1. IntroductionSHOUMIKA MAHADIK (“SHOUMIKA MAHADIK”, “we”, “us”, or “our”) respects the privacy of individuals who visit our website, contact us, request information, purchase or use our services, or communicate with us through electronic channels.This Privacy Policy explains how we collect, use, store, protect, disclose, and otherwise process information obtained through our website, business operations, customer interactions, WhatsApp Business communications, RCS communications, email, telephone, forms, and related services.We aim to collect only information that is reasonably necessary for legitimate business purposes and to handle personal information responsibly.This Policy should be read together with our Terms & Conditions and any specific privacy notice presented at the point where information is collected.India’s Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 establish India’s developing framework for digital personal data. The commencement notification provides for phased implementation of different provisions. Accordingly, this Policy is intended to operate in accordance with applicable data-protection requirements as and when they become applicable to our processing activities.
2. Information We CollectDepending on how you interact with SHOUMIKA MAHADIK, we may collect the following categories of information.A. User InformationThis may include:Name;Mobile number;Email address;Postal address;Organization or business information;Information supplied through contact forms;Service preferences;Information contained in customer enquiries;Transaction and billing information where applicable;Information necessary to provide requested services.We do not intentionally request information that is unnecessary for the relevant service.B. Device and Technical InformationWhen you access our website, technical information may be automatically generated, including:IP address;Browser type;Operating system;Device type;Approximate geographic information derived from technical data;Website interaction information;Date and time of access;Referring webpages;Error and diagnostic information.Such information may be used for security, analytics, troubleshooting, website improvement, and fraud prevention.C. CookiesOur website may use cookies and similar technologies to maintain functionality, remember preferences, understand website usage, improve performance, and support security.You may be able to control cookies through your browser settings. Disabling certain cookies may affect website functionality.D. Message DataWhere you communicate with SHOUMIKA MAHADIK through WhatsApp, RCS, SMS, email, web forms, or other communication channels, we may process information contained in those communications.This may include:Sender and recipient information;Message content;Attachments;Delivery information;Communication timestamps;Customer requests;Replies and support history.We will use such information only for legitimate and disclosed business purposes and subject to applicable law and platform requirements.
3. Purpose of Data CollectionSHOUMIKA MAHADIK may collect and process information for purposes including:Responding to enquiries;Providing requested products or services;Managing customer relationships;Processing transactions;Providing customer support;Sending requested service communications;Sending permitted promotional communications;Managing WhatsApp and RCS communications;Maintaining records;Preventing fraud and abuse;Maintaining cybersecurity;Improving our website and services;Complying with legal obligations;Resolving disputes;Protecting our rights and property.We seek to avoid collecting information merely because it is technically available where that information is not reasonably relevant to the stated purpose.
4. Consent for WhatsApp & RCS Data ProcessingWhere SHOUMIKA MAHADIK communicates with customers through WhatsApp or RCS, we may process relevant contact information and message information necessary to provide the requested communication.For WhatsApp communications, users should receive clear information about what they are opting into and the categories of communications they may receive. WhatsApp’s business messaging policy requires appropriate opt-in and requires businesses to honor requests to stop or opt out of communications.Accordingly, SHOUMIKA MAHADIK will seek to use appropriate consent or another lawful basis before sending communications where required.Where promotional communications are involved, consent mechanisms may distinguish between categories such as service updates, offers, reminders, announcements, or other communications.Users may request that promotional communications stop.For RCS, communication may occur through an RCS Business Messaging agent or another authorized RCS infrastructure. RCS agents are designed to communicate with users through RCS-enabled messaging applications.Providing a telephone number does not automatically mean that a user has consented to receive every category of communication. The nature and scope of the communication will be considered when determining the appropriate permission and legal basis.
5. Legal Basis for ProcessingDepending on the processing activity and applicable law, SHOUMIKA MAHADIK may process personal data on the basis of:Consent;Performance of a requested service or contract;Compliance with legal obligations;Legitimate and lawful business purposes where permitted;Prevention, detection, or investigation of fraud or misuse;Protection of legal rights;Other lawful grounds recognized under applicable Indian law.Where consent is relied upon, we aim to provide clear information about the purpose of processing and an appropriate method for withdrawing consent where required.The Digital Personal Data Protection Rules contemplate clear, standalone notices explaining the personal data involved and the purpose for processing, together with mechanisms for exercising rights and withdrawing consent.
6. How We Use Collected DataInformation may be used to:Communicate with customers;Process requests;Provide services;Confirm appointments or transactions where applicable;Respond to customer support requests;Send important service notices;Send permitted marketing communications;Maintain business records;Improve service quality;Monitor technical performance;Detect suspicious or unauthorized activity;Protect systems and users;Meet applicable legal requirements.We do not intend to sell personal information as a commercial commodity.Where third-party technology providers process information on our behalf, their processing may be governed by their own contractual and privacy terms in addition to our instructions and applicable law.
7. Data Retention & DeletionSHOUMIKA MAHADIK retains personal information only for as long as reasonably necessary for the purpose for which it was collected, unless a longer period is required or permitted by law.Retention periods may depend upon:The nature of the service;Customer relationship;Accounting and taxation requirements;Legal claims;Regulatory obligations;Security requirements;Dispute resolution;Platform records;Consent and communication records.When information is no longer reasonably required, we may delete, anonymize, aggregate, or securely dispose of it, subject to legal or operational retention requirements.Where applicable law gives individuals a right to request deletion, SHOUMIKA MAHADIK will assess and respond to the request in accordance with applicable requirements.
8. Data Sharing with Third PartiesWe may share or permit access to information with selected third parties where reasonably necessary.Meta / WhatsAppIf WhatsApp Business services are used, relevant information may be processed through Meta’s WhatsApp infrastructure in accordance with applicable Meta and WhatsApp terms and policies.Google / RCSIf RCS for Business services are used, relevant information may be processed through Google or associated RCS infrastructure.Google’s RCS platform supports business agents and API-based communications, with delivery involving the relevant RCS ecosystem and carrier infrastructure.Telecom OperatorsRCS or SMS communications may involve telecommunications operators or carrier networks necessary to deliver communications to a recipient.Other Service ProvidersWe may use service providers for:Website hosting;Cloud storage;Cybersecurity;Analytics;Payment processing;Customer support;Email;Messaging;Software;Technical maintenance.Third parties should receive only information reasonably necessary for their legitimate function, subject to applicable contractual, security, and legal requirements.
9. Security Measures & EncryptionSHOUMIKA MAHADIK takes reasonable technical and organizational measures to protect information against unauthorized access, misuse, alteration, loss, disclosure, or destruction.Depending on the nature of the information and service, safeguards may include:Access controls;Password protection;Authentication controls;Secure hosting;Encryption in transit where supported;Encryption or other protection at rest where appropriate;Limited administrative access;Security monitoring;Software updates;Backup procedures;Incident-response procedures.No internet transmission or electronic storage system can be guaranteed to be completely secure.Accordingly, while we take reasonable precautions, we cannot guarantee absolute security.Users should also protect their own devices, accounts, passwords, and communication applications.
10. Cookies & Tracking TechnologiesCookies may be used for purposes such as:Website functionality;Security;Remembering preferences;Analytics;Performance measurement;Understanding website usage.Some cookies may be placed by third-party services integrated into our website.Users may control cookies through browser settings or other available controls. Certain website functions may not operate correctly if essential cookies are disabled.Where applicable law requires consent for specific categories of cookies or tracking technologies, appropriate consent mechanisms may be provided.
11. Data Transfer & Storage (India-based)SHOUMIKA MAHADIK intends to manage its business operations in accordance with applicable Indian legal requirements.Information may be stored or processed using third-party cloud, communication, messaging, hosting, or technology infrastructure. Some providers may operate infrastructure outside India.Where personal data is transferred or processed outside India, the transfer will be handled subject to applicable law, contractual requirements, platform arrangements, and any restrictions or safeguards that may apply.We do not represent that every technical component used by a third-party platform will be physically located in India.Users acknowledge that modern messaging services such as WhatsApp and RCS may involve international technology infrastructure, carriers, or service providers.
12. User Rights (Access, Correction, Deletion)Subject to applicable law, individuals may have rights relating to their personal information, including rights to:Request access to information concerning their personal data;Request correction of inaccurate information;Request deletion where legally available;Withdraw consent where processing is based on consent;Request information about processing;Raise concerns regarding privacy practices;Exercise other rights provided by applicable data-protection law.Requests should be sent to:Email: saidnikhil15@gmail.comTo protect individuals against unauthorized requests, we may need to verify identity before responding.Certain information may not be deleted where retention is required by law, necessary for legal claims, required for security, or otherwise permitted by applicable law.The Digital Personal Data Protection framework provides for rights and obligations concerning digital personal data, subject to its applicable commencement and provisions.
13. Policy for ChildrenOur services are not intentionally designed to collect personal information from children in circumstances where applicable law requires parental or lawful guardian consent.We do not knowingly seek to process children’s personal information for unnecessary purposes.If a parent or lawful guardian believes that information relating to a child has been submitted to us improperly, they may contact us using the details provided in this Policy.Where applicable law imposes specific obligations concerning children’s data, SHOUMIKA MAHADIK will follow those requirements.
14. Updates to Privacy PolicyWe may update this Privacy Policy from time to time to reflect:Changes in our services;Changes in technology;Changes in third-party platforms;Changes in applicable law;Changes in security practices;Regulatory developments;Changes in data-processing activities.The updated version may be published on our website with a revised effective date.Where applicable law requires specific notice or consent, we will follow the required process.Users are encouraged to review this Privacy Policy periodically.
15. Governing Law (India)This Privacy Policy shall be interpreted in accordance with applicable laws of India.Privacy and data-protection processing will be governed by the Indian legal requirements applicable to the relevant processing activity, including applicable provisions of the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 as and when those provisions apply to the relevant processing.Where a dispute arises concerning this Privacy Policy, the parties should first attempt to resolve the issue through good-faith communication.Subject to mandatory legal remedies and jurisdictional requirements, competent courts in Maharashtra, India may have jurisdiction over disputes.
16. Contact InformationFor privacy questions, requests, complaints, consent withdrawal requests, correction requests, or deletion requests, please contact:SHOUMIKA MAHADIK
Flat No. 103, Sankalp Residency,
Manchar, Pune, Maharashtra – 410503, IndiaEmail: saidnikhil15@gmail.com
Mobile: +91 8830003088When contacting us regarding personal data, please clearly state the nature of your request. We may request reasonable information to verify your identity and protect personal data from unauthorized disclosure.We aim to respond to legitimate privacy requests within the timeframe required by applicable law.Last Updated: 2 October 2026