Privacy Policy

Last updated: [Date]

This Privacy Policy explains how [Legal entity name], [Registered address] ("we", "us", "our"), the operator of this website and its services for Pandit Mohit Tiwari Ji, handles your personal data. We respect your trust, especially because pujan and astrology involve personal and sensitive details.

1. The law that applies

We handle personal data in line with India's Digital Personal Data Protection Act, 2023 (DPDP Act) and its rules. If you are in the European Union or the United Kingdom, we also respect your rights under the GDPR or UK GDPR, as described in section 8.

2. What we collect

• Account and contact details: your name, phone number and email address.
• Ritual details: your gotra, father's name, names of family members and names of ancestors (for pitru karma), and your sankalp wish, used only to perform your pujan.
• Birth details: date, time and place of birth (yours and, for matching, your partner's), used only for your consultation or for the pujan that needs it.
• Address: your shipping address, used only to deliver prasad or items you order.
• Payment details: payments are processed by Razorpay and Stripe. We receive only a payment reference, amount, status and the last digits of the instrument, never your full card number, CVV or UPI PIN, and we do not store them.
• Communications: messages you send us and our replies, including WhatsApp conversations where you have consented.
• Technical data: device type, browser, IP address and pages visited, collected through essential cookies and, with your consent, analytics.

3. Why we use it

• To confirm and perform your booking, and to send you the video, receipts and prasad.
• To give astrology consultations you ask for.
• To contact you about your booking, including reminders and changes.
• To keep records and issue receipts as required by law, and to prevent fraud and misuse.
• To improve the website, in aggregate and, where required, only with your consent.

We do not sell your personal data, and we do not use your birth or ritual details for advertising.

4. WhatsApp and other messages

We send WhatsApp Business messages, such as booking confirmations and reminders, only if you have consented. You can withdraw consent at any time by replying STOP or writing to us. Service messages that are essential to your booking may still be sent by email.

5. Who we share it with

We share data only as needed to deliver the service, and only with:

• Payment processors: Razorpay and Stripe, to process payments.
• Couriers and logistics partners: your name, phone number and address, to deliver prasad.
• Pandits and team members who perform or support your pujan or consultation, limited to what they need.
• Service providers such as email, messaging, hosting and video platforms, under confidentiality and data-protection terms.
• Authorities, where the law requires it.

If your data is processed outside India, for example by hosting or payment providers, we take reasonable steps to ensure it is protected.

6. How long we keep it

• Sankalp, ritual and birth details: up to 24 months after your last booking, unless you keep an account, in which case we keep them while the account stays active so that you do not have to re-enter them.
• Financial and tax records: for as long as Indian tax and accounting law requires.
• Messages and support records: for a reasonable period needed to resolve queries and disputes.

After that, we delete or anonymise the data.

7. Cookies

We use essential cookies that make the website work, such as keeping you signed in and remembering your language. We use optional analytics cookies only if you accept them in the cookie banner, and you can change your choice at any time. Blocking essential cookies may stop parts of the site from working.

8. Your rights

Under the DPDP Act, you can ask to access information about your data, to correct or update it, to erase it, to withdraw consent, and to nominate someone to exercise your rights, and you can raise a grievance. If you are in the EU or UK, you also have the rights under GDPR/UK GDPR of access, rectification, erasure, restriction, portability and objection, and the right to complain to your data protection authority.

To exercise any right, write to our Grievance Officer at the address below. We may need to verify your identity, and we aim to respond within 30 days. Where we are required by law to keep certain records, such as tax records, we will explain why we cannot erase them.

9. Security

We use reasonable measures such as encryption in transit, access controls and limited staff access. No system is completely secure, so please protect your own account, and tell us at once if you suspect misuse.

10. Children

Our services are meant for adults. A parent or guardian may book on behalf of a child, and we process a child's details only for that purpose and with the guardian's consent.

11. Changes to this policy

If we change this policy, we will update the date above, and tell you of significant changes by email or on the website.

12. Grievance Officer and contact

• Grievance Officer: [Grievance Officer name and email]
• Operator: [Legal entity name], [Registered address]
• GSTIN (if any): [GSTIN if any]

We aim to acknowledge complaints within 48 hours and resolve them within 30 days.