Who we are
Aeikyam, at aeikyam.org, decides why and how the personal data described here is processed. Under the Digital Personal Data Protection Act, 2023 we are the Data Fiduciary, and under the GDPR the controller. You can reach us at contact@aeikyam.org.
What we collect
- When you browse: we use no analytics, advertising or tracking tools and you need no account. Our web host and Cloudflare, which delivers and protects the site, process technical data such as your IP address, browser type and the pages you request, to serve the site and keep it secure. Cloudflare may set a strictly necessary security cookie.
- When you write to us through the contact form: your name, email address, phone number (optional) and message, together with the page you sent it from, the page that referred you, your browser type and any campaign tags in the link you followed.
- When you play a video: videos from YouTube load only after you press play, through YouTube's privacy-enhanced domain (youtube-nocookie.com). From then on YouTube (Google) processes data under its own privacy policy.
- When you play audio: the recordings stream from the satsang's own storage (Amazon Web Services), which processes technical data such as your IP address to deliver the file.
Why we use it, and on what basis
- To read and answer your message: on the basis of your consent, which you give by ticking the consent box on the form (DPDP Act, section 6; GDPR, article 6(1)(a)).
- To run the site and protect it from abuse: a legitimate use and legitimate interest in keeping the site available and secure.
- We do not use your data for advertising or profiling, and we never sell or rent it.
Who processes it for us
Only the service providers we need, each bound to use the data only to provide their service: our web hosting provider, Cloudflare (delivery and security), Supabase (the database that stores form messages) and an email delivery service that forwards your message to us. Some of these providers may process data outside India, as the DPDP Act permits, and outside your country if you visit from abroad; where the GDPR applies, such transfers rely on the safeguards those providers offer, such as standard contractual clauses.
How long we keep it
Form messages are kept only as long as we need to answer them and for up to 24 months afterwards, then deleted. Technical logs kept by our hosting and network providers are deleted on their own schedules, usually within a few weeks. You can ask us to delete your message sooner at any time.
Your rights
You can write to contact@aeikyam.org at any time to:
- get a summary of the personal data we hold about you and how we use it;
- have it corrected, completed or updated;
- have it erased;
- withdraw your consent, as easily as you gave it (this does not affect what was done before you withdrew it);
- nominate another person to exercise these rights for you if you die or become unable to (DPDP Act, section 14);
- if you are in the EU or UK, also restrict or object to processing, receive your data in a portable form, and complain to your data protection authority.
Children
This site is meant for adults. We do not knowingly collect personal data from anyone under 18 without the consent of a parent or lawful guardian. If you believe a child has written to us, contact us and we will delete the message.
Security
The site is served only over HTTPS. Form messages are stored in an access-controlled database that only the people who answer them can open. We follow reasonable security practices and procedures as required by the IT Act 2000 and the IT Rules 2011.
Grievance Officer
For any complaint or question about your personal data, write to the Grievance Officer, Aeikyam, at contact@aeikyam.org. We acknowledge every grievance within 7 days and resolve it within one month of receiving it, as the IT Rules 2011 (rule 5(9)) require.
If you are not satisfied with our answer, you may complain to the Data Protection Board of India once you have used this route, or, in the EU or UK, to your data protection authority.
Changes to this policy
If we change how we handle personal data, we will update this page and the date at its top.