Privacy Policy

Last updated: 7 October 2026

Adiveda (“we”, “us”, or “our”), operating the website adiveda.in (the “Site”), respects your privacy and is committed to protecting your personal data. This Privacy Policy explains what information we collect, why we collect it, how we use it, who we share it with, and the rights you have over your information.

This policy has been written with regard to the Digital Personal Data Protection Act, 2023 (“DPDP Act”) of India, the General Data Protection Regulation (EU/UK GDPR), and the California Consumer Privacy Act as amended by the CPRA (collectively, “applicable data protection laws”).

If you do not agree with this policy, please do not use the Site.

1. Who we are

For the purpose of the DPDP Act, the GDPR, and similar laws, the data fiduciary / controller is:

Adiveda
2, Kaulagarh Road, Kishan Nagar Chowk, Dehradun, Uttarakhand, 248001, India
Email: contact@adiveda.in

If you are located in the European Economic Area or the United Kingdom and need to contact us about data protection matters, please use the same email address.

2. What information we collect

We collect personal data in three ways: information you give us, information we collect automatically, and information we receive from third parties.

a. Information you give us

  • Consultation enquiries: When you book a consultation, write to us, or fill in any contact form, we collect the information you choose to give us — typically your name, email address, phone number, date / time / place of birth, and any context you share about your question. Astrological birth data is sensitive to you personally; we treat it as confidential and do not share it.
  • Article updates: If you email us asking to be told when new articles are published, we keep your email address for that purpose only, until you ask us to stop.

b. Information collected automatically

When you visit the Site, the following is collected automatically:

  • Server logs. Our hosting provider records your IP address, browser type, the page requested and the date and time, for security and troubleshooting.
  • Google Analytics 4. Records, in aggregate, the pages you view, the page you came from, approximate location (derived from your IP address, which Google Analytics 4 does not store), device and browser type, and interactions such as outbound clicks (including clicks on affiliate links — see our Affiliate Disclosure).
  • Google AdSense. The Site carries Google advertising code. Google and its partners may use cookies, web beacons, your IP address and similar technical information to serve and measure advertisements, as described in Section 5.

Which cookies are used, and how this differs for visitors in the EEA, the United Kingdom and Switzerland, is set out in our Cookie Policy.

c. Information from third parties

We receive very little information about you from anyone else:

  • If you pay for a report or consultation through a payment link we send you, the payment provider tells us the transaction reference and whether the payment succeeded. We do not receive your card or bank details.
  • If you contact us by email, telephone or a messaging service, we receive what you choose to send.

3. Why we collect it (purposes of processing)

We use your personal data for the following purposes:

  • To deliver our services — preparing and conducting your consultation, sending the written summary, answering your questions.
  • To take payment — processing transactions through our payment partners.
  • To communicate with you — replying to your messages, telling you about new articles if you have asked us to, sending essential service updates.
  • To improve the Site — understanding which articles are useful, where readers get stuck, how to design better pages.
  • To keep the Site secure — detecting fraud, abuse, scraping, and attempted intrusions.
  • To comply with the law — meeting tax, accounting, and other statutory obligations.

We do not use your personal data to make automated decisions that have a legal or significant effect on you, and we do not sell your personal data to anyone.

4. Legal basis for processing

Depending on the activity, our legal basis for processing your personal data is one of the following:

  • Your consent — for marketing emails, optional cookies, and any “sensitive personal data” you choose to share (such as date and time of birth used for an astrological reading);
  • Performance of a contract — to deliver a consultation or product you have ordered;
  • Legitimate interests — basic analytics, site security, fraud prevention, and replying to enquiries you initiate;
  • Legal obligation — tax, accounting, regulatory requests;
  • Vital interests — extremely rarely, where someone’s life or safety is involved.

Under India’s DPDP Act, where consent is the basis, we will request specific, informed and unambiguous consent before processing your data and you may withdraw that consent at any time.

5. Who we share your data with

We share personal data only with the categories of recipients listed below, and only as needed:

  • Service providers acting as data processors on our behalf — for example: web hosting, email delivery, analytics and advertising (Google), and payment providers. These providers are bound by contracts requiring them to protect your data and only use it for the purposes we specify.
  • Government, regulators, and law-enforcement authorities when we are legally required to disclose, or to protect our legal rights.
  • Professional advisors such as our lawyers, accountants, or auditors, under duties of confidentiality.
  • Successors in the event of a merger, acquisition, or sale of all or part of our business.

We do not sell or rent your personal data to third parties for their own marketing purposes.

Advertising and analytics partners

The Site uses Google Analytics and Google AdSense, provided by Google LLC / Google Ireland Limited.

  • Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this Site or to other websites.
  • Google’s use of advertising cookies enables it and its partners to serve ads to you based on your visits to this Site and/or other sites on the Internet.
  • Depending on your location and choices, ads may be personalised or non-personalised. You may opt out of personalised advertising at adssettings.google.com, or opt out of many vendors’ use of cookies for personalised advertising at aboutads.info/choices.
  • To learn how Google uses information from sites that use its services, see policies.google.com/technologies/partner-sites.

We do not pass your name, email address, phone number, birth details or the content of your enquiry to Google or to any advertiser. The bookshop links to Amazon as an affiliate; Amazon’s own cookies apply once you are on Amazon’s site.

6. International transfers

Google (analytics and advertising) and some of our other service providers may process data outside India, including in the United States and the European Union. When your data is transferred outside your country of residence, we rely on appropriate safeguards such as the Standard Contractual Clauses approved by the European Commission, adequacy decisions where available, and equivalent measures recognised under the DPDP Act.

7. How long we keep your data

These are the retention periods we actually operate. They are our own business policy — not a statutory requirement — and they are applied automatically by a scheduled process on this site.

  • Enquiries that do not proceed to a consultation: removed 90 days after the enquiry.
  • Operational details (your message, phone number, and how you reached us): removed after 6 months, while the remainder of the record continues under its own period.
  • Completed readings: your name, email and birth details (date, time and place of birth, latitude, longitude, timezone), together with the reading delivered to you, are kept for 24 months from delivery — so we can answer follow-up questions and prepare a further reading without asking you for the same details again.
  • Computed charts are removed at the same point, since they can be re-derived from the birth details.
  • Web server logs are retained by our hosting provider for security and debugging.

When a record reaches the end of its period it is permanently deleted from the site database together with the information attached to it. We keep only a non-identifying log entry recording that a deletion occurred; it contains no name, email, phone number, birth details or reading content.

You can ask us to delete your information sooner at any time. Write to contact@adiveda.in with the subject “Data erasure request”. We will confirm receipt of your request and tell you once it has been actioned.

We do not take payment through this website, so we hold no card, bank or transaction records here.

8. Your rights

Subject to applicable law and to verification of your identity, you have the following rights over your personal data:

  • Right of access — ask us for a copy of the personal data we hold about you.
  • Right of correction — ask us to fix data that is inaccurate or incomplete.
  • Right of erasure — ask us to delete your data (“right to be forgotten”). We may retain some data where the law requires us to.
  • Right to withdraw consent — where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of past processing.
  • Right to restrict / object to certain processing.
  • Right to data portability — receive your data in a structured, commonly-used, machine-readable format.
  • Right to nominate (DPDP Act, India) — nominate any other individual to exercise your rights in the event of your death or incapacity.
  • Right to grievance redressal (DPDP Act, India) — see Section 12 below.
  • Right to non-discrimination (California, USA) — we will not discriminate against you for exercising your privacy rights.

To exercise any of these rights, write to contact@adiveda.in. We will respond within thirty (30) days, or sooner where required by law.

9. Security

We use appropriate technical and organisational measures to protect your data — encrypted connections (HTTPS / TLS), encrypted storage where possible, access controls, regular software updates, and the principle of least privilege. No system on the internet is perfectly secure; if a breach affecting your personal data ever occurs we will notify you and, where required, the relevant authority (the Data Protection Board of India, supervisory authorities in the EU, and so on) within the timeframes set by law.

10. Children’s privacy

The Site is intended for users who are at least eighteen (18) years old. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please write to us and we will delete it.

11. Changes to this policy

We may update this policy from time to time — for example, when we add a new feature, change a service provider, or in response to a change in law. The “Last updated” date at the top of this page tells you when it was last revised. Material changes will be highlighted on this page; where required by law, we will obtain fresh consent.

12. Grievance officer (India) & contact

In accordance with the Information Technology Act, 2000, the rules made thereunder, and the DPDP Act, 2023, the grievance officer for Adiveda is:

Name: DIKSHA TIWARI
Designation: Grievance Officer, Adiveda
Email: grievances@adiveda.in
Address: 2, Kaulagarh Road, Kishan Nagar Chowk, Dehradun, Uttarakhand, 248001, India

The Grievance Officer will acknowledge your complaint within forty-eight (48) hours and aim to resolve it within thirty (30) days.

If you are not satisfied, you may file a complaint with the Data Protection Board of India (once operational) or the data protection regulator in your country of residence.

For all other questions, please write to contact@adiveda.in.