← Back to Site
DPDP Act 2023 Compliant

Privacy Policy

Effective Date: 1 July 2026  |  Last Updated: 3 July 2026
Governed by the Digital Personal Data Protection Act, 2023 (India)

1Data Fiduciary

This website, prashanthejjumala.online, is operated by Prashanth Ejjumala ("Data Fiduciary") in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act"). For any data-related queries, contact: prashanth@prashanthejjumala.online

2Data We Collect

We collect only the minimum personal data necessary for the purpose for which it is submitted: • Contact Form: Name, email address, phone number (optional), and message content — collected only when you voluntarily submit the form. • Server Logs: IP address and user-agent string — automatically collected for security monitoring and rate-limiting. • No cookies, no tracking pixels, no analytics platform is used on this site.

3Purpose of Processing

Your personal data is processed solely for: • Responding to your enquiry or contact form submission. • Security monitoring and protection of this website from abuse, spam, and unauthorised access. • Compliance with applicable law enforcement requests under the Information Technology Act, 2000 and DPDP Act, 2023.

4Legal Basis

Data is processed on the following lawful bases under Section 4 of the DPDP Act, 2023: • Consent: You provide explicit, free, and informed consent when submitting the contact form. • Legitimate Use: Security monitoring is conducted under a legitimate use basis (Section 7) to protect the integrity of this website and its visitors.

5Data Retention

Contact form submissions are retained for no longer than 90 days unless required for an ongoing correspondence. Server logs are retained for a maximum of 30 days. After this period, data is permanently deleted.

6Data Sharing & Disclosure

Your personal data is NEVER sold, rented, or shared with third parties for commercial purposes. It may be disclosed: • To authorised law enforcement or government agencies upon a lawful order under the DPDP Act, 2023 or the IT Act, 2000. • To infrastructure providers (e.g., Vercel, Neon.tech) strictly for hosting this website, bound by their own privacy and data processing agreements.

7Rights of Data Principals (Your Rights)

Under the DPDP Act, 2023 (Chapter III), you have the following rights: • Right to Access: Request a summary of personal data we hold about you. • Right to Correction: Request correction of inaccurate or incomplete data. • Right to Erasure: Request deletion of your personal data (subject to legal retention obligations). • Right to Grievance Redressal: Lodge a complaint with our Grievance Officer. • Right to Nominate: Nominate another person to exercise rights on your behalf. To exercise any of these rights, email: prashanth@prashanthejjumala.online

8Content Protection & Screen Capture Policy

All content on this website — including text, images, photographs, and multimedia — is the exclusive intellectual property of Prashanth Ejjumala. Unauthorised reproduction, screenshots, screen recording, or video capture of this website's content is expressly prohibited under: • The DPDP Act, 2023 (unlawful processing of data). • The Information Technology Act, 2000, Section 43 & 66. • The Copyright Act, 1957. Technical measures are in place to deter screen capture. Circumventing these measures may constitute an offence under applicable law.

9Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These include: • HTTPS/TLS encryption for all data in transit. • Rate-limiting and IP blocking on all form submission endpoints. • JWT-based authentication with bcrypt password hashing for the admin portal. • Two-Factor Authentication (TOTP) enforced for all administrative access.

10Grievance Officer

In accordance with Rule 12 of the DPDP Act, 2023, a Grievance Officer has been designated to address your data-related concerns: Name: Prashanth Ejjumala Email: prashanth@prashanthejjumala.online Response Time: Within 48 hours of receipt of complaint. If you are unsatisfied with our response, you may escalate your grievance to the Data Protection Board of India once constituted under Section 18 of the DPDP Act, 2023.

11Changes to This Policy

We reserve the right to update this Privacy Policy to reflect changes in law or our data practices. The "Last Updated" date at the top of this page will reflect any revisions. Continued use of this website after updates constitutes your acceptance of the revised policy.

12Jurisdiction & Governing Law

This Privacy Policy is governed by the laws of the Republic of India. Any disputes arising from data processing activities shall be subject to the exclusive jurisdiction of courts in Hyderabad, Telangana, India.

🛡️ This website is protected under the Digital Personal Data Protection Act, 2023 (India). Unauthorised data extraction, screen recording, or content reproduction is prohibited and may be reported to law enforcement.