Legal & Data Protection
A plain-language explanation of what data is collected when you visit mahendrar.com, how it is used, and what you can do about it. Your data is never sold. You can request access, corrections, or deletion at any time.
Last updated: 01 June 2026
Applies to: mahendrar.com
Data is never sold
GDPR & DPDP Act 2023 compliant
Quick Summary
I collect only what is needed to respond to enquiries and improve the site — name, email, optional phone number, and basic analytics through GA4. Your data is never sold or rented. You can request access, correction, or deletion at any time by emailing me.
What is collected
Name, email address, phone number if provided (used to respond via call or WhatsApp), form messages, and basic analytics data including pages visited, session duration, and traffic source. Technical data such as IP address and browser type is also collected automatically to help improve site performance.
Why it is used
To respond to your enquiries and service requests, improve website content and performance, analyse usage patterns, and maintain site security. Your data is never sold or rented to any third party. It is shared only where necessary to deliver a service you have requested or to meet a legal obligation.
Your control
You have the right to access the data held about you, correct any inaccuracies, or request deletion — at any time, without reason. Email marketing.with.mahe777@gmail.com with your request. All requests are acknowledged within 72 hours and fully responded to within 30 days.
Legal note: This policy is written for clarity and transparency. For formal legal compliance review specific to your jurisdiction, professional legal advice is recommended. This document does not constitute legal advice.
Introduction
Mahendra R is a Bengaluru-based digital marketing consultant and trainer, operating as a Data Fiduciary under India’s Digital Personal Data Protection Act 2023 and as a data controller under GDPR for visitors from the EU and UK. This Privacy Policy explains exactly how personal information is collected, used, stored, and protected when you visit or interact with mahendrar.com.
This policy applies to every page, form, and resource on this site — including the AI Strategy Hub, AI Image Hub, and AI Video Hub. If any of these tools involve processing your uploaded content through third-party AI services, those services are disclosed in the Third-Party Tools section. For the terms governing use of this site, see the Terms & Conditions page.
Information I Collect
Personal information you provide:
Name
Email address
Phone number, if provided — used to respond to your enquiry via call or WhatsApp
Anything voluntarily submitted through contact forms or service enquiries
Usage and technical information collected automatically:
IP address
Browser type and device information
Pages visited and time spent on the site
Referring source
Session duration and interaction patterns
This usage data is collected automatically through standard analytics tools to understand how visitors use the site and to improve its content and performance. It is not used to personally identify individual visitors.
How Your Information Is Used
Information collected is used to:
Respond to enquiries or service requests submitted through the site
Provide services, resources, or information you have requested
Improve website content, performance, and user experience
Analyse traffic and usage patterns to make the site more useful
Maintain website security and prevent misuse
Your personal information is never sold or rented. It is not shared with third parties except to deliver the services described above, to meet legal obligations, or to protect against misuse of the site. Third-party services used are listed in the Third-Party Tools section.
Legal Basis for Processing
Personal data is processed on one of the following bases:
Consent — when you submit a contact form, accept cookies, or voluntarily share information through the site.
Legitimate interest — to improve website performance and communication quality, where this does not override your rights.
Legal obligation — where processing is required by applicable law.
Withdrawing consent: If processing is based on your consent, you can withdraw it at any time by emailing marketing.with.mahe777@gmail.com. Withdrawal does not affect the lawfulness of any processing that took place before withdrawal.
Cookies & Analytics
This site uses cookies and similar technologies to enhance your experience, analyse traffic, and improve performance. Google Analytics 4 (GA4) is used to understand aggregated site behaviour — pages visited, session duration, and traffic sources. This data is aggregated and not intended to personally identify individual visitors.
Analytics cookies — Google Analytics 4, used for performance and behaviour data. Retained for up to 14 months under GA4 default settings.
Functional cookies — used for site preferences and form behaviour.
For visitors from the EU and UK, analytics cookies require your prior consent under GDPR. A cookie consent banner should be present when accessing the site. You can manage or disable cookies at any time through your browser settings or by using the consent banner controls. Disabling analytics cookies does not affect your ability to use the site.
Data Protection & Security
Your information is protected using industry-standard measures, including:
Access controls to prevent unauthorised entry
Encrypted data transmission through HTTPS and SSL
Secure hosting infrastructure
Regular review of data handling practices
No system is completely immune to security risks. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, you will be notified without undue delay in accordance with applicable law. Supervisory authorities will be informed within 72 hours as required under GDPR.
What I commit to is that your data is handled responsibly, reviewed regularly, and any breach response is handled transparently.
Third-Party Tools & Links
This website uses third-party services that may process limited user data to support functionality, analytics, and performance:
Google Analytics 4 — website traffic and behaviour analytics
Framer — website hosting and content delivery
Gmail / Google Workspace — contact form submission processing
If any AI tools on the site (AI Strategy Hub, AI Image Hub, AI Video Hub) process user-submitted content through third-party AI services, those services will be listed here as they are activated. Each provider operates under its own privacy policy and terms of service.
This site also links to external platforms including LinkedIn, Instagram, and AI tools referenced across resources. Once you leave mahendrar.com, this policy does not apply, and I am not responsible for the privacy practices of third-party sites.
GDPR & DPDP Act — Your Rights
For visitors in the EU, UK, or regions governed by GDPR:
You have the following rights under the General Data Protection Regulation:
Right of access — request a copy of the personal data held about you.
Right to rectification — request correction of inaccurate or incomplete data.
Right to erasure — request deletion of your personal data, subject to legal retention requirements.
Right to restriction of processing — request that processing is limited in certain circumstances.
Right to data portability — receive your data in a structured, machine-readable format where technically feasible.
Right to object — object to processing based on legitimate interest at any time.
Right to withdraw consent — withdraw consent for any consent-based processing at any time. See the Legal Basis section for how to do this.
Right to lodge a complaint — if you believe your data has been processed unlawfully, you have the right to lodge a complaint with your local data protection supervisory authority (for example, the ICO in the UK or your relevant EU DPA).
All requests will be acknowledged within 72 hours and responded to within 30 calendar days. Extensions of up to 60 additional days may apply for complex requests, with prior notice.
For users in India — Digital Personal Data Protection Act 2023 (DPDP Act):
Mahendra R operates as the Data Fiduciary under the DPDP Act 2023. You have the following rights as a Data Principal:
Right to access information — request a summary of what personal data is held and how it is being processed.
Right to correction and erasure — request that inaccurate, incomplete, or outdated data is corrected or erased.
Right to grievance redressal — raise a grievance about data processing, which will be addressed within the timeframe specified under the Act. If unresolved, you may approach the Data Protection Board of India.
Right to nominate — nominate another individual to exercise your data rights on your behalf in the event of your death or incapacity.
To exercise any right, email marketing.with.mahe777@gmail.com. If a grievance is not resolved to your satisfaction within 30 days, you may approach the Data Protection Board of India at dpboard.gov.in.
Cross-border data transfers: If you access this site from outside India, your personal data may be processed in India where I am based. For EU and UK visitors, this transfer is handled in accordance with applicable GDPR transfer mechanisms. If you have questions about how your data is handled across borders, contact me at the address below.
Data Retention
Personal information is retained only as long as necessary to fulfil the purpose for which it was collected, or to meet legal and operational requirements. Approximate retention periods:
Contact form submissions — retained for up to 12 months from the date of last interaction, then securely deleted.
Email correspondence — retained for the duration of any active engagement or enquiry plus 12 months.
Analytics data — retained per Google Analytics 4 default settings, up to 14 months.
Legal or compliance records — retained for as long as required by applicable law.
When data is no longer needed and no legal obligation requires its retention, it is securely deleted. You can request early deletion at any time by emailing the contact address below.
Children’s Information
This website is not intended for individuals under the age of 18. In line with India’s Digital Personal Data Protection Act 2023, Mahendra R does not knowingly collect or process personal data from anyone under 18 without verified parental or guardian consent.
If you believe a minor has submitted personal information through this site, please contact marketing.with.mahe777@gmail.com immediately. Any such data will be removed without delay upon verification.
Changes to This Policy
This policy may be updated periodically to reflect changes in practice, tools, applicable law, or regulatory requirements. The date at the top of this page reflects the most recent revision.
For material changes that affect how your data is used, a notice will be placed on this page and the revision date will be updated. Continued use of the site after an update constitutes acceptance of the revised policy. If you disagree with any changes, you may request deletion of your data before continuing to use the site.
How to Contact Me About Your Data
For any questions, concerns, correction requests, access requests, or deletion requests related to this policy or your personal data, contact:
Mahendra R
Data Fiduciary — Digital Marketing Consultant & Trainer, Bengaluru, India
All data requests are acknowledged within 72 hours and fully responded to within 30 days. For unresolved grievances under the DPDP Act 2023, you may escalate to the Data Protection Board of India.
Whether you want to know what data is held about you, request a correction, or ask for deletion — just reach out. All data requests are acknowledged within 72 hours and fully responded to within 30 days. No forms, no waiting queues.
This policy is written for clarity and transparency. For formal legal compliance advice specific to your jurisdiction or business, professional legal review is recommended. This document does not constitute legal advice. — Last reviewed: 24 June 2026