Who we are
This Privacy Policy applies to the website deepanshutomar.in and all its sub-pages, operated by Deepanshu Tomar (India). This includes the newsletter, the psychological tests at /tests/, books, blog, and consultation pages.
For any privacy-related questions, write to [email protected] with subject "Privacy Request".
Data Fiduciary under DPDPA 2023: Deepanshu Tomar, India. We determine the purpose and means of processing your personal data as described in this policy.
What data we collect and why
We collect only the minimum data required for each specific service:
- Newsletter subscription: your email address, collected when you voluntarily submit the newsletter form. Used solely to send you letters on psychology, books, and related topics — roughly fortnightly. We never use this email for any other purpose.
- Psychological tests (/tests/): first name, email, optional gender, optional age range, and your test responses. Used to calculate and deliver your result. See the Tests Privacy Policy for full detail on test-specific data handling.
- Payment (via Razorpay): payment confirmation ID, amount, and email — only if you purchase a PDF report. Raw card or UPI data is processed directly by Razorpay; we never see it.
- Theme preference: dark or light mode, stored only in your browser's localStorage. Never transmitted to our servers.
We do not collect: your IP address for tracking, device fingerprints, browsing history, or biometric data. There are no analytics scripts, advertising trackers, or social media pixels on this website.
Legal basis for processing (DPDPA 2023 — Section 4 & 6)
- Newsletter: your explicit, freely given consent, recorded at the time of subscription. You may withdraw consent at any time by clicking the unsubscribe link in any email, or by writing to us.
- Test results delivery: your consent, given by checking the consent box before submitting your email at the start of a test.
- Payment records: legal obligation — Indian GST law requires retention of financial records for 7 years.
Data retention
- Newsletter email: retained for as long as you are subscribed. Deleted within 7 days of unsubscribe.
- Test email + name (no purchase): deleted after 30 days.
- Test email + name (with purchase): retained for 6 months post-purchase so we can re-send your report if needed, then deleted.
- Payment records: retained for 7 years as required by Indian GST law.
- Browser localStorage data: retained in your browser until you clear it — entirely under your control.
Third parties
We do not sell your data to any third party. We do not share it with advertisers or data brokers.
Your rights under DPDPA 2023 (Sections 11–14)
As a Data Principal under the Digital Personal Data Protection Act 2023, you have the right to:
- Access — request a summary of personal data we hold about you
- Correction — ask us to correct inaccurate or incomplete data
- Erasure — ask us to delete your data; we will comply within 30 days unless retention is required by law
- Withdraw consent — at any time; withdrawal does not affect the lawfulness of processing before withdrawal
- Nominate — nominate another person to exercise your rights in the event of your death or incapacity
- Grievance redressal — raise a complaint with us first (see below); unresolved complaints may be referred to India's Data Protection Board
To exercise any right, email [email protected] with subject "Privacy Request". We will respond within 72 hours.
Grievance contact (DPDPA 2023 — Section 8(9) & 13)
If you have a complaint about how we handle your personal data, contact us first:
Deepanshu Tomar
Email: [email protected]
Subject line: "Grievance — Privacy"
Response time: within 72 hours
If your grievance is not resolved to your satisfaction, you may refer the matter to the Data Protection Board of India once established under Section 18 of the DPDPA 2023.
Data breach notification (DPDPA 2023 — Section 8(6))
In the event of a personal data breach that is likely to result in risk to your rights, we will notify you at the email address you provided within 72 hours of becoming aware of the breach. We will also intimate the Data Protection Board of India as required by law.
Minors
This website is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you are under 13, please do not submit your personal data. If you are 13–17, we recommend proceeding with parental awareness.
Changes to this policy
If we make material changes, we will update the "Last updated" date at the top of this page. Continued use of the website after that date constitutes acceptance of the revised policy.