1. Who is responsible
This site is published under the name Kailash Chandra. The legal entity that is the Data Fiduciary for the processing described here — Kailash Chandra personally or a business entity — and its registered address are Pending confirmation: to confirm.
Business name and postal address: Pending confirmation: to confirm, if different from the individual publisher.
Privacy contact: info@thekailashchandra.in. This is the address already published on the contact page. A named person or role who answers privacy questions, as required by rule 9 of the DPDP Rules, 2025: Pending confirmation: to confirm.
This notice applies to this website and its pages: https://thekailashchandra.in. It does not apply to other websites you reach through a link, including the social networks linked in the footer.
2. What is collected, why, and on what basis
The site has no accounts, no contact form, no checkout, no newsletter sign-up, no comments, no job applications and no uploads. Almost all of the data below exists because you choose to send an email, because a server has to answer a request, or because analytics or advertising is on.
| What | Why | Basis | Where and how long |
|---|---|---|---|
| Email you send. Your name, email address, the message and any attachment, plus anything else you choose to include and the email’s technical headers (which can include the sender’s IP address). | To read and reply; to discuss or provide something you asked for; to keep a record of that exchange. | Legitimate use under section 7(a) of the DPDP Act: you voluntarily provide the data to get a reply. If you ask us to stop, processing for that purpose stops. | In the email mailbox, not in this website’s database. Email provider: Pending confirmation: to confirm. Retained while the enquiry or any follow-up is live, then deleted unless a law requires longer. Retention period: Pending confirmation: to confirm. |
| Search terms. The words you type and the page number. | To return matching articles. | Legitimate use under section 7(a): you provide the words to use the search feature. | Not stored by this application after the request. The words appear in the page URL and may be recorded in hosting or security logs (next row). The query is also sent to the blog host to fetch results. |
| Server and security logs. IP address, browser and device information, requested URL, referring page, time, and error or security events. | To serve pages, keep the site available, prevent abuse, investigate incidents and meet security duties. | Security safeguards required by section 8(5) of the DPDP Act and rule 6 of the DPDP Rules, 2025. The exact legal characterisation should be confirmed with counsel. | Hosting provider: Hostinger. Region: Pending confirmation: to confirm. Retention: Pending confirmation: to confirm. Rule 6(1)(e) expects security logs and the related personal data to be kept for at least one year, once that rule is in force, unless another law requires otherwise. |
| Analytics — optional. Page path, referring page, browser, operating system, device type, country, visit time, and a unique-visit signal derived from the IP address. No account or email address. | To understand which articles are read. | On by default. Turn it off in Privacy choices; the change applies to later page views. | Self-hosted Umami instance, currently on a Hostinger host; production configuration: Pending confirmation: to confirm. Region: Pending confirmation: to confirm. Retention in the Umami configuration: Pending confirmation: to confirm. The default configuration does not send data to Umami Cloud. |
| Advertising — optional. IP address, device and browser information, approximate location, cookie or device identifiers, pages viewed, and ad interactions. | To load Google AdSense, and to show and measure ads if an ad unit is used. | On by default. Turn it off in Privacy choices. Personalised advertising setting: Pending confirmation: to confirm. | Google, globally. Retention is controlled by Google and your Google ad settings. See Google’s own privacy policy. Contract and controller/processor role: Pending confirmation: to confirm. |
| Consent record. A random reference for your browser, your two choices, the notice version, the action (accepted, essential only, custom or withdrawn) and the time. | To remember your choice and to be able to show that consent was given or withdrawn. | Necessary to comply with the consent record-keeping requirement reflected in section 6(10) of the DPDP Act. Legal characterisation: Pending confirmation: to confirm. | In your browser’s local storage. A copy is also written to Supabase by this site’s own API where the database is configured, without your IP address, user agent, email or page URL. Region: Pending confirmation: to confirm. Retention: Pending confirmation: to confirm. |
| Claps. An aggregate count per article. No name, account, cookie or device identifier is stored by the clap feature. | To show how many readers clapped for an article. | Aggregate information, not personal data. The request itself may appear in server logs. | Supabase (region: Pending confirmation: to confirm). The aggregate count is kept for as long as the article is published. |
| Display preferences. Light or dark theme, interface language, and accessibility settings (text size, contrast, motion and underlined links). | To apply the same display choices on return. | Functional storage on your device; no consent needed. | Your browser only. |
| Machine translation — optional. The public text of the page you ask to translate, the target language, and the translated result. | To show the page content in the selected language. | Selecting a non-English language is the request. No account or email address is needed. | Sent from this site’s server to Google Translate. No Google translation script or cookie is loaded in your browser. The result is cached on the server for a short time. Google’s retention: Pending confirmation: to confirm. |
| Trailer embeds — only if you press play. IP address, device and browser information, and cookies or identifiers used by YouTube. | To play a trailer you asked for. | Your affirmative click is the request; the video is not loaded before it. | Google/YouTube, globally. Retention and cookies are controlled by Google. See the Google privacy policy. |
What is not collected
- No account, password or profile.
- No contact form, newsletter list or marketing email list.
- No payment card or bank details; there is no checkout.
- No government identifier, precise location, contacts or photos.
- No job applications or candidate records.
- No first-party advertising or analytics cookie set by this application.
If you put extra personal data into an email, it is processed because you sent it. Please send only what is needed for your question.
3. Optional processing and controls
Analytics, advertising and full-page machine translation are the optional processing on this site. Analytics and advertising are on by default; you can turn either off in Privacy choices. Machine translation runs only when you choose a non-English language; no Google translation script or cookie is loaded in your browser.
Choosing a non-English language sends the public page text to Google Translate through this site’s server. The translated result is cached on the server for a short time. Switch back to English to stop making new translation requests. The English version of a legal notice prevails over a machine translation; translations may be inaccurate.
You can keep both on, choose them individually, turn both off, or change your mind later. The controls are at Privacy choices. Turning either off takes one switch; you can also turn off both in one action. You can also email info@thekailashchandra.in. Machine translation is controlled by the language menu, not by the analytics/advertising switches.
Withdrawal stops the optional scripts loading on later page views; reload the page to unload one that is already running. It does not make processing that happened before withdrawal unlawful. Where a vendor already received data, you can ask for erasure and the request will be passed on (see your rights).
The site does not use a registered Consent Manager. Choices are made directly with the publisher. If that changes, this notice and the controls will be updated.
5. Processing outside India
The DPDP Act does not require data to be hosted in India. Transfers outside India are permitted, subject to any restriction the Central Government notifies under section 16 and rule 15 of the DPDP Rules, 2025.
Some recipients above may process data outside India. Their locations and the safeguards in their contracts are marked Pending confirmation: to confirm. No claim is made that any country has been approved by the Indian government. If you do not want data to leave India, turn analytics and advertising off, and consider whether you need to email; the mailbox provider may also process outside India.
6. How long data is kept, and deletion
Data is kept only for the purpose it was collected for, unless a law requires longer retention. The specific periods for email, server logs, analytics, consent records and advertising are marked Pending confirmation: to confirm in the tables above; they are business and legal decisions, not technical defaults.
The application itself does not keep a copy of your email. The email mailbox does. Hosting and security logs are controlled by the hosting configuration. Aggregate clap counts do not identify you and are kept while the article is published.
To ask for erasure, use the route in your rights. Erasure requests are passed to the processors that hold the data. Some data may be kept where the law requires it, or where retention is necessary to establish, exercise or defend a legal claim.
7. Security and data breaches
The site is served over HTTPS. Database keys are kept server-side and are never sent to the browser. The database uses row-level security, and the consent log is insert-only for the application key. Optional vendor scripts load by default; turning them off prevents them loading on later page views. Access to deployment and database accounts is limited to the operator.
No website can promise perfect security. If a personal data breach occurs, affected readers will be told without delay in clear language, and the Data Protection Board will be notified, with the detailed information required within 72 hours. The internal steps are recorded separately; they are not published here.
Security measures and processor contract clauses required by rule 6 of the DPDP Rules, 2025 are being put in place. Contract status for each vendor is marked Pending confirmation: to confirm.
8. Your rights
Under the DPDP Act you can ask to:
- Access a summary of the personal data being processed and the processing activities, and the identities of the other fiduciaries and processors it was shared with (section 11).
- Correct, complete or update inaccurate or incomplete data (section 12).
- Erase data, unless retention is necessary for the purpose or required by law (section 12).
- Turn off optional processing at any time in Privacy choices.
- Nominate another person to exercise your rights if you die or become incapacitated (section 14).
- Complain to the Data Protection Board after first using the grievance route below (section 13).
To make a request, email info@thekailashchandra.in with the subject line “DPDP request”. Say what you want (access, correction, erasure, withdrawal or nomination), the email address you used, and any article or date that helps identify the record. If you have a consent reference from Privacy choices, include it. Do not send an identity document unless it is specifically requested; most requests can be answered from the email address alone.
Requests are answered within 90 days, the outer limit in rule 14(3) of the DPDP Rules, 2025, and sooner where possible.
A step-by-step page for rights requests repeats this route and explains what happens next.
9. Questions and grievances
Start with info@thekailashchandra.in. Put “Privacy question” or “Grievance” in the subject line. Explain what happened, which page or vendor is involved, and what outcome you want. The aim is to acknowledge the message and resolve it within 90 days.
The named person or role responsible for answering privacy questions is Pending confirmation: to confirm, and the business address to use if email is not possible is Pending confirmation: to confirm. This site does not claim to have a Data Protection Officer; a DPO is required only for a Significant Data Fiduciary, and this site has not been notified as one.
If the grievance is not resolved, you can complain to the Data Protection Board of India. The DPDP Act requires you to exhaust the grievance route first (section 13(3)). The Board’s filing mechanism is published through its official channels; MeitY’s current Act and rules index is at meity.gov.in. Use the Board’s current official portal or notice for filing; this notice does not link to an unverified duplicate.
10. Children
Under the DPDP Act, a child is anyone under 18. This is a general-audience blog. It does not create accounts, ask for a date of birth, or require personal data to read an article. The optional analytics and advertising scripts are on by default and can be turned off in Privacy choices.
If you are under 18, please use the site with a parent or guardian, and do not send personal data by email without their consent. If you believe a child’s personal data has been processed, write to info@thekailashchandra.in so it can be removed.
Whether any part of the site is directed at children, and whether verifiable parental consent under section 9 and rule 10 is required for any flow, is Pending confirmation: to confirm. The site does not currently ask for age or operate a parental-consent flow. This notice does not assume that every reader is an adult.
11. Cookies and local storage
This application code does not set a first-party cookie. It stores your light/dark theme, interface language, accessibility settings and consent record in local storage. Those values stay in your browser, except that the consent record may also be copied to Supabase as described above. They are not sent to analytics or advertising vendors.
Optional third-party cookies or device identifiers can be set by Google AdSense, which loads by default, and by YouTube if you press play on a trailer. You can turn advertising and analytics off in Privacy choices. The cookies and storage page lists the keys and the optional vendors.
12. Changes to this notice
The version and date are shown at the top. If a change affects these settings, the notice version is increased and the notice is shown again. Review the new notice before deciding whether to keep optional processing on.
This notice describes current practice. It is not a claim of certification or approval by MeitY, the Data Protection Board or any other regulator.
13. Contact
Email: info@thekailashchandra.in · Named privacy contact: Pending confirmation: to confirm · Postal address: Pending confirmation: to confirm.