This policy explains what personal data kadiriraghuvamsi.com collects, why, how long it is kept and the choices you have. It is written to meet India’s Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, and, for visitors in the European Union and the United Kingdom, the GDPR and the UK GDPR.
| Who is responsible | Raghu Vamsi Kadiri, Hyderabad, Telangana, India, as the data fiduciary |
| What is collected | What you send by email or WhatsApp, comments, email subscriptions, and the technical data every browser sends |
| Why | To reply, to plan and deliver engagements, to keep the records the law requires and to run a secure website |
| Never | Sold, used for advertising or profiling, or used to train AI models |
| How long | Enquiries that do not lead to an engagement: up to 24 months. Engagement records: as long as the law requires |
| Your rights | A summary of your data, correction, erasure, withdrawal of consent, grievance redressal and nomination, and the GDPR rights where they apply |
| How to ask | hi@kadiriraghuvamsi.com, with “Privacy request” in the subject line |
Who is responsible for your data
This website is run by Raghu Vamsi Kadiri in his personal capacity, from Hyderabad, Telangana, India. For personal data collected through this website he is the data fiduciary (the “controller” under the GDPR): the person who decides why and how the data is used.
Privacy questions, requests and complaints: hi@kadiriraghuvamsi.com, with “Privacy” in the subject line. This is also the contact for grievances under the DPDP Act.
Marpu Foundation and OurVolunteer.com are separate organisations with their own websites and privacy policies. If you use marpu.org or ourvolunteer.com, their policies apply there.
What we collect
Information you give us
- Email and WhatsApp: your name, contact details, organisation and role, details of your event or project such as date, city, audience, format and budget range, and anything you write in the message. This website has no enquiry forms.
- Comments on articles, where comments are open: your name, email address, the comment and any website you add.
- Email subscriptions, if you choose to follow the blog by email: your email address.
Information collected automatically
- Technical data your browser sends when you visit, such as IP address, browser and device type, pages visited, the referring page and the time of the visit. Our hosting provider processes this to deliver the site, keep it secure and count visits.
- Cookies, as described in the cookie policy.
What we do not want
Please do not send sensitive information through this website, such as bank or card details, government ID numbers, health information or personal data about children. We do not need it and will delete it.
Why we use it
- To reply to your enquiry and to plan, confirm and deliver an engagement such as a talk, workshop, advisory project, jury or interview.
- To keep records of engagements, invoices and correspondence that the law requires us to keep, such as for tax.
- To keep the website secure and working, and to understand which pages are read, in aggregate.
- To send you updates, only if you have asked for them. You can unsubscribe at any time.
Under the DPDP Act we rely on your consent, on the use of information you voluntarily provide for a specific purpose, and on compliance with law. For visitors covered by the GDPR, we rely on your consent, on steps you ask us to take before entering a contract, on performing a contract, on legal obligations, and on our legitimate interest in running a secure and useful website.
We do not sell personal data, and we do not use it for advertising or profiling.
Who we share it with
Only with service providers that help us run the website and handle enquiries, and only for those purposes:
- Automattic (WordPress.com and Jetpack): website hosting, security, statistics, comments and email subscriptions.
- Our email provider: receiving and storing email.
- Meta (WhatsApp): if you choose to message on WhatsApp.
- Razorpay: if we send you a payment link for a paid engagement. Payments are processed by Razorpay; we never see your card or bank details.
We may also share information with professional advisers such as our chartered accountant or lawyer when needed, and with authorities when the law requires it. If your enquiry is really for Marpu Foundation or OurVolunteer.com, for example a CSR partnership, we will tell you and pass it on only with your agreement.
Where your data is stored
Our service providers may store data on servers outside India, including in the United States and the European Union. The DPDP Act permits this, except to any country the Government of India restricts. For visitors covered by the GDPR, these transfers rely on safeguards our providers offer, such as standard contractual clauses or adequacy decisions.
How long we keep it
- Enquiries that do not lead to an engagement: up to 24 months after our last contact, then deleted.
- Records of engagements, contracts and invoices: for as long as tax and other laws require.
- Comments: for as long as the comment stays published, or until you ask us to remove it.
- Email subscriptions: until you unsubscribe.
- Server logs and statistics: for the periods our hosting provider sets.
Your rights
Under India’s DPDP Act
- To get a summary of your personal data we process and how we process it.
- To have your data corrected, completed, updated or erased.
- To withdraw your consent at any time, as easily as you gave it. Withdrawal does not affect processing that happened before it.
- To have your grievances addressed.
- To nominate another person to exercise your rights if you die or become unable to.
The Act also asks you to give accurate information and not to file false or frivolous complaints.
Under the GDPR and UK GDPR
If these laws apply to you, you also have the rights of access, rectification, erasure, restriction, data portability and objection, and you can complain to your data protection authority.
How to use your rights
Write to hi@kadiriraghuvamsi.com with “Privacy request” in the subject line. We may ask you to confirm your identity. We aim to respond within one month, and in any case within the time limits the law sets; under the DPDP Rules, grievances are resolved within 90 days at the latest. If you are not satisfied with our response, you may complain to the Data Protection Board of India or, under the GDPR, to your supervisory authority.
Children
Students and young people are welcome to read everything on this website. We do not knowingly collect personal data about children without the verifiable consent of a parent or lawful guardian, as the DPDP Act requires, and we do not need any to answer a question. Schools and colleges usually write to us through a teacher or an organiser. If you think a child has sent us personal data, tell us and we will delete it.
Security
We use reasonable safeguards: access to enquiries is limited to Raghu and the few people who help him manage engagements, accounts use two-factor authentication, and our providers encrypt data in transit and at rest. No system is perfectly secure. If a personal data breach affects you, we will tell you and the Data Protection Board of India as the law requires.
AI tools and your data
We do not paste personal details from enquiries into consumer AI chatbots, and we do not use your personal data to train AI models. See the AI use policy.
Links to other websites
This website links to other sites, including marpu.org, ourvolunteer.com, news outlets and social networks. Their privacy practices are their own.
Changes to this policy
We will update this policy when our practices or the law change. The date at the top shows the latest version. Significant changes will be noted on this page.
Contact
Raghu Vamsi Kadiri, Hyderabad, Telangana, India. Email: hi@kadiriraghuvamsi.com.