📋 Table of Contents
- 1. Introduction & Who We Are
- 2. Information We Collect
- 3. How We Use Your Information
- 4. Legal Basis for Processing
- 5. Data Sharing & Third Parties
- 6. Data Retention
- 7. Your Rights & Choices
- 8. Jurisdiction-Specific Rights
- 9. Cookies & Tracking
- 10. Security
- 11. Children's Privacy
- 12. Changes to This Policy
- 13. Contact & Grievance Officer
Summary: Ishwar B. Mule ("I", "me", "we") respects your privacy. This policy explains what personal data is collected when you visit ishwarmule.site or contact me, how it is used, and your rights. I do not sell your data to third parties.
Introduction & Who We Are
This Privacy Policy applies to the personal portfolio website operated by Ishwar B. Mule, a digital marketing professional based in India. The website is accessible at ishwarmule.site.
This policy governs how personal information submitted through the contact form or obtained through your use of this website is collected, processed, stored, and protected. It applies to all visitors regardless of their country of residence, including individuals located in India, the United Arab Emirates (UAE), the United States of America (USA), the United Kingdom (UK), and all other jurisdictions.
By accessing this website or submitting a contact form, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy.
Information We Collect
2.1 Information You Provide Directly
When you complete the contact form on this website, I collect the following information:
- Full Name — to identify you and personalise our communication.
- Email Address — to respond to your enquiry.
- Phone Number — to contact you for follow-up on your enquiry if required.
- Company Name (optional) — to understand the context of your enquiry.
- Service of Interest — to route your enquiry appropriately.
- Message Content — the details of your enquiry or project brief.
2.2 Information Collected Automatically
When you visit this website, standard technical information may be automatically recorded by the hosting infrastructure and third-party services, including:
- IP address and approximate geographic location
- Browser type and version
- Device type and operating system
- Pages visited and time spent on each page
- Referring URL (how you arrived at the website)
- Date and time of visit
2.3 Information from Third-Party Services
This website uses Formspree to process contact form submissions. Formspree operates as a data processor and may collect form data in accordance with its own privacy policy. Contact form data is transmitted to and stored temporarily by Formspree before being forwarded to my email address.
How We Use Your Information
Personal information collected through this website is used exclusively for the following purposes:
- Responding to enquiries: To review and respond to messages submitted via the contact form.
- Business communication: To follow up regarding potential freelance, consulting, or employment opportunities.
- Service delivery: If a professional engagement is agreed upon, to deliver agreed marketing or development services.
- Legal compliance: To comply with applicable laws and regulations in relevant jurisdictions.
- Website improvement: Anonymised and aggregated data may be used to understand how the website is used and to improve its content and functionality.
Important: I do not use your personal data for automated decision-making, profiling, or any form of targeted advertising without your explicit consent. I do not sell, rent, or trade your personal information to any third party.
Legal Basis for Processing
The lawful bases under which personal data is processed depend on your jurisdiction:
- Consent (GDPR Art. 6(1)(a)): You have given clear consent by submitting the contact form and agreeing to this policy.
- Legitimate Interests (GDPR Art. 6(1)(f)): Processing is necessary for the legitimate interests of responding to business enquiries.
- Contractual Necessity (GDPR Art. 6(1)(b)): Where a service agreement is entered into, processing is necessary to perform that contract.
- Legal Obligation: Processing may be required to comply with applicable law in India, the UK, the UAE, or the USA.
Under the Digital Personal Data Protection Act, 2023 (India), processing is based on your freely given, informed, specific, and unambiguous consent provided when submitting the contact form.
Data Sharing & Third Parties
I do not sell, rent, or share your personal data with third parties for marketing purposes. Limited data sharing may occur only in the following circumstances:
- Formspree Inc.: Contact form submissions are processed via Formspree, acting as a data processor. Formspree is a US-based service that complies with GDPR and maintains appropriate safeguards including Standard Contractual Clauses (SCCs) for international transfers.
- Email Service Provider: Enquiries are delivered to a Gmail account operated by Google LLC. Google processes email data in accordance with its own privacy policy and complies with applicable data protection laws.
- Legal requirements: I may disclose personal data if required by law, court order, or government authority in any applicable jurisdiction.
- Business transfer: If this business is transferred or acquired, personal data held may form part of the transferred assets, subject to the same privacy protections.
Data Retention
Personal data is retained only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law:
- Enquiries with no subsequent engagement: Data retained for a maximum of 12 months from the date of submission, after which it is securely deleted.
- Enquiries leading to a professional engagement: Data related to a contractual engagement is retained for a period of 7 years in accordance with applicable tax and accounting obligations (as required under Indian taxation law, HMRC requirements for UK, and IRS guidelines for the USA).
- Website analytics data: Anonymised usage data is not subject to a fixed retention limit as it cannot be used to identify individuals.
You may request deletion of your data at any time by contacting me at the address below, subject to any overriding legal retention obligations.
Your Rights & Choices
Depending on your location, you have various rights regarding your personal data. Regardless of jurisdiction, I am committed to honouring all reasonable requests:
- Right of Access: You may request a copy of the personal data I hold about you.
- Right to Rectification: You may request correction of any inaccurate or incomplete data.
- Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data, subject to legal retention obligations.
- Right to Restriction of Processing: You may request that processing of your data be restricted in certain circumstances.
- Right to Data Portability: You may request a copy of your data in a structured, machine-readable format.
- Right to Object: You may object to processing based on legitimate interests.
- Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
- Right against Automated Decision-Making: No automated profiling or decision-making affecting you is carried out through this website.
To exercise any of these rights, please contact: ishwar.mule007@gmail.com. I will respond within 30 days (or the timeframe mandated by applicable law in your jurisdiction).
Jurisdiction-Specific Rights
In addition to the general rights above, the following jurisdiction-specific rights and regulatory frameworks apply:
Under the Digital Personal Data Protection Act, 2023, you have the right to access your data, correct inaccuracies, nominate a representative, and seek grievance redressal. A Grievance Officer is available at the contact below. Data Principals may contact the Data Protection Board of India for unresolved disputes.
Under UK GDPR and EU GDPR, you have rights of access, rectification, erasure, portability, restriction, and objection. You may lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk, or your local EU supervisory authority. International data transfers use Standard Contractual Clauses.
California residents have rights under the California Consumer Privacy Act (CCPA) / CPRA, including the right to know what personal information is collected, to delete it, and to opt out of sale (no sale occurs). Virginia, Colorado, Connecticut, and other state residents have similar rights under applicable state privacy laws.
Under UAE Federal Decree-Law No. 45 of 2021 (Personal Data Protection Law) and the DIFC Data Protection Law 2020, you have rights of access, correction, and erasure. Data processing is conducted on the basis of legitimate interests and consent. Cross-border transfers comply with UAE data transfer requirements.
For all other jurisdictions, I apply the higher standard of protection offered by GDPR as a baseline, in addition to any specific local legal requirements.
Cookies & Tracking Technologies
This website is a static portfolio and does not use first-party cookies for tracking or advertising purposes. However, the following third-party services may set cookies or collect technical data:
- Google Fonts: Used to load custom typography. Google may log the request including your IP address.
- Formspree: The contact form submission service may set session cookies necessary for form functionality.
- Hosting provider: The web hosting service may collect standard server access logs.
This website does not currently use Google Analytics, Facebook Pixel, or any advertising tracking technologies. If this changes, this policy will be updated and a cookie consent mechanism will be implemented.
You can control cookies through your browser settings. Disabling cookies will not affect your ability to view or use this website.
Data Security
I take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These include:
- HTTPS encryption for all data transmission between your browser and this website
- Use of reputable third-party services (Formspree, Google) with their own security certifications
- Email access protected by strong passwords and two-factor authentication
- Regular review of data held and deletion of data no longer required
While I implement these measures, no method of transmission over the internet or method of electronic storage is 100% secure. In the event of a data breach that poses a risk to your rights and freedoms, I will notify you and the relevant supervisory authority in accordance with applicable law (within 72 hours under GDPR; as required under DPDPA 2023; and per applicable US state law requirements).
Children's Privacy
This website and its services are directed exclusively at business professionals and individuals aged 18 years and above. I do not knowingly collect personal data from children under the age of 18 (or the applicable age of digital consent in their jurisdiction).
Under the Children's Online Privacy Protection Act (COPPA) in the USA, I do not knowingly collect information from children under 13. Under UK GDPR and GDPR, the age of digital consent is 16 in most EU member states and 13 in the UK (with parental consent required below 13).
If you believe that a child has submitted personal data through this website, please contact me immediately at ishwar.mule007@gmail.com and I will delete it promptly.
Changes to This Privacy Policy
I reserve the right to update or modify this Privacy Policy at any time to reflect changes in legal requirements, business practices, or data processing activities. The "Last Updated" date at the top of this policy will be revised accordingly.
For material changes that affect how your personal data is processed, I will endeavour to notify you via the email address provided in any prior contact. Continued use of this website following the posting of changes constitutes acceptance of the revised policy.
I recommend reviewing this policy periodically to stay informed about how your information is protected.
Contact & Grievance Officer
For all privacy-related queries, rights requests, complaints, or concerns regarding this Privacy Policy, please contact:
Data Controller / Grievance Officer
Name: Ishwar B. Mule
Designation: Data Controller & Grievance Officer (India — DPDPA 2023)
Email: ishwar.mule007@gmail.com
Country: India
Response time: Within 30 days of receipt of your request (or the period mandated by applicable law in your jurisdiction).
If you are not satisfied with my response, you have the right to lodge a complaint with the relevant data protection authority in your country — including the Data Protection Board of India, the UK ICO, an EU supervisory authority, or the applicable US state Attorney General.