Privacy Policy

Commitment to Privacy

This Privacy Policy describes how M. Rajesh Yukta ("I", "me", "we", or "Operator") collects, uses, stores, and protects personal and business information when you visit rajesh.in, submit a private enquiry, or make payments for advisory, engineering, or digital asset engagements.

This policy is published in accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDP Act) of India.

Information We Collect

We collect only the minimum information required to evaluate enquiries, deliver engagements, and comply with Indian tax and financial regulations:

• Enquiry & Identity Data: Your full name, email address, company or venture name, and the project details you voluntarily submit through our Private Enquiry form.
• Billing & Compliance Data: When you engage our services, we collect billing name, address, GSTIN/PAN (where applicable for Indian tax invoicing), and transaction reference identifiers.
• Technical & Security Logs: Standard server logs including IP address, browser user-agent, timestamp, and requested URI, used strictly for security hardening, rate-limiting, and spam prevention.

How We Use Your Information

Your information is used strictly for the following legitimate purposes:

• To review and respond personally to your private enquiries and engagement requests.
• To prepare Statements of Work, deliver agreed consulting or engineering milestones, and provide client support.
• To process payments, issue invoices, handle refunds, and maintain statutory accounting records under Indian law.
• To protect the security, integrity, and availability of rajesh.in against unauthorized access or abuse.

Discretion, Confidentiality & Third-Party Sharing

Discretion is foundational to our work. We never sell, rent, or trade your personal or business information to third parties or marketing lists. Information is shared only in the following limited circumstances:

• Payment Aggregators & Banks: To process your authorized transactions, verify payment status, or initiate refunds.
• Essential Infrastructure Providers: Secure cloud hosting, email delivery, and spam-verification services (such as Google reCAPTCHA on our enquiry form) bound by strict confidentiality obligations.
• Legal & Regulatory Obligations: When required by applicable Indian law, tax authorities, or a valid order from a court or governmental agency of competent jurisdiction.

Cookies & Local Storage

rajesh.in uses strictly necessary session cookies (such as CSRF protection tokens on our enquiry form) and a local browser preference key (rj-theme) to remember your chosen display appearance (Light, Dark, or Auto). We do not use third-party advertising trackers or cross-site behavioural profiling cookies.

Data Retention & Security Practices

We implement industry-standard administrative and technical security controls, including TLS encryption in transit, hardened server access controls, and strict database permissions. Enquiry records are retained only as long as necessary to evaluate or fulfil an engagement, while billing and invoice records are retained for the statutory period mandated by Indian tax and accounting laws.

Your Rights as a Data Principal

Under the Digital Personal Data Protection Act, 2023 (India) and applicable regulations, you have the right to request access to the personal data we hold about you, request correction or updating of inaccurate data, withdraw consent for prospective processing, or request erasure of personal data that is no longer required for statutory or contractual purposes.

Grievance Officer & Contact Channel

In accordance with the Information Technology Act, 2000 and the DPDP Act, 2023, any privacy questions, data requests, or grievances may be submitted to: