Privacy Policy

1. Who is responsible for your data

Bodapati Bharat Chandra, an individual based in Hyderabad, Telangana, India, runs bharatchandra.me and decides how personal data is used here. In legal terms I am the data fiduciary under Indian law and the controller under the GDPR. Contact: bc833498@gmail.com.

2. What I collect and why

When you use the contact form:

• Your name, email address, and message.
• Used only to read and reply to your message, and to send you one confirmation email.
• Sharing this is voluntary. Without it I cannot reply to you, but the rest of the site works normally.

When you visit any page:

• Technical data such as your IP address, browser type, the page requested, and the time of the request.
• Used to deliver the site, keep it secure, and limit abuse of the contact form.

If you accept analytics cookies:

• Google Analytics records how the site is used, such as pages viewed, approximate location, device type, and how the site performs.
• It only runs if you choose Accept. Declining changes nothing else on the site.

Please do not send passwords, financial details, health information, or other sensitive personal data through the form. I do not ask for it.

3. Legal basis

• India: data you voluntarily provide for a specified purpose (Digital Personal Data Protection Act, 2023, section 7(a)), and consent for analytics. I also follow the Information Technology Act, 2000 and the SPDI Rules, 2011 while they remain in force.
• EU and UK: legitimate interests in replying to enquiries and keeping the site secure (GDPR Article 6(1)(f)), steps you request before a possible contract (Article 6(1)(b)), and consent for analytics (Article 6(1)(a)).

4. Cookies and local storage

• Necessary: your browser stores your theme and your analytics choice. These do not identify you, and they stay on your device.
• Analytics (optional): Google Analytics cookies, set only after you accept. You can change your mind at any time using Cookie settings in the site footer, when analytics is enabled.

5. Who receives your data

I do not sell your personal data, share it for advertising, or use it to train AI models. It is only handled by:

• Vercel: hosts the site and processes request data.
• Brevo: delivers contact form emails.
• Google: email inbox where messages arrive, and Google Analytics if you accept it.
• Authorities: only where the law requires it.

Links to sites such as GitHub, LinkedIn, and Medium, and to projects, leave this site. Their own privacy policies apply.

6. International transfers

These providers may process data outside your country, including in India, the European Union, and the United States. Indian law allows this except to any country the Government restricts. For data from the EU or UK, I rely on the safeguards these providers offer, such as Standard Contractual Clauses or an adequacy decision where one applies. You can ask me for details of these safeguards.

7. How long I keep it

• Contact messages: up to 24 months after our last exchange, then deleted, unless the law requires me to keep them longer or you ask me to delete them sooner.
• Contact form rate-limit records: held briefly in server memory, for about 10 minutes.
• Hosting logs, email delivery records, and analytics data: kept for the periods set by each provider.

8. Your rights

To use any of these rights, email bc833498@gmail.com. I may need to confirm it is you. I aim to respond within one month, and it is free.

• India: access a summary of your data and who received it, correct, complete, update, or erase it, withdraw consent, get grievances resolved, and nominate someone to exercise your rights if you die or become incapacitated.
• EU and UK: access, correct, or erase your data, restrict or object to its use, receive a portable copy, withdraw consent at any time, and complain to your data protection authority.
• California and similar US state laws: know what is collected, and ask to delete or correct it, without discrimination for doing so. I do not sell or share personal data as those laws define it.

Withdrawing consent does not affect anything done lawfully before you withdrew it.

9. Grievance Officer

Bodapati Bharat Chandra, Hyderabad, Telangana, India. Email: bc833498@gmail.com. Grievances are addressed within one month. If you are in India and are not satisfied with the outcome, you may approach the Data Protection Board of India once the relevant provisions apply.

10. Children

This site is for professional contact and is not aimed at children. If you are under 18, please ask a parent or guardian before using the contact form. If you believe a child has sent me personal data without that permission, contact me and I will delete it. I do not track or target children.

11. Security and automated decisions

The site uses HTTPS, security headers, and limits on contact form use, and access to messages is restricted to me. No system is perfectly secure. If a breach affects you, I will notify you and the authorities where the law requires it. No decisions with legal or similar effects are made about you by automated means.

12. Changes

I may update this policy as the site or the law changes. The date at the top shows the latest version. See also the Terms and Conditions.