Privacy policy
Last updated:
This policy explains what personal data Divya Panchangam collects, why, who we share it with, how long we keep it and the rights you have. It covers www.divyapanchangam.com, its Hindi edition, our emails and our WhatsApp service.
Who we are
Divya Panchangam is published by Kael Tripton Ltd, a company registered in England and Wales (company number 17177071; ICO data-protection registration ZC135439), registered office 71-75 Shelton Street, London WC2H 9JQ, United Kingdom. We are the controller of the personal data described here, except where we say a partner is its own controller (for example a payment provider).
Privacy contact (data protection lead and grievance officer): hello@divyapanchangam.com. Write to us about anything in this policy. We reply within one month, and within the shorter periods Indian or US law may set.
What we collect, feature by feature
We collect only what each feature needs. You can read the panchang, calendars, festival pages, rashifal, news and most tools without giving us any personal data.
| Feature | What we collect | Why |
|---|---|---|
| Browsing the site | IP address, browser and device type, pages viewed, referring page. Hosting logs are kept briefly by Vercel. | Delivering pages, security and abuse prevention, basic statistics. |
| Your city | The city you choose, stored in your browser. Your approximate country from your IP address, used to pick the right consent banner and currency. | Showing the panchang for your place; showing prices in your currency. |
| Kundli, matching and other tools | Birth date, time and place you type in. | Computing the chart. It is sent to our compute service and not stored unless you save the chart to your account. A shareable link keeps the birth details only inside that link. |
| Account | Email address or mobile number, name if you give it, sign-in method (email link, Google or SMS code). | Signing you in, saved charts, orders, bookings and preferences. |
| Newsletter | Email address, city, language, the time you confirmed. | Sending the daily panchang email you asked for. Every email has a one-click unsubscribe. |
| Orders and bookings | Name, email, phone, delivery address, items bought, amounts. For pujas: sankalp details you give (names, gotra, nakshatra, intention). For at-home pujas: the address and time. | Performing the contract: fulfilment, delivery, the puja itself, receipts, refunds, tax records. |
| Online pujas (Puja Room) | Your join link, attendance, and the session recording. | Holding the session and giving you the recording. |
| Payments | Handled by Stripe or Dodo Payments on their own pages. We receive the payment status, the last four card digits and the country, never full card numbers. | Taking payment, fraud checks, refunds. |
| Pandits, temples, sellers and vendors | Listing details, photos, phone/WhatsApp number, service areas, identity and business verification (KYC) documents, bank or payout details. | Running the marketplace, verifying listings, paying you. |
| Your WhatsApp number and the messages you send to our business number. | Answering you, onboarding pandits, booking reminders and rating requests. | |
| Contact forms and email | What you write, and your email address. | Replying to you. |
| Ratings | Your three scores, optional 140-character comment and first name. | Showing trustworthy ratings; moderation. |
| Analytics (with consent where required) | Pages and tools used, approximate location, device, a random visit id. | Understanding what readers use. See Cookies. |
| Advertising (with consent where required) | Cookie ids and ad interactions, collected by Google. | Paying for a free site. See “Advertising” below. |
We do not collect special-category data (health, religion as a data field, caste, biometrics) as such. Sankalp details such as gotra are given by you for the ritual, used only for that booking and never used to filter or rank pandits.
How we use data, and our legal bases (UK GDPR)
- Contract: accounts, orders, bookings, online pujas, deliveries, payouts to sellers, customer service.
- Consent: analytics and advertising cookies in the UK/EU/EEA, India and most other countries; personalised ads; the newsletter; marketing emails. You can withdraw consent at any time through Privacy choices in the footer, or through the unsubscribe link.
- Legitimate interests: security and fraud prevention, keeping the service working, improving our computed content, handling disputes, moderating ratings. We balance these against your rights and you can object (see “Your rights”).
- Legal obligation: tax and accounting records, responding to lawful requests, verifying sellers where the law requires it.
We do not make decisions that have legal or similarly significant effects on you based solely on automated processing. Pandits are matched to Puja Room bookings automatically, by availability, language and tradition, and staff can override every assignment.
Advertising
We show ads through Google AdSense. In the UK/EU/EEA we either ask for your consent through our own banner, or through Google’s certified consent message where that is switched on. In India and most other countries we ask first. In the US we show non-personalised ads by default and use personalised ads only if you allow them.
- Non-personalised ads use context (the page you are reading) and may use cookies for frequency capping and fraud prevention.
- Personalised ads also use your browsing across sites to choose ads.
You can change your choice at any time with Privacy choices in the footer. Google’s use of data is described at policies.google.com/technologies/ads. Ads never appear in the first screen of our computed data pages, and advertisers have no influence over editorial content (see Editorial standards).
Who we share data with
We use these providers (“processors”) to run the service. Each processes data only on our instructions under a data processing agreement, unless we say it acts as its own controller.
| Provider | What for | Where |
|---|---|---|
| Supabase | Database, sign-in, file storage | India (Mumbai region) |
| Vercel | Website hosting and delivery | Global edge network; USA |
| Fly.io | Chart and kundli computation service | USA / EU |
| Google Analytics 4 | Visit statistics (with consent where required) | USA / global |
| Google AdSense | Advertising (see above). Google is a joint or independent controller for some ad processing. | USA / global |
| Google Sign-In | Optional sign-in with Google | USA / global |
| Stripe | Card payments for marketplace orders and physical goods; payouts to sellers (Stripe Connect). Stripe is also a controller for fraud prevention and its legal obligations. | USA / EU / UK |
| Dodo Payments | Payments for our own digital products, courses, online pujas and memberships. Dodo acts as merchant of record and is a controller for the payment. | India / USA |
| Wise | Bank transfers to India-based pandits and sellers | UK / EU / India |
| Zoom (and Daily.co as a fallback) | Online puja video sessions and recordings | USA |
| Meta (WhatsApp Business Platform) | WhatsApp messages with you | USA / global |
| Resend | Sending emails (confirmations, receipts, the newsletter) | USA / EU |
| Twilio | SMS sign-in codes, if you choose SMS | USA |
| Couriers (Shiprocket, Royal Mail / Sendcloud, EasyPost and the carriers they use) | Delivering physical goods | India / UK / EU / USA |
| YouTube | Videos, loaded only when you press play | USA / global |
We share a booking’s details with the pandit, temple, merchant or vendor you book, only as far as they need them to perform it: for example your name, the sankalp details, the time, and the address for an at-home puja. They are responsible for handling them lawfully.
AI tools help us write articles (see Editorial standards). We do not send your personal data to them. They receive public news sources and our own computed facts only.
We may disclose data if the law requires it, to protect people from harm, or as part of a sale or reorganisation of our business, in which case this policy continues to apply.
International transfers
Our database is in India, and several providers are in the USA or elsewhere. When UK or EU personal data leaves those areas, we rely on UK adequacy regulations, the UK International Data Transfer Agreement or Addendum, or the EU Standard Contractual Clauses, together with the provider’s security measures. You can ask us for a copy of the relevant safeguards.
How long we keep data
| Data | Kept for |
|---|---|
| Account | Until you delete it. Inactive accounts are deleted after 3 years, with notice. |
| Orders, payments and invoices | 6 years after the end of the tax year (UK tax law), or longer where Indian law requires. |
| Puja Room recordings | 30 days, then deleted |
| Booking details, including the sankalp | 2 years after the booking, then deleted or anonymised; financial parts as for orders |
| Seller verification (KYC) documents | 6 years after the seller relationship ends |
| Newsletter | Until you unsubscribe. We then keep only your address on a suppression list so we never email you again. |
| Consent records | 5 years, as evidence of your choice |
| Contact messages | 2 years |
| Analytics | 14 months (Google Analytics setting) |
| Hosting logs | About 30 days |
Your rights (UK and EU)
You can ask us to:
- give you a copy of your data;
- correct it;
- delete it;
- restrict or object to processing, including processing based on legitimate interests and any direct marketing;
- give you your data in a portable format;
- withdraw consent at any time (this doesn’t affect processing before you withdrew).
Write to hello@divyapanchangam.com. We may need to confirm your identity. You can also complain to the UK Information Commissioner’s Office (ico.org.uk) or your local data protection authority, though we’d appreciate the chance to put things right first.
India: Digital Personal Data Protection Act, 2023
If you are in India, we process your personal data as a Data Fiduciary on the basis of your consent, or for the legitimate uses the Act allows (for example, a purchase you ask us to complete). You have the right to:
- access information about the processing of your data;
- have it corrected, completed, updated or erased;
- nominate another person to exercise your rights in the event of death or incapacity;
- have your grievances redressed.
Our grievance officer is reachable at hello@divyapanchangam.com. We respond within the period the rules set. If you’re not satisfied, you may complain to the Data Protection Board of India. You may withdraw consent as easily as you gave it, using Privacy choices or the unsubscribe link.
United States: state privacy rights
Residents of California and other states with consumer privacy laws (including Colorado, Connecticut, Virginia, Utah and Texas) have the right to:
- know what personal information we collect, use and disclose;
- access, correct and delete it;
- opt out of its “sale”, its “sharing” for cross-context behavioural advertising, and targeted advertising;
- not be discriminated against for exercising these rights.
We do not sell personal information for money. Personalised advertising cookies may count as “sharing” or “targeted advertising”. In the US these are off by default, and you can keep them off through Privacy choices. The categories we collect are identifiers, commercial information, internet activity and approximate geolocation, as described in the table above. They come from you, your device and our payment and messaging providers, and are used for the purposes above. To make a request, email hello@divyapanchangam.com. An authorised agent may act for you with your written permission. If we refuse, you may appeal by replying to our answer.
Children
The site is for a general audience and is not directed at children under 13. You must be 13 or older to create an account (16 in some EU countries where local law requires parental consent below that age). You must be 18 or older to buy anything, book a service or list on the marketplace. If you believe a child has given us personal data, contact us and we will delete it.
Security
We use encryption in transit (HTTPS), access controls and row-level security in our database, least-privilege keys for our servers, and providers with recognised security certifications. Payment card data never touches our servers. No system is perfectly secure. If a breach is likely to put you at risk, we will tell you and the regulator as the law requires.
Changes to this policy
We will post changes here and update the date at the top. If a change materially affects how we use data you already gave us, we will tell you by email or on the site, and ask again for consent where the law requires.