[BRACKETED] placeholder and have a qualified Indian data-protection lawyer review this against the Digital Personal Data Protection Act, 2023 (DPDP) and its Rules before publishing.This Privacy Policy explains how [LEGAL ENTITY / YOUR NAME] ("we", "us"), operating the RAINMUMBAI Tracker at [WEBSITE URL] (the "Tool"), collects and processes your personal data. We act as the Data Fiduciary under the Digital Personal Data Protection Act, 2023 ("DPDP Act"). The Tool is a free, independent, non-commercial, informational tool. It is not affiliated with NCDEX, is not a forecast, and is not investment advice.
| Data | When | Purpose |
|---|---|---|
| Your email address | Only if you voluntarily submit it in the "Get updates" box | To send you occasional product-update emails about this and future tools |
| Anonymous usage events (which panels/charts/contracts are used), plus referring site, device type, page-load and on-page time | As you use the Tool | To understand which features are useful and improve the Tool |
| If you use the Contact form: your name (optional), email and message | When you submit it | Only to read and reply to your enquiry |
| Transient technical data (e.g. IP address in memory) | On each request | Security and rate-limiting only; not stored to identify you |
We do not ask for your phone, location, financial details, or any sensitive personal data. Our analytics are anonymous and cookieless — we do not link your browsing to your email or build a personal profile. To count unique visits we use an irreversible, daily-rotating hash; we do not store your IP address. To distinguish new from returning visitors, we store a single first-party "seen before" marker in your browser's local storage — it holds no identifier, is never shared, and is not used to track you across other sites; you can clear it anytime via your browser. Contact-form messages are sent to us (via Brevo) to respond and are not used for marketing.
We process your email on the basis of your consent, given by a clear affirmative action (typing your email and clicking submit) after being shown this notice. Under the DPDP Act, your consent is free, specific, informed, unconditional and unambiguous. You are not required to provide your email to use the Tool.
You may withdraw consent at any time — it is as easy to withdraw as it was to give. Use the unsubscribe link in any email, or contact our Grievance Officer (below). Withdrawal does not affect processing done before withdrawal.
Under the DPDP Act you have the right to: (a) access a summary of your personal data and how it is processed; (b) correct or update it; (c) erase it; (d) nominate another person to exercise your rights; and (e) grievance redressal. To exercise any right, contact our Grievance Officer.
We use the following third-party processors, who act on our instructions:
Some processors may store or process data outside India. We rely on the DPDP Act's permission for cross-border transfer (except to any country restricted by the Central Government). [Confirm processor locations with your lawyer.] We do not sell your data.
We keep your email until you unsubscribe or ask us to erase it, after which it is removed from our active list within [e.g. 30] days (and from routine backups within [e.g. 90] days). Anonymous analytics are retained in aggregate only.
We apply reasonable security safeguards, including transport encryption (HTTPS), access controls, keeping secrets and data outside the public web root, and rate-limiting. No method is perfectly secure, but we take steps appropriate to the limited data we hold.
The Tool is intended for adults (18+). We do not knowingly collect data of children. [Confirm approach with your lawyer — DPDP has specific rules for children.]
For any privacy question, request, or complaint:
[GRIEVANCE OFFICER NAME]
[EMAIL ADDRESS]
[POSTAL ADDRESS, if applicable]
If your concern is not resolved, you may complain to the Data Protection Board of India under the DPDP Act.
We may update this policy; the "Last updated" date will change, and material changes affecting your data will be notified by [email / on-site notice].