PrivacyNotice

01 Who this notice is from

The Data Fiduciary — the person who decides why and how your personal data is processed — is Sudeep Bagaria, an independent AI website and app developer, operating this personal portfolio website.

You are the Data Principal: the individual this personal data is about. You can reach the point of contact for this noticethrough the Contact page.

Data Fiduciary

Sudeep Bagaria — the individual who determines the purposes of processing on this site.

Data Principal

You — the individual whose personal data is being processed.

Personal data

Any information about an identifiable individual, in digital form.

Processing

Any operation performed on personal data — collecting, storing, viewing, deleting, and so on.

02 Scope of this notice

This notice applies to personal data processed in digital form when you visit this website. It also applies to personal data processed outside India if it is processed in connection with offering goods or services to individuals in India — as the DPDP Act provides.

This site is a static, single-page portfolio. It has no user accounts, no sign-in, no forms, no shopping cart and no payment processing.

03 What personal data is processed

Only the following is processed:

04 Cookies, tracking and advertising

• No cookies. This site does not set any cookies of its own — no session, no preference, no tracking cookies.
• No analytics. There is no analytics, no heat-mapping and no session recording on this site.
• No advertising. There are no ads, no remarketing pixels, and no behavioural profiling.
• No sharing for advertising. Personal data is never sold, rented, or shared with anyone for targeted advertising.

If any of this ever changes, this notice will be updated and the new practice will be introduced only on a lawful basis.

05 Third-party services

The typefaces on this site — Orbitron and Space Mono — are loaded from Google Fonts (fonts.googleapis.com and fonts.gstatic.com). When your browser fetches them, Google receives your IP address and standard browser or device information, processed under Google’s own privacy policy. You can prevent this entirely by blocking remote fonts; the site then falls back to fonts stored on your device.

Your hosting provider processes the server logs listed in section 03 on this site’s behalf. Beyond these, no third party receives personal data from this website.

06 Purpose and lawful basis

Personal data is processed only for the purposes stated in section 03, and never for an unrelated purpose. The lawful bases relied on are:

• Information you provide voluntarily for a purpose you choose — for example, writing to us.
• Uses necessary to provide what you have asked for — loading the page you requested and keeping it available and secure.
• Other legitimate uses permitted under section 7 of the DPDP Act, such as complying with a legal obligation.

Where processing rests on your consent, the consent is specific to the stated purpose and you may withdraw it at any time. Withdrawing consent does not affect processing that was lawful before the withdrawal.

07 Sharing and transfers outside India

Personal data is shared only with:

• The hosting and infrastructure provider that runs this site and holds its server logs;
• Google Fonts, as described in section 05;
• Anyone we are required by law to disclose to — a court, tribunal, or competent authority — or where disclosure is necessary to establish or defend legal rights.

Data may be processed outside India by these providers. The DPDP Act permits the transfer of personal data outside India, except to countries restricted for such transfer by notification of the Central Government. Should such a notification cover a provider used here, processing by that provider would stop.

08 Security and data breaches

Personal data is protected with reasonable security safeguards appropriate to a site of this kind — as section 8 of the DPDP Act requires — including transport encryption where the site is served over HTTPS, restricted access to the hosting account, and the fact that this site keeps no personal data stores beyond server logs and any correspondence you start.

If a personal data breach occurs, we will notify the Data Protection Board of India and every affected Data Principal, in the form and within the time prescribed by the DPDP Act and the Digital Personal Data Protection Rules, 2025.

09 Your rights as a Data Principal

You have the following rights over your personal data, and you can exercise any of them at no cost:

• Access — section 11. Ask for a summary of the personal data processed about you, the purposes it is processed for, the identities of the Data Fiduciaries and other persons with whom it has been shared, and the categories of that data.
• Correction and erasure — section 12. Have incomplete, inaccurate, or out-of-date personal data corrected, and have your personal data erased where it is no longer necessary for the purpose it was collected for.
• Grievance redressal — section 13. Raise a complaint and have it handled through an effective redressal mechanism.
• Nomination — section 14. Nominate another individual to exercise these rights on your behalf in the event of your death or if you are unable to do so yourself.

10 Your duties

The DPDP Act also places duties on Data Principals. In short, you should:

• Comply with applicable law and not exercise rights in a way that harms others’ rights;
• Not impersonate another person or suppress material information while giving personal data;
• Provide information that is verifiably true when it is needed to exercise a right;
• Not file a false or misleading complaint.

11 Children’s data

This website is not directed at children, and we do not knowingly process the personal data of any person under 18 years of age. No consent of a parent or guardian is sought or obtained, because no data is collected from children.

We do not track, behaviourally monitor, or advertise to children. If you believe a child has provided personal data to this site, tell us through the Contact page and it will be erased.

12 Grievance redressal and contact

If your grievance is not resolved to your satisfaction, you may file a complaint before the Data Protection Board of India in accordance with the DPDP Act.

13 Changes to this notice

This notice is reviewed whenever the way this site handles personal data changes. The “last updated” date at the top of the page always shows the most recent version, and material changes will be announced on the home page before they take effect.

The full text of the Act is available from the Ministry of Electronics and Information Technology (MeitY), and the Digital Personal Data Protection Rules, 2025 were notified on 14 November 2025 and phase in over time.