Privacy Policy

This policy explains what personal data this website collects, why, who it is shared with, and what you can do about it. It is written with India's Digital Personal Data Protection Act, 2023 (DPDP Act) in mind. If anything here is unclear, email me and I'll explain.

Who is responsible for your data

Rishi Yadav, Narnaul, Haryana, India, is the data fiduciary for this website (rishiyadav.space). That means I decide what is collected and how it is used, and I am responsible for protecting it. You can reach me at photonics54yadav@gmail.com.

What I collect

Contact form. Your name, email, phone number, business or company name, what you need, your budget range and your message. Some fields are optional; share only what you need to get a useful reply.
Analytics, only if you accept.If you click "Accept" on the cookie banner, Google Analytics 4 records which pages you visit, roughly where you are (city level), your device and browser type, and clicks on links such as WhatsApp, email or the resume download. IP addresses are anonymised. If you click "Reject" or ignore the banner, Google Analytics does not load at all.
Server logs. The hosting provider (Vercel) automatically records technical data for every request, such as IP address, browser, the page requested and the time. This is needed to run and secure the site.

I don't run advertising, I don't use tracking pixels from social networks, and I don't sell or rent personal data to anyone.

Why I use it, and on what basis

Contact form data is used only to reply to your enquiry and, if we work together, to run the project.
Analytics data is used to see which pages are useful and which need improving.
Server logs are used to keep the site running, fix errors and block abuse.

The legal basis is your consent. You give it by ticking the consent box on the contact form, or by clicking "Accept" on the cookie banner. Server logs are processed as a legitimate use needed to provide the website you asked to load.

How long I keep it

Enquiries that don't lead to a project: deleted within 12 months of our last conversation.
Client project correspondence: kept for as long as needed for the project, accounts and tax records.
Google Analytics data: kept for up to 14 months, then deleted automatically by Google.
Hosting logs: kept for a short period set by Vercel, then deleted.

Who it is shared with

Only with the services needed to run this site:

Resend delivers contact form messages to my inbox.
Google (Google Analytics 4) receives analytics data, only if you accepted analytics.
Vercel hosts the website and processes server logs.

These providers may store data on servers outside India. I don't share your data with anyone else unless the law requires it.

Your rights

Under the DPDP Act you can:

ask what personal data I hold about you and how it has been used (access);
ask me to correct or complete it (correction);
ask me to delete it, unless I must keep it by law (erasure);
withdraw your consent at any time, as easily as you gave it;
nominate someone to exercise these rights for you if you are unable to;
raise a grievance with me, and if you're not satisfied, with the Data Protection Board of India.

To use any of these rights, email photonics54yadav@gmail.com. I'll reply within 7 days and resolve the request within 30 days.

Withdrawing cookie consent

Your choice on the cookie banner is saved in your browser under the key ry-consent. To change it, use the button below. It clears your choice and reloads the page so the banner asks again. You can also clear this site's data in your browser settings.

Grievances and contact

For any privacy question or complaint, contact Rishi Yadav, Narnaul, Haryana, India, at photonics54yadav@gmail.com.

Changes to this policy

If I change how data is handled, I'll update this page and the date at the top. Significant changes will also be noted here.