Privacy Policy

1. Scope and responsible operator

This policy applies to the website at modernrishi.tavamithram.com, including its public pages and the private Modern Rishi experience in English and French. The responsible operator and controller of personal data processed for this website is Tavamithram Sarvada.

2. Contact

Privacy enquiries and requests may be sent to tavamithram@gmail.com.

3. Hosting and technical server logs

The website is hosted by Vercel. When a page is requested, Vercel and the website infrastructure may process technical log data such as the IP address, date and time, requested page or file, browser type and version, operating system, referrer URL and response status. This processing is necessary to deliver the website, maintain availability, detect errors and abuse, and protect the service against attacks.

The legal basis is Article 6(1)(f) GDPR. The legitimate interests are the secure, reliable and technically efficient operation of this website. Technical request data is necessary for a website to be transmitted over the internet. Further information is available in the Vercel Privacy Notice.

4. Anonymous Vercel Web Analytics

This website uses Vercel Web Analytics to understand aggregate visits and page use. It does not use cookies and does not create profiles that identify visitors across different days or websites. Aggregated data may include the requested page, time, referrer, general location, browser, operating system and device type.

Vercel identifies a visitor for aggregate daily counting through a hash created from the incoming request; the session identifier is discarded after 24 hours. The legal basis is Article 6(1)(f) GDPR. The legitimate interest is understanding the reach and technical usability of the website without tracking individuals. See the Vercel Web Analytics privacy information.

5. YouTube videos

Videos are embedded using YouTube's privacy-enhanced domain, youtube-nocookie.com. Before media consent, the website displays a local placeholder and makes no request for the video player. If you load a video or consent to embedded media, a connection is made to Google/YouTube. Google may receive technical data including your IP address, device and browser information, the referring page and information about playback. If you are signed in to Google, activity may be associated with your account according to your settings.

The legal basis is Article 6(1)(a) GDPR. Consent may be withdrawn through “Privacy settings”. Further information is in the Google Privacy Policy.

6. Newsletter, double opt-in and MailerLite

If you choose to use the subscription form, the name and email address you enter, together with technical submission and consent information such as the time, form source and IP address, are sent to MailerLite for newsletter administration. Subscription uses a double opt-in process: after submitting the form, you must confirm the email address through a confirmation message before receiving the newsletter. Consent and confirmation records are retained so that the subscription can be administered and consent demonstrated.

The legal basis for sending the newsletter is Article 6(1)(a) GDPR. Evidence of consent is processed to meet accountability obligations and protect against misuse. You may withdraw consent at any time by using the unsubscribe link in an email or contacting tavamithram@gmail.com. Withdrawal does not affect processing that was lawful before withdrawal. See the MailerLite Privacy Policy.

7. Google reCAPTCHA

The subscription form uses Google reCAPTCHA to distinguish human submissions from automated abuse. reCAPTCHA and MailerLite scripts load only when you choose to use the subscription form or enable subscription services in the privacy settings. Google may process technical and interaction data, including IP address, device and browser data, referrer and interaction signals, to assess abuse risk. The legal basis is Article 6(1)(a) GDPR.

8. Contact by email

If you contact the operator by email, the email address, message, attachments and associated communication metadata are processed to answer the enquiry. The legal basis is Article 6(1)(b) GDPR where the communication concerns steps before or performance of an agreement, and otherwise Article 6(1)(f) GDPR, based on the legitimate interest in responding to correspondence.

9. Recipients, international processing and retention

Personal data is made available only where required to the operator and relevant service providers: Vercel for hosting and anonymous web analytics, Google/YouTube for requested videos and reCAPTCHA, and MailerLite for requested newsletter subscriptions. These providers may use infrastructure or subprocessors outside the European Economic Area. Where GDPR requires it, transfers are based on an adequacy decision, the EU-US Data Privacy Framework where applicable, or appropriate safeguards such as Standard Contractual Clauses. Provider terms and privacy notices contain further details.

Data is kept only for as long as necessary for its purpose and any legal obligations. Technical logs are retained according to operational security needs and the host's applicable retention settings. Aggregated analytics data follows Vercel's applicable reporting window and retention settings. Newsletter data is kept until consent is withdrawn or the subscription is otherwise ended; limited consent records may be retained afterwards where necessary to demonstrate compliance or resolve claims. Email correspondence is deleted when the matter is complete unless legal retention or defence of claims requires longer. The consent choice and learning progress stored in your browser remain until replaced or deleted on that device.

10. Your rights

Subject to the applicable conditions, you have rights of access, correction, deletion, restriction of processing, objection and data portability. Where processing is based on consent, you may withdraw consent at any time for the future. You may also complain to the data protection supervisory authority competent for your place of residence, place of work or the place of an alleged infringement. Contact tavamithram@gmail.com to exercise these rights.

11. Voluntary information and automated decisions

Providing newsletter and email-contact information is voluntary; without it, the requested subscription or reply cannot be provided. Technical request data and strictly necessary local technologies are required for secure website delivery and requested functionality. YouTube and subscription-service scripts are not required for basic use and remain blocked unless deliberately selected. The operator does not use personal data for automated decision-making or profiling within the meaning of Article 22 GDPR.

12. Account access and language choice

Account access uses the shared Tavamithram account service. The signed-in session is held in an essential HttpOnly cookie, which client-side scripts cannot read. A separate essential cookie remembers your English or French language choice for up to one year. Neither cookie enables optional YouTube or subscription services; those still require your separate choice.