This policy explains what personal data mridved.com collects, why it is collected, and what you can do about it. It is written to comply with the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the Digital Personal Data Protection Rules, 2025, and with Rule 4 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
1. Who is responsible for your data
mridved.com is a personal blog. For the purposes of the DPDP Act, the operator of mridved.com is the Data Fiduciary responsible for the personal data described in this policy. All privacy questions, requests and complaints should be sent to privacy@mridved.com, which is monitored by the operator.
This policy covers the website at https://mridved.com only. It does not cover any external site you reach by following a link from here.
2. This site is intended for adults
mridved.com is intended for readers aged 18 years and over. Under the DPDP Act, any person under the age of 18 is a child, and the Act prohibits tracking, behavioural monitoring and targeted advertising directed at children. This site uses analytics that record browsing behaviour, so it is not offered to anyone under 18.
Please do not use this site, and do not submit a comment, if you are under 18. If you believe a child has submitted personal data through this site, write to privacy@mridved.com and it will be deleted without delay.
3. What personal data is collected
Analytics data. If you consent to analytics cookies, Google Analytics records your approximate location derived from your IP address, your browser and device type, your operating system, the pages you view on this site, the time and duration of your visit, and the referring page or search that brought you here. Google Analytics is configured so that IP addresses are anonymised and Google Signals and advertising personalisation features are switched off, which means this data is not used to build an advertising profile of you.
Comment data. If you leave a comment, the name and email address you enter into the comment form are collected, together with the content of your comment and the date and time you submitted it. Your name and your comment are displayed publicly on the site. Your email address is never published and is used only to identify you as the author of the comment and to reply to you where necessary.
Server logs. The web host records your IP address, the time of your request, the page or file requested, and your browser’s user-agent string. These logs are generated automatically for every visitor as a technical and security necessity, are not linked to your identity, and are not used for analytics.
No sensitive personal data is collected. This site does not ask for financial information, passwords, health information, biometric data, government identifiers, or any special category of data. There are no user accounts, there is no newsletter, and there is no advertising on this site.
4. Cookies and your consent
When you first visit mridved.com you will see a consent banner. Google Analytics does not load, and no analytics cookie is placed on your device, until you accept. If you decline, or if you dismiss the banner without accepting, only the strictly necessary cookie that records your choice is stored, so that you are not asked again on every page.
You may withdraw your consent at any time, either through the cookie settings link in the site footer or by clearing this site’s cookies in your browser. Withdrawing consent is as easy as giving it, and it stops all future analytics collection. Withdrawal does not by itself erase data already collected, but you can request erasure under section 8 below.
The consent cookie is strictly necessary and is retained for twelve months. Google Analytics cookies are retained for up to fourteen months from your most recent visit.
5. Why this data is collected, and on what basis
Analytics data is processed on the basis of your consent, given through the banner described above, and is used for one purpose only: to understand which posts are read and how readers find the site, so that the writing can be improved. It is not used to profile you, to advertise to you, or to make any decision that affects you.
Comment data is processed on the basis of your consent, which you give by voluntarily submitting the comment form, and is used to publish your comment, to attribute it to you, to reply to you, and to prevent spam and abuse.
Server logs are processed as a legitimate and necessary part of operating and securing the website, to keep it running, to diagnose faults and to detect attacks and abuse.
Your personal data is not sold, rented, or used for any purpose other than those stated in this section.
6. Who your data is shared with
Google. Analytics data is processed by Google, which acts as a Data Processor for this site under the Google Analytics terms of service. Google’s handling of this data is governed by its own privacy policy at https://policies.google.com/privacy. You can prevent Google Analytics from collecting your data entirely by declining the consent banner, or by installing Google’s opt-out browser add-on at https://tools.google.com/dlpage/gaoptout.
The web host. The company that hosts mridved.com necessarily processes server logs and the contents of the site, including published comments, in order to serve the site to visitors.
Beyond these two, your personal data is not shared with anyone. It may be disclosed if disclosure is required by Indian law, by a court order, or by a lawful request from a government authority, and it may be disclosed where necessary to establish, exercise or defend a legal claim.
7. Transfer of data outside India
Google Analytics processes data on servers located outside India, and the web host may store data outside India. The DPDP Act permits the transfer of personal data outside India except to countries or territories that the Central Government has specifically restricted, and no data is transferred to any such restricted territory.
8. Your rights
As a Data Principal under the DPDP Act, you have the following rights over your personal data:
Right to information. You may ask for a summary of the personal data being processed about you, the processing activities undertaken, and the identities of anyone it has been shared with.
Right to correction and completion. You may ask for inaccurate or misleading personal data about you to be corrected, and for incomplete data to be completed or updated.
Right to erasure. You may ask for your personal data to be erased, unless it must be retained to comply with a legal obligation. Your comment and the email address attached to it will be deleted on request.
Right to withdraw consent. You may withdraw your consent to analytics or to the publication of your comment at any time, with effect from the moment of withdrawal.
Right to nominate. You may nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.
Right to grievance redressal. You may complain about how your data has been handled, as set out in section 11.
To exercise any of these rights, write to privacy@mridved.com describing what you want. Your request will be answered within ninety days. You may be asked for information reasonably necessary to confirm that the request genuinely comes from you, particularly before a comment is deleted or amended.
Please note that the DPDP Act also places duties on you as a Data Principal: you must not impersonate another person when providing your data, must not suppress material information, and must not raise a false or frivolous grievance.
9. How long data is kept
Comment data is kept for as long as the comment remains published on the site, and is erased when you ask for it to be erased or when the post it belongs to is taken down.
Analytics data is retained by Google for a maximum of fourteen months from your last visit, after which it is deleted automatically.
Server logs are retained by the host for a short operational period, ordinarily not exceeding ninety days, and are then overwritten.
Where personal data is no longer needed for the purpose it was collected for, and no law requires it to be kept, it is erased.
10. How your data is protected
The site is served over an encrypted HTTPS connection. Access to the site’s administration interface is protected by a strong, unique password and, where the platform supports it, by two-factor authentication. Access to analytics is restricted to the operator’s own Google account. Software, themes and plugins are kept updated so that known security flaws are patched.
No method of transmission or storage is completely secure, and no absolute guarantee of security can be given. In the event of a personal data breach affecting your data, the Data Protection Board of India and every affected person will be notified as required by the DPDP Rules.
11. Complaints and grievance redressal
If you are unhappy with how your personal data has been handled, write in the first instance to privacy@mridved.com. Your complaint will be acknowledged and a substantive response given within ninety days.
If your complaint is not resolved to your satisfaction, you have the right to escalate it to the Data Protection Board of India, which is the statutory authority established under the DPDP Act to hear such complaints.
12. Changes to this policy
This policy will be updated if the way this site handles data changes, for example if advertising or a newsletter is introduced. The effective date at the top of the page will change whenever that happens, and where a change materially affects your rights, fresh consent will be sought before the change takes effect. The version published on this page is always the version in force.