Privacy Notice & Data Protection Policy

1. Overview & Data Controller Identification

This Privacy Notice governs the personal data processing activities conducted by Habitwala Inc. ("Habitwala", "we", "us", or "our") on the publishing platform located at blog.habitwala.in. We act as a Data Fiduciary / Data Controller under the Digital Personal Data Protection (DPDP) Act 2023 and EU General Data Protection Regulation (GDPR).

2. Categories of Personal Data Collected & Purpose

We process minimal personal data exclusively for specified, lawful purposes:

• Email Newsletter Subscription: When you voluntarily subscribe via our subscription form, we collect your email address solely to deliver technical articles and release updates.
• Privacy-First Telemetry: We utilize Cloudflare Web Analytics (a cookie-less beacon) to aggregate anonymous site metrics without tracking individual Data Principals across external sites.

3. Statutory Disclosures under India DPDP Act 2023

In accordance with Section 6(5) and Section 13 of the DPDP Act 2023, you are hereby notified of your statutory Data Principal Rights:

• Right to Access: You have the right to request a summary of personal data being processed.
• Right to Correction & Erasure: You may request the correction of inaccurate data or complete erasure (Right to be Forgotten) of your email address from our subscriber records.
• Right to Nominate: You may designate an authorized representative to exercise data rights in the event of incapacity.
• Consent Withdrawal: You may withdraw newsletter consent at any time via the one-click "Unsubscribe" link in any email footer.

5. Data Retention & Security

Subscriber email addresses are retained until you request unsubscription or erasure. System logs are retained for security auditing in accordance with Indian statutory requirements. All data in transit is protected using TLS 1.3 encryption.