DPDP ACT 2023

Privacy policy

This policy explains what personal data nadiastroservice.com collects, why, how long it is kept, who else receives it, and what you can ask us to do about it. It is written against India’s Digital Personal Data Protection Act, 2023.

Who this policy is from

The Data Fiduciary is NadiAstroService, at No. 48, 5th Street, Ponvizha Nagar, Agathiyar Nagar, Villivakkam, Chennai 600049, telephone +91 98406 56708. Under the DPDP Act you are the Data Principal: the person the data is about.

It applies to this website, to WhatsApp messages, and to details taken when you visit in person.

What we collect, and why

The contact form

The enquiry form runs on Contact Form 7 and collects your name, email address, phone number, subject and message. It is used to answer your enquiry and arrange a reading if you want one. Submissions are sent to our email and may also be stored in the website database.

WhatsApp and phone

If you message the WhatsApp number, we hold that conversation, including your phone number, your display name and whatever you send us. If you call, we hold your number in the call log. Both are used to answer you and arrange appointments. WhatsApp is operated by Meta Platforms, so your messages pass through Meta’s systems under Meta’s own terms. Please do not send medical records, identity documents or financial details over WhatsApp.

Your thumb impression

A reading begins with a thumb impression taken in person: right thumb for men, left thumb for women. This is personal data under the Act. It is taken for the single purpose of finding your leaf, it is not shared with anyone outside this reading room, and you may ask at any time what is held and ask for it to be destroyed.

Analytics and advertising

This site uses Google Analytics 4 to count visits and see which pages are read. It records pages viewed, approximate location from your IP address, device and browser type, and how you arrived. It is used to improve the website, not to identify you.

This site also uses the Meta Pixel, which supports advertising on Facebook and Instagram.

This website does not ask for or store card or bank account numbers. Payment for a reading is arranged with you directly and handled by your own bank or payment app.

Transfer of data outside India

Some of your data leaves the country.

The Meta Pixel on this website transmits visitor data to Meta Platforms, Inc. in the United States. That data can include your IP address, the pages you viewed, the time of the visit, browser and device information, and Meta cookie identifiers that may connect the visit to your Facebook or Instagram account. This is a cross-border transfer of personal data outside India.

Google Analytics 4 works the same way: data goes to Google servers, including servers outside India.

Section 16 of the DPDP Act permits transfer outside India except to countries the Central Government restricts by notification. We transfer only to the services named above. If you do not want this to happen, block these cookies in your browser and contact us by phone instead.

The basis on which we process your data

Consent, in almost every case. Under the DPDP Act consent must be free, specific, informed, unconditional and unambiguous. When you submit the contact form, message us on WhatsApp or accept cookies, you consent to that data being used for the purpose named at that point, and nothing else.

Some processing happens under the legitimate uses the Act allows, such as using details you gave voluntarily for the purpose you gave them for.

You can withdraw consent at any time, and withdrawing must be as easy as giving it. Write to the Grievance Officer below. Withdrawal stops future processing; it does not undo lawful processing already done, and we may still hold what the law requires.

The Act requires verifiable consent from a parent or lawful guardian before a child’s data is processed, and prohibits tracking or targeted advertising directed at children.

Who else sees your data

Your data reaches other parties only in the ways listed here. We do not sell enquiry details and we do not pass them to marketing lists.

  • Our website host and email provider, who store form submissions and correspondence.
  • Google, for analytics, and Meta, for the pixel and for WhatsApp messages.
  • Our payment provider, where a payment is made online.
  • A court, regulator or authority, where we are required by Indian law to disclose.

Where a provider processes data on our behalf, such as website hosting, they act as a Data Processor and only on our instructions.

Access is limited to the people who need it in order to answer you and to give your reading. Paper records are kept at the address above.

How long we keep it

The Act requires personal data to be erased once its purpose is over and no law requires it kept. Our retention periods are:

  • Contact form enquiries and email: kept only for as long as we need them to answer you and to keep a record of the reading, and deleted when you ask.
  • WhatsApp conversations and call logs: kept while you are in contact with us about a reading, and deleted when you ask.
  • Client records relating to a reading: kept so that we can answer a later question about what was read, and deleted when you ask.
  • Analytics data is retained for the period set in the Google Analytics account; pixel data is retained by Meta under its own terms.

Cookies

This site sets cookies that make the website work, plus cookies set by Google Analytics and the Meta Pixel. The analytics and pixel cookies are not necessary for the site to function, and you can refuse them in your browser settings. Blocking them stops the data described above being collected and sent abroad.

Your rights under the DPDP Act

You have the following rights, and exercising them costs nothing:

  • The right to a summary of the data we hold about you, how it is processed, and who we have shared it with.
  • The right to correction, completion and updating of data that is wrong or out of date.
  • The right to erasure of your data, unless a law requires us to keep it.
  • The right to withdraw consent at any time.
  • The right to grievance redressal from us before going elsewhere.
  • The right to nominate another person to exercise these rights if you die or become incapable.

To exercise any of them, write to the Grievance Officer and say what you want done. We may need to confirm who you are first.

Grievance Officer

Complaints and requests about your personal data go to:

Contact: NadiAstroService, at the address and number on this page

In writing: message us on WhatsApp so you have a record of the complaint and the date

Phone: +91 98406 56708

A named Grievance Officer’s details will be published in this block

If you are not satisfied with our response, you may complain to the Data Protection Board of India. Please come to us first.

Changes to this policy

When this policy changes, the revised version is published here with a new effective date, and the version on this page is always the current one. Material changes are notified to you beforehand where the Act requires it.

This policy sits alongside our terms and conditions and refund and cancellation policy. Questions about a reading itself are answered on the FAQ page, and our address and hours are on the contact page.

A question about your data?

Ask, and we will tell you what we hold and remove it if you want it removed.