Notice · DPDP Act, 2023

Privacy notice

What information is collected, why, where it goes, and how to ask for it to be corrected or deleted.

Ref · PRV-01Last updated ·

Please don’t send PAN, Aadhaar, bank details or other documents through the website contact form. If you decide to go ahead, share documents on WhatsApp or in person.

Who is responsible for your data

This website is run by Avinash Thakur, trading as GrowthSense (“GrowthSense”, “I”, “me”). For the purposes of the Digital Personal Data Protection Act, 2023 (DPDP Act), Avinash Thakur is the data fiduciary for personal data you share through this website or when you get in touch.

Contact for privacy questions: info@growthsense.net

What is collected

When you use the contact form

  • your name
  • your mobile number
  • the service you are asking about, and your preferred language if you choose one
  • the message you type
  • the page you sent the form from

The form does not ask for, and you should not enter, PAN, Aadhaar, bank account numbers, passwords or copies of documents.

When you contact directly

If you message on WhatsApp, call or email, the details you choose to share (such as your name, number, messages and any documents you send once you engage the service) are received through that channel.

When you use the calculators

The calculators run entirely in your browser. The figures you type are not sent to or stored by GrowthSense.

Technical data

Like any website, the hosting provider automatically processes basic technical information such as your IP address, browser type and the pages requested, in order to deliver the site and keep it secure. This site does not set advertising or tracking cookies and does not use analytics at present. TODO: update this line if analytics are added

Why it is used

  • to reply to your enquiry and give you a checklist and a quote
  • to provide the service you ask for, if you decide to go ahead
  • to keep records required by law, for example for tax purposes

Your information is used only for these purposes. It is processed on the basis of the consent you give by contacting me, and, where applicable, for purposes permitted by law.

Where it goes

  • Form provider. Contact-form submissions are delivered through a third-party form service (TODO: name of form provider, e.g. Formspree), which forwards them by email. If the form service is unavailable, the form opens your own email app instead, and your message is sent by your email provider.
  • Hosting. The website is hosted on Vercel, which processes the technical data described above.
  • Messaging and email. If you use WhatsApp, phone or email, those providers process your messages under their own privacy policies.
  • Government portals. When you engage a service, the information needed for your return or payment is entered on the official portal concerned (for example incometax.gov.in or gst.gov.in).

Your data is never sold, rented or shared for marketing.

How long it is kept

Enquiries that don’t lead to any work are deleted within a reasonable period once they are no longer needed.TODO: confirm retention period, e.g. 12 months Records of work done are kept for as long as the law requires, and then deleted.

How it is protected

Reasonable security measures are used to protect your information, such as keeping records on password-protected devices and accounts and limiting access to what is needed for your work. No method of transmission over the internet is completely secure, which is another reason not to send identity documents through the website form.

Your rights

Under the DPDP Act, 2023, you can:

  • ask for a summary of the personal data held about you and how it is used
  • ask for inaccurate or incomplete data to be corrected or updated
  • ask for your data to be erased when it is no longer needed, subject to legal record-keeping requirements
  • withdraw your consent at any time (this won’t affect anything done before you withdraw it)
  • nominate another person to exercise these rights on your behalf in case of death or incapacity
  • raise a grievance and receive a response

To use any of these rights, contact info@growthsense.net. If you are not satisfied with the response, you may complain to the Data Protection Board of India.

Children

This website is not directed at children. If you are under 18, please ask a parent or guardian to get in touch on your behalf.

Changes to this notice

This notice may be updated from time to time. The date at the top shows when it last changed.

This notice is written in plain language and is not legal advice. TODO: owner to review this notice, ideally with a lawyer