Privacy & DPDP Act

Privacy Notice

How this website handles personal data, prepared in line with the Digital Personal Data Protection Act, 2023 (DPDP Act) and the rules made under it.

In short: this website does not ask you to register, does not use advertising or analytics trackers, and does not sell or share personal data. It is a non-commercial, not-for-profit community initiative.

1. Who is responsible

This website is a personal, non-commercial initiative of Vipin Nair, Ahmedabad, Gujarat, India. For the limited personal data described below, Vipin Nair acts as the Data Fiduciary within the meaning of Section 2(i) of the DPDP Act. Contact: audit.vipin@gmail.com.

2. What personal data is processed, and why

SituationDataPurposeRetention
Browsing the websiteNo personal data is collected by the author. The hosting and security provider (Cloudflare, with a mirror on GitHub Pages) and the font provider (Google Fonts) may receive technical data such as your IP address and browser details when serving files.Delivering web pages and fonts securelyAs set out in the providers' own privacy statements
Preferences saved in your browserYour light or dark theme choice and your progress on the penalty-avoidance checklistRemembering your choices on your own deviceStored only in your browser's local storage; never sent to the author. Clear it at any time through your browser settings
Contacting the author by emailYour name, email address and the contents of your messageResponding to your queryOnly as long as needed to respond, and then deleted unless you ask otherwise
Future contributions or volunteer registration (not active today)Only the minimum details needed, for example name, contact details and transaction referenceAcknowledging contributions and coordinating volunteersA specific notice and consent request will be shown before any such data is collected

3. Consent and lawful use

Personal data is processed only for the purposes stated above. Where you send an email, you provide the data voluntarily for the purpose of receiving a reply, which is a legitimate use under Section 7(a) of the DPDP Act. Before any future collection of personal data through a form or payment page, a clear notice under Section 5 will be provided and your consent under Section 6 will be sought. You may withdraw consent at any time, as easily as you gave it.

4. What we do not do

  • No sale, rental or trading of personal data.
  • No advertising, profiling or behavioural tracking.
  • No analytics cookies or third-party marketing pixels.
  • No automated decision-making about you.

5. Children's data

This website is meant for general readers and students. The author does not knowingly collect personal data of children (persons below 18 years). If a child wishes to contact the author, verifiable consent of a parent or lawful guardian is required under Section 9 of the DPDP Act. Please write to the contact address if you believe a child's data has been shared, so that it can be deleted.

6. Your rights as a Data Principal

Right under the DPDP ActWhat it means for you
Right to access information (Section 11)Ask what personal data about you is held and how it is being used.
Right to correction and erasure (Section 12)Ask for inaccurate data to be corrected, incomplete data to be completed, and data to be erased when it is no longer needed.
Right of grievance redressal (Section 13)Raise a grievance and receive a response within a reasonable time.
Right to nominate (Section 14)Nominate another person to exercise your rights in the event of death or incapacity.

To exercise any right, write to audit.vipin@gmail.com with the subject "DPDP request". You will receive an acknowledgement and a response within a reasonable time. Your duties as a Data Principal under Section 15 include not filing false or frivolous complaints and providing accurate information.

7. Grievance redressal

Grievances relating to personal data may be sent to the contact address above. If you are not satisfied with the response, you may approach the Data Protection Board of India constituted under Section 18 of the DPDP Act, after exhausting this grievance mechanism as required by Section 13(3).

8. Security

The website is a static site served over HTTPS. Emails are handled through a reputable email provider with account security enabled. Reasonable security safeguards are maintained as required by Section 8(5) of the DPDP Act, proportionate to the very limited data involved.

9. Third-party services

The site at miyeeindia.in is served and protected by Cloudflare, with a mirror on GitHub Pages, and fonts are loaded from Google Fonts. Links to official portals such as mca.gov.in, sebi.gov.in, gst.gov.in, incometax.gov.in and epfindia.gov.in lead to websites with their own privacy policies.

10. Changes to this notice

This notice will be updated if the way personal data is handled changes, for example when contribution or volunteer forms are introduced, and as the Digital Personal Data Protection Rules, 2025 take effect in phases.

References: Digital Personal Data Protection Act, 2023 (Sections 2, 5, 6, 7, 8, 9, 11 to 15 and 18); Digital Personal Data Protection Rules, 2025 notified by the Ministry of Electronics and Information Technology (meity.gov.in); Information Technology Act, 2000.

See also the Mission and Disclaimer page. Last updated: November 2026.