or anonymised.
6. Your rights
Subject to applicable law, including the DPDP Act, you have the right to:
- Access the personal data we hold about you.
- Request correction or updating of inaccurate or incomplete data.
- Request erasure of your data.
- Withdraw consent and unsubscribe from the newsletter.
- Raise a grievance regarding our handling of your data.
To exercise any of these rights, contact us using the details below.
7. Security
We take reasonable technical and organisational measures to protect your personal data. However, no method of transmission or storage over the internet is completely secure, and we cannot guarantee absolute security.
8. Children
The Website is intended for users aged 18 and above and is not directed at children. We do not knowingly collect personal data from children.
9. Changes to this policy
We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised "Last updated" date.
10. Grievance and contact
For any questions, requests, or grievances relating to your personal data or this Privacy Policy, please contact us at connect@vatsalgarg.com. We will respond within the timelines required by applicable law.