Privacy Policy

This Privacy Policy describes how personal information may be collected, used, shared, stored, and managed through the Somesh Aditya website and associated website features. The published policy must accurately match the actual technology, third-party services, and forms in use.

Website operator / data fiduciary: [CONFIRM LEGAL NAME]. Contact for privacy requests and complaints: [CONFIRM EMAIL AND OTHER REQUIRED CONTACT DETAILS].

Depending on the features a visitor uses, information may include a name, email address, phone number, enquiry text, consultation details, messages, transaction references, and other details voluntarily supplied. Do not publish this as an exhaustive list until all live forms have been reviewed.

Technical information, such as browser or device details, IP address, approximate location inferred from network information, pages visited, and cookie or analytics identifiers, may be processed if such tools are implemented. Identify the actual tools and data categories before publication.

Information may be used to answer enquiries, deliver requested services, coordinate consultations, process and confirm bookings, provide support, improve website functionality, manage security, comply with legal duties, and communicate where permitted.

Marketing communications, if offered, require the appropriate lawful basis and consent where applicable. Making an enquiry or booking should not automatically be presented as consent to unrelated marketing.

Process personal data only on a lawful basis recognised under applicable Indian data-protection law, including valid consent where required or another applicable permitted basis. Give a clear notice describing the personal data and purposes at the relevant collection point.

Where consent is required, explain how it can be withdrawn. Withdrawing consent may limit services that depend on the affected processing, subject to applicable law.

Website hosting providers, analytics providers, scheduling services, payment processors, customer-support systems, messaging services, and other contractors may handle information where genuinely used for website operations. Identify the actual providers and relevant purposes before publication.

Information should not be described as never shared if vendors or service providers process it. The operator should put appropriate contractual and technical safeguards in place where required.

If paid sessions are offered, booking and payment information may be handled by third-party payment or scheduling providers. Confirm whether the website itself receives or stores any payment-card details and accurately describe the actual arrangement.

Do not claim that all payment information is stored securely or never stored without verifying the implementation.

The website may use necessary cookies and, if implemented, analytics or advertising technologies. Publish accurate information about their purposes and categories and offer appropriate preferences or consent controls when required by law.

Do not state that tracking is absent, anonymised, or disabled without a site audit.

Personal information should be retained only for as long as needed for the disclosed purposes and applicable legal obligations. The operator must confirm actual retention periods or retention criteria, deletion workflows, and backup practices before publication.

Reasonable safeguards should be maintained to protect information, but no website can promise absolute security. Do not claim audits, certifications, encryption practices, or protections that have not been verified.

Individuals may have rights under applicable law relating to information about processing, access to a summary of personal data, correction, completion, updating, erasure, withdrawal of consent, grievance redressal, and nomination, as applicable when the relevant provisions take effect.

Provide a functioning contact channel and explain the relevant verification and request-handling procedure. Rights may be subject to applicable exceptions and legal requirements.

Review whether the website is intended for children or processes information of children. Implement appropriate measures and consent arrangements if legally required. Do not imply the site is child-directed unless that is the intended service.

Links to other sites are subject to their own policies. If vendors handle personal data outside India, review the actual transfer arrangements and any applicable legal restrictions before making a public statement.

The Privacy Policy may be updated when practices, services, or legal requirements change. Show the actual effective and updated dates and give appropriate notice of material changes.

Privacy contact: [CONFIRM AND INSERT]. Effective date: [CONFIRM].

Required before publication: confirm operator identity, privacy contact, form fields, analytics/cookies, third-party service providers, retention and deletion practices, rights workflow, payment handling, and dates.