Personal Data Collected
We collect personal information you provide, such as name, address, email, phone number, and your birth details (date, time, place) to provide personalized services. Sensitive information (e.g., exact birth details, astrological/kundli inputs) is treated with extra care as "sensitive personal data or information" under applicable law.
Data Security
We implement industry-standard security measures (encryption, firewalls, secure servers) to protect your data. However, no system is impenetrable; we cannot guarantee absolute security of data in transit or storage.
User Rights
You can access and update your personal information in your account settings at any time. You may also request deletion of your data, subject to legal requirements. Note that deletion may limit your use of certain features.
Legal Basis
We process your personal data in accordance with the Information Technology Act, 2000 (and its rules) and the Digital Personal Data Protection (DPDP) Act, 2023. Data collection and processing are carried out only where we have a lawful basis, including your consent, contractual necessity, or compliance with legal obligations.
Purpose of Processing
Your personal data is processed for the following purposes:
- Service delivery — fulfilling orders, bookings, consultations, and generating personalised reports
- Payment processing — securely handling transactions through authorised payment gateways
- Opt-in marketing — sending promotional communications only with your explicit consent
- Fraud prevention — detecting and preventing unauthorised or fraudulent activities on the platform
Consent & Withdrawal
Where processing is based on your consent, you may withdraw that consent at any time through your account settings or by writing to contact@sanatansansaar.com. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal. Please note that withdrawing consent for essential processing may limit your ability to use certain platform features.
Data Retention
We retain your data only as long as necessary for the stated purposes or as required by law:
- Account data — deleted within 30 days of account deletion request
- Transaction records — retained for up to 7 years for tax and legal compliance
- Chat logs and support interactions — retained for 90 days for quality and dispute resolution
Data Sharing & Third Parties
We may share your data with trusted third parties strictly for service fulfilment: courier and logistics partners for order delivery, payment processors (Razorpay/PayU) that are PCI-DSS compliant for secure transactions, and anonymised analytics providers for platform improvement. We never sell your personal data to any third party for marketing or any other purpose.
User Rights under DPDP Act
Under the Digital Personal Data Protection Act, 2023, you have the following rights:
- Right to Access — request a summary of your personal data being processed
- Right to Correction — request correction of inaccurate or incomplete data
- Right to Erasure — request deletion of your personal data, subject to legal retention requirements
- Right to Grievance Redressal — file complaints regarding data processing with our Grievance Officer or the Data Protection Board
- Right to Nomination — nominate another individual to exercise your data rights in case of death or incapacity
Cookies & Tracking
We use cookies and similar tracking technologies to enhance your browsing experience, remember preferences, and analyse platform usage. You can manage cookie preferences through your browser settings or opt out of non-essential cookies. Essential cookies required for core functionality cannot be disabled. We do not use tracking technologies to track or profile children.
Cross-Border Data Transfers
Your personal data is primarily stored on servers located in India. In the event that data needs to be transferred outside India, such transfers will only be made to jurisdictions or entities that comply with the DPDP Act, 2023, and applicable data protection standards. We ensure that adequate safeguards are in place to protect your data during any cross-border transfer.