Privacy Policy

Last Updated: July 7, 2026

1. Introduction

Welcome to Subhrajyoti Mahato (the “Website,” “we,” “us,” or “our”). We are committed to protecting your digital personal data and your right to privacy.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (subhrajyotimahato.com), read our blog, or engage our freelance services for Search Engine Optimization (SEO), Content Marketing, and Answer Engine Optimization (AEO)/AI Search Optimization.

2. Legal Bases for Processing Data

We only process your personal data when we have a lawful reason to do so. These legal baselines change based on your location:

• Under DPDP Act (India): We process your data strictly based on your Explicit Consent. By submitting a contact form or opting into a newsletter via our active checkboxes, you give us permission to use that data only for that specified purpose. You can withdraw consent at any time.
• Under GDPR (EU/UK): We rely on Consent (for newsletters and cookies) and Contractual Necessity or Legitimate Interest (to fulfill business service agreements and protect our site from spam or security risks).
• Under CCPA (California): We operate on an Opt-Out infrastructure. We do not sell or share your data, but we allow you to opt out of automated tracking cookies via our cookie banner.

3. Information We Collect

We collect personal data that can directly or indirectly identify you.

A. Personal Information You Provide

We collect personal information that you voluntarily submit when you use our site or contact us. This includes:

• Identity & Contact Data: First name, last name, and email address (collected via contact forms, blog comments, or newsletter sign-ups).
• Business Data: Business name, website URL, and project notes (collected during client onboarding or consultation requests).

B. Technical Data Automatically Collected

When you navigate the website, our servers and third-party tools (like Google Analytics) automatically log technical information:

• Device & Usage Data: IP address (anonymized where possible), browser type, operating system, referring URLs, pages viewed, and exact time spent on specific blog posts.

4. How We Use Your Information

We do not use your data for unauthorized commercial purposes. We process data strictly for:

• Service Delivery: To manage client onboarding, deliver SEO/content strategies, and execute standard business operations.
• Business Communications: To reply to inquiries, send service proposals, schedule consulting calls, and process invoicing.
• Website Optimization: To evaluate aggregate, non-identifying metrics regarding blog post popularity to optimize layout and content value.
• Security & Spam Prevention: To audit blog comment sections for spam bots and secure our technical architecture.

5. Cookies and Behavioral Tracking

We use essential and non-essential cookies to understand site performance.

• Analytics & Performance Cookies: We use tools like Google Analytics to evaluate site traffic. If you reside in the EU, UK, or California, these cookies are blocked by default until you click “Accept” on our cookie banner.
• Opting Out: You can manually disable cookies in your browser settings or install the Google Analytics Opt-out Browser Add-on.

6. Data Sharing, Disclosures, and Cross-Border Transfers

We do not sell, rent, trade, or share your personal information with third parties for marketing purposes. Your data is only shared with:

• Authorized Third-Party Processors: Trusted SaaS tools required to run our business (e.g., our hosting environment, email marketing platforms, or bookkeeping software). These entities are contractually bound to process data strictly under our guidance.
• Legal Compliance: Public authorities or courts in India if strictly mandated by local laws or national security requirements.
• Cross-Border Transfers: If your data is transferred outside your home country (e.g., an Indian citizen’s email stored on a US-based cloud hosting platform), we verify that our vendors use secure encryption protocols (SSL/HTTPS) to keep the data safe.

7. Data Storage, Retention, and Security

• Security Safeguards: We maintain rigorous security standards, including SSL/HTTPS encryption across the site, multi-factor authentication on all storage backends, and local endpoint encryption.
• Data Minimization & Retention: We do not retain data longer than necessary. Contact form inquiries and client details are stored only for the duration of our business relationship or as required to comply with local tax and financial auditing laws.
• Breach Reporting: In the event of an accidental personal data breach, we will notify the appropriate regulatory authority (including the Data Protection Board of India) and affected individuals without undue delay, as required by law.

8. Affiliate Tracking and Third-Party Cookies

We participate in various affiliate marketing programs to recommend products and services. Because of how these programs work, when you click on an affiliate link on our website, a tracking cookie or pixel may be placed on your browser by the third-party affiliate network.

The purpose of this tracking technology is strictly to identify that you clicked a link from our site and to process any commissionable sales. This allows the affiliate network to properly attribute the referral to us.

Please note that we do not have access to or control over the cookies placed by these third-party networks. The data collected by these affiliate programs is governed by their own respective privacy policies. We encourage you to review the privacy practices of any third-party websites you visit or purchase from.

9. Children’s Privacy (Strict Thresholds)

We do not knowingly market to or collect personal data from minors.

• India (DPDP): We do not knowingly process data of individuals under 18 years of age without verifiable parental or legal guardian consent.
• EU & US (GDPR/CCPA): We do not process data from individuals under 16 years of age.
  If you believe a minor has submitted personal data through our site, please contact us immediately so we can purge the record.

10. Your Global Data Rights

You hold legal rights over how your digital personal data is managed. We commit to honoring these rights globally:

Contact

If you have any questions, concerns, or requests regarding this Privacy Policy, our data practices, or if you would like to exercise your rights regarding your personal information, please contact us using the details below:

Email: subhrajyotimahato.official@gmail.com

We will make every effort to resolve your concerns and respond to your inquiries in a timely manner.