privacy policy

malagoesgreen, a sole proprietorship operated by Malavika Malaviya in India, is the data fiduciary for personal data collected through this site. Questions, requests or grievances: malagoesgreen@gmail.com. This policy is published under the Information Technology Act, 2000 and the SPDI Rules, 2011, and follows the principles of the Digital Personal Data Protection Act, 2023.

• Contact form: name, email address and your message.
• Newsletter: email address.
• Consultation bookings: name, email, whether you are an individual or an organisation, your chosen package, date and slot, and the brief you write.
• Payments: payment status and a transaction reference. Card, UPI and bank details are collected and processed directly by Razorpay and never reach our servers.
• Technical data: basic, aggregated usage information such as pages viewed and approximate region.

We do not ask for health records, government ID, financial account numbers or other sensitive personal data. Please do not include them in a message or booking brief.

• To reply to your enquiry and deliver a booked consultation.
• To take payment, issue confirmations and handle refunds.
• To send the newsletter, only if you have subscribed.
• To keep the site secure and understand what content is useful.

We rely on your consent for the newsletter, and on the necessity of performing the service you asked for in every other case. Your data is never sold.

Only with service providers who help run the site, and only to the extent needed: our hosting and database provider, Razorpay for payment processing, and our email provider for transactional and newsletter emails. Some of these providers process data outside India. We may also disclose data where required by law.

The site uses only the cookies and local storage needed for it to function and to keep basic, privacy-respecting usage statistics. We do not run third-party advertising trackers. Affiliate links may set a cookie on the retailer's own domain once you click through, which is governed by that retailer's privacy policy.

Booking and payment records are kept for as long as required for tax and accounting purposes under Indian law. Contact messages are kept up to 24 months. Newsletter subscriptions are kept until you unsubscribe, which you can do from any email.

Data is stored in access-controlled databases with row-level security, encrypted in transit over HTTPS. No system is perfectly secure, but access is limited to what is strictly needed to run the service.

You can ask for a copy of your data, ask for it to be corrected or erased, withdraw consent for marketing emails, or nominate someone to exercise these rights on your behalf. Write to malagoesgreen@gmail.com and we will respond within 30 days. If you are not satisfied, you may escalate to the Data Protection Board of India.

The site is not directed at children under 18, and we do not knowingly collect their data. If you believe a child has submitted information, write to us and it will be deleted.

If this policy changes, the updated version will be posted here with a new date. Related documents: Terms and Conditions, Cancellation and Refund.