1. Who We Are

This Privacy Policy is published by Tantra Vedha ("we", "us", "our"), the Data Fiduciary under the Digital Personal Data Protection Act, 2023 ("DPDP Act"), for visitors and users of this website ("Platform"). For any privacy query, contact us at contact@thetantraveda.com.

2. Information We Collect

We only collect personal data that you knowingly and voluntarily provide, or that is generated by your use of the site. If you submit an inquiry through our contact form, we collect your name, email address, phone number and the content of your message. If you choose to enable browser push notifications, we also collect the subscription endpoint and encryption keys your browser generates for that purpose. And if you accept cookies in the consent banner, we collect anonymized usage statistics through Google Analytics; Cloudflare Web Analytics runs separately, is cookieless, and is always on. Our Cookie Policy has the details on both.

We do not require account creation, do not process payments, and do not run third-party advertising trackers.

3. Purpose of Processing

We process your personal data only for specified, lawful purposes: responding to your inquiries, sending transactional email notifications via our email service provider, sending push notifications you subscribed to, and understanding aggregate site usage. We do not use your data for any purpose incompatible with these.

4. Consent & Withdrawal

By submitting the contact form or accepting the cookie banner, you consent to processing for the purposes above. You may withdraw consent at any time by emailing contact@thetantraveda.com, or by declining/clearing cookies in your browser. Withdrawal does not affect processing already carried out lawfully before withdrawal.

5. Data Storage & Security

All submitted data is stored on Cloudflare's infrastructure, access-restricted to authorized administrators only. We apply reasonable technical and organizational security safeguards against unauthorized access, alteration, or loss, as required under Section 8(5) of the DPDP Act.

6. Data Retention

Contact form submissions are retained until you request deletion or until they are no longer necessary for the purpose collected. Push subscriptions are retained until you unsubscribe. Analytics data is retained per Google Analytics's and Cloudflare's standard retention windows.

7. Third-Party Sharing

Inbound inquiry notifications are routed via Zoho ZeptoMail for transactional email delivery. Analytics data is processed by Google Analytics and Cloudflare per their respective privacy policies. We do not sell, rent, or lease your personal data to any third party.

8. International Data Transfers

Some of our service providers (Google Analytics and Cloudflare) may process data on servers located outside India. The DPDP Act permits such transfers by default unless the Government of India specifically restricts a country or territory; as of this policy's last update, no such restriction has been notified. We only work with providers that apply industry-standard safeguards to data they process on our behalf.

9. Your Rights Under the DPDP Act

As a Data Principal, you may ask us for a summary of the personal data we hold about you, ask us to correct it if it's inaccurate or incomplete, or ask us to erase it once it is no longer needed for the purpose it was collected. You may also nominate another individual to exercise these rights on your behalf in the event of your death or incapacity. If you're unhappy with how we've handled any of these requests, our Grievance Redressal page explains how to escalate it.

To exercise any of these rights, email contact@thetantraveda.com.

10. Children's Data

This Platform is not directed at individuals under 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us data, contact us and we will delete it.

11. Grievance Officer

Our Grievance Officer is Tantra Vedha, reachable at contact@thetantraveda.com. For the full complaint process and response timelines, see our Grievance Redressal Policy.

12. Data Protection Officer

Our Data Protection Officer is Tantra Vedha, reachable at contact@thetantraveda.com.

13. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the Platform after changes are posted constitutes acceptance of the revised policy.

14. Contact

Questions about this policy can be sent to contact@thetantraveda.com.