Privacy policy

Version 2026-09-17.1 · In effect from 17 September 2026

This explains what happens to the information you give me. It is written to be read, not to be scrolled past.

Who is responsible for your data

Gaurav Shewale is the data fiduciary (the term India’s DPDP Act uses for whoever decides why and how your data is handled). If you are in the UK or EU, the equivalent term is data controller.

Grievance Officer: Gaurav Shewale
Email: gauravshewale.hd@gmail.com
Phone: +91 95455 31408

What I collect, and why

Only what the enquiry form asks for:

• Your name, email and phone number — so I can reply to you and arrange a call.
• What brought you here, and anything you write in the message box — so the first conversation starts somewhere useful.
• Your IP address and browser — recorded once, alongside your consent, as evidence of when and how you agreed. Not used to track or profile you.
• How you arrived at the site — the referring page and any campaign tags in the link, so I know which channels are worth continuing.

I do not collect birth details, health records or payment details through this website. If you go on to book a session, anything needed for that is collected separately at the time, and you will be told why. There are no advertising trackers and no third-party cookies here.

The legal basis

Under the DPDP Act, processing rests on the consent you give when you tick the box on the form. Under the GDPR, replying to your enquiry rests on your consent and on steps taken at your request before entering a contract (Article 6(1)(a) and 6(1)(b)); marketing emails rest on consent alone, which is why that box is separate and starts unticked.

How long I keep it

Enquiry details are deleted 24 months after you send them. This is automatic — a scheduled job deletes them, whether or not anyone remembers. If you become a client, the records of that work are held separately and governed by the agreement we make at the time.

Where your data is stored

In India. The server, the database, the email service and the website analytics all run in Indian data centres. Your information is not transferred outside India.

If you are contacting me from the UK or EU, this means your data is transferred to India when you submit the form. That transfer is made on the basis of your explicit consent under Article 49(1)(a) of the GDPR, and is disclosed to you here before you send anything.

Who else sees it

Nobody. Your details are not sold, rented, or shared with any third party for their own purposes. The only companies involved are the ones that run the infrastructure — the hosting provider and the email service — and they process data only on my instructions and cannot use it themselves.

Cookies and analytics

This site sets no tracking cookies at all. Visitor numbers are counted with privacy-preserving analytics that identify nobody and store nothing on your device, which is why you have not been shown a cookie banner. The only exception is if you press play on the podcast video: that loads the player from YouTube, and from that point YouTube’s own privacy policy applies. Nothing from YouTube loads until you click.

Your rights

You can, at any time and without giving a reason:

• Ask what I hold about you, and get a copy
• Correct anything that is wrong
• Have it deleted
• Withdraw your consent — as easily as you gave it
• Nominate someone to exercise these rights on your behalf, as the DPDP Act allows

Use the data request form, or email gauravshewale.hd@gmail.com. I will respond within 30 days. Withdrawing consent does not undo anything done while it was valid.

If you are unhappy with how I have handled a request, you can complain to the Data Protection Board of India. If you are in the UK or EU, you can complain to your national supervisory authority.

Children

This service is for adults. The DPDP Act requires verifiable parental consent before a child’s data can be processed, which a web form cannot obtain — so the form declines any date of birth under 18 years old.

If something goes wrong

In the event of a personal data breach, I will notify the Data Protection Board of India and every affected person without delay, and in any case within 72 hours of becoming aware of it, describing what happened and what to do about it.

Changes

When this policy changes materially, the version number at the top changes with it. The version you agreed to is recorded against your consent, so it is always possible to establish exactly what you were shown when you ticked the box.