Last Updated: June 25, 2025
1. Introduction
Welcome to ujjwalganesh.com. My name is Ujjwal Ganesh, and I am committed to protecting the privacy and security of your personal data. This Privacy Policy outlines my practices concerning the collection, use, and protection of your information when you visit my website, use my services, or interact with me.
This policy is designed to be compliant with applicable data protection laws, including India’s Digital Personal Data Protection Act, 2023 (DPDPA) and the European Union’s General Data Protection Regulation (GDPR). By using this website, you acknowledge that you have read and understood this Privacy Policy.
2. Definitions
- “I”, “Me”, “My”: Refers to Ujjwal Ganesh, the owner and operator of ujjwalganesh.com.
- “You”, “Your”: Refers to you, the user of this website or my services.
- “Data Fiduciary” / “Data Controller”: The entity that determines the purposes and means of processing personal data. For the purposes of this website, I, Ujjwal Ganesh, am the Data Fiduciary and Data Controller.
- “Data Principal” / “Data Subject”: The natural person to whom the personal data relates.
- “Personal Data”: Any data about an individual who is identifiable by or in relation to such data. This includes information such as your name, email address, phone number, IP address, and location data.
- “Processing”: Any operation performed on personal data, including collection, recording, storage, use, disclosure, and erasure.
3. Who I Am (The Data Fiduciary)
The Data Fiduciary responsible for your personal data is: Ujjwal Ganesh.
4. The Data I Collect
I collect Personal Data in the following ways to provide and improve my services:
- Information You Provide Directly:
- Contact Form: When you fill out the “Let’s talk” contact form, I collect your Name, Phone Number, Email Address, Location, and any information you include in your message.
- Blog Comments: When you leave a comment on a blog post, I collect your Name, Email Address, IP address, and optionally, your website URL.
- Information Collected Automatically:
- Cookies and Analytics: When you browse my website, I use cookies and similar technologies to collect information about your device and browsing activity. This may include your IP address, browser type, operating system, pages viewed, and the duration of your visit. For more details, please see my Cookie Policy.
- Server Logs: My web server automatically logs information like your IP address, browser type, and access times for security and troubleshooting purposes.
5. How and Why I Use Your Data (Purpose and Lawful Basis)
I process your Personal Data only for specified, explicit, and legitimate purposes. My lawful basis for processing under DPDPA and GDPR is primarily your consent.
- To Respond to Your Inquiries:
- Data Used: Name, Email, Phone, Location, Message Content.
- Purpose: To communicate with you, respond to your questions, and provide information about my SEO and website strategy services.
- Lawful Basis: Your explicit consent, given when you submit the contact form.
- To Publish and Manage Blog Comments:
- Data Used: Name, Email, IP Address, Website URL, Comment Content.
- Purpose: To allow you to participate in discussions on my blog and to prevent spam and abuse. Your name and comment will be publicly visible.
- Lawful Basis: Your explicit consent, given when you submit a comment.
- To Analyze and Improve My Website:
- Data Used: IP Address, Cookie IDs, Device/Browser Info, Usage Data.
- Purpose: To understand how visitors use my website, to improve its functionality and content, and to ensure it provides a valuable user experience.
- Lawful Basis: Your explicit consent, provided via the cookie consent banner.
- To Ensure Security and Maintain My Website:
- Data Used: IP Address, Access Logs.
- Purpose: To protect my website from malicious attacks, diagnose technical issues, and ensure its integrity.
- Lawful Basis: Legitimate Interest (to protect my digital assets and ensure service availability).
6. Cookies and Tracking Technologies
I use cookies to enhance your experience, analyze site performance, and for marketing purposes. You have full control over the cookies you accept. For a detailed explanation of the cookies I use and how you can manage your preferences, please read my Cookie Policy.
7. Data Sharing and Third Parties
I do not sell your Personal Data. I only share it with trusted third-party service providers (“Data Processors”) who help me operate my website and business. These include:
- Web Hosting Provider: To host my website and store its data.
- Email Service Provider: To manage email communications.
- Analytics Provider (e.g., Google Analytics): To analyze website traffic.
- Spam Prevention Services: To protect my website from spam comments.
I have agreements in place with these providers to ensure they process your data securely and only on my instructions. As the Data Fiduciary, I remain responsible for the protection of your data.
8. International Data Transfers
I am based in India. Your Personal Data may be processed and stored on servers located outside of your country of residence. If you are a resident of the European Economic Area (EEA), please be aware that your data may be transferred to countries, like India, that have not been deemed to have an “adequate” level of data protection by the European Commission.
In such cases, I will ensure that appropriate safeguards are in place to protect your data, such as using Standard Contractual Clauses (SCCs) or relying on other legally-provided mechanisms.
9. Data Security
I take the security of your Personal Data seriously. I have implemented reasonable technical and organizational security safeguards to prevent unauthorized access, use, alteration, or destruction of your data. These measures include secure hosting, data encryption where appropriate, and access controls. However, please note that no method of transmission over the Internet is 100% secure.
10. Data Retention
I will retain your Personal Data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by law.
- Contact Form Data: Retained for the duration of our business relationship or for 1 year after the last communication if you do not become a client.
- Blog Comments: Retained indefinitely as they are part of the public record of the blog, unless you request erasure.
- Analytics Data: Retained according to the policies of my analytics provider, typically for a period of 14-26 months.
11. Your Rights as a Data Principal / Data Subject
You have several rights regarding your Personal Data. I am committed to upholding these rights. To exercise any of these rights, please contact me.
- Right to Access: You can request a copy of the Personal Data I hold about you.
- Right to Rectification (Correction): You can request that I correct any inaccurate or incomplete data.
- Right to Erasure (Right to be Forgotten): You can request that I delete your Personal Data, subject to certain legal limitations.
- Right to Withdraw Consent: You can withdraw your consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.
- Right to Grievance Redressal: You have the right to file a complaint if you are not satisfied with how I have handled your data.
- Right to Data Portability (For EU Residents): You can request to receive your data in a structured, commonly used, and machine-readable format.
- Right to Restrict Processing (For EU Residents): You can request that I limit the processing of your Personal Data under certain conditions.
12. Children’s Privacy
My website and services are not directed to individuals under the age of 18. I do not knowingly collect Personal Data from children. If I become aware that I have inadvertently collected data from a child without verifiable parental consent, I will take steps to delete that information promptly.
13. Grievance Redressal
If you have any questions, concerns, or complaints regarding this Privacy Policy or my data practices, please contact me first.
I will address your concerns in a timely and effective manner. If you are not satisfied with the resolution, you have the right to lodge a complaint with the relevant data protection authority. For residents of India, this is the Data Protection Board of India (DPB).
14. Changes to This Privacy Policy
I may update this Privacy Policy from time to time to reflect changes in my practices or for other operational, legal, or regulatory reasons. I will post the updated policy on this page and update the “Last Updated” date at the top. I encourage you to review this policy periodically.
