Legal

Privacy Policy

Effective Date: 1st July, 2026

1. Our Commitment to Your Privacy

Goodthoughts.in ("Website") is owned and operated by Mr. Sagar Keyur Shah ("we", "us", or "our"), which publishes news and blog articles. This Privacy Policy ("Policy") explains how we collect, use, store, and protect your personal information when you visit the Website, subscribe to our newsletter, or contact us through the Website.

We act as a Data Fiduciary under the Digital Personal Data Protection Act, 2023 ("DPDP Act"), and you, as our visitor, subscriber or user, are the Data Principal.

We comply with all applicable Indian laws, including:

Information Technology Act, 2000

Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules")

Digital Personal Data Protection Act, 2023 ("DPDP Act")

Consumer Protection (E-Commerce) Rules, 2020

2. Information We Collect

We may collect the following types of information:

(a) Information You Provide Voluntarily:

Information you provide voluntarily, such as your name and email address when you fill out a contact form or subscribe to our newsletter.

Payment method (note: we do not store full card or bank account details — all payment processing is done via secure, PCI-DSS compliant third-party gateways)

Any other information you choose to share with us, for example through comments or correspondence.

(b) Automatically Collected Information:

Device type, browser, and operating system

IP address and approximate location

Website usage patterns and session data via cookies

Payment confirmation from payment gateways

3. How We Use Your Information:

We use the information we collect for purposes including:

Responding to your queries submitted through the contact form.

Sending newsletters, articles, or updates you have subscribed to.

Understanding how visitors use the Website so we can improve content and user experience.

Preventing fraud and ensuring the security of our platform

Complying with applicable legal and regulatory obligations

Improving website functionality and user experience

We do not sell, rent, or trade your personal information to third parties for marketing purposes. You may opt out of receiving promotional emails at any time by clicking the unsubscribe link included in our emails or by contacting us.

4. Legal Basis for Processing Your Data

We process your personal data only on lawful grounds, including:

Consent: For marketing communications, cookies, and optional features — you may withdraw consent at any time.
Legal Obligation: To comply with applicable laws (e.g., tax records, regulatory requirements).
Legitimate Interests: To prevent fraud, improve our services, and ensure platform security — provided such interests do not override your fundamental rights.

5. Cookies and Tracking Technologies

Cookies are small files placed on your device. You may manage or withdraw your consent for non-essential cookies at any time via our cookie settings panel or your browser settings. Disabling cookies may affect certain features of our website.

We use cookies and similar technologies on our website for the following purposes:

Essential Cookies: Necessary for the website to function properly. These cannot be disabled.

Analytics Cookies: Help us understand how users interact with our site (e.g., pages visited, time spent). Collected data is aggregated and anonymised. We may use Google Analytics or similar analytics tools to understand website traffic and improve our services.

Personalisation Cookies: Enable us to tailor content and recommendations based on your browsing preferences — used only with your prior consent.

6. Sharing of Your Information

We may share your information with the following categories of recipients, strictly on a need-to-know basis and bound by confidentiality or data processing agreements:

Payment Gateways: To securely process transactions (e.g., Razorpay, PayU, or similar RBI-compliant services).
Technology and Service Providers: For sending newsletters, website hosting, analytics, and operational support.
Legal and Regulatory Authorities: Where required by law, court order, or government directive.

We do not share your data with any third party for commercial advertising purposes without your explicit consent.

7. Cross-Border Data Transfers

Some of our service providers (e.g., cloud hosting, analytics, payment processors) may be located outside India. Where data is transferred internationally, we ensure adequate safeguards are in place, including:

Standard contractual clauses with data processors

Transfers only to jurisdictions notified as permissible under the DPDP Act, once such notifications are issued by the Central Government

By using our services, you consent to such transfers, subject to the safeguards described above.

8. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

We may automatically collect server logs including browser type, referring pages, date and time of access, IP address and diagnostic information for security and troubleshooting purposes.

9. Your Rights as a Data Principal

Under the DPDP Act, 2023, you have the following rights:

Right to Access: Obtain a summary of the personal data we hold about you and details of how it is being processed.
Right to Correction: Request correction of inaccurate, incomplete, or outdated personal data.
Right to Erasure: Request deletion of your personal data when it is no longer necessary for the purpose it was collected (subject to legal obligations).
Right to Withdraw Consent: Withdraw consent for processing at any time, without affecting the lawfulness of prior processing.
Right to Nominate: Nominate another individual to exercise your data rights in the event of your death or incapacity.
Right to Grievance Redressal: Raise a complaint with our Grievance Officer and, if unsatisfied, with the Data Protection Board of India.
To exercise any of these rights, contact us at: info@goodthoughts.in

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction, including:

SSL/TLS encryption for all data transmitted via our website

Secure, access-restricted servers

Regular security audits and vulnerability assessments

PCI-DSS compliant payment processing via trusted third-party gateways

In the event of a personal data breach that poses a risk to your rights, we will notify the Data

Protection Board of India and affected users as required under the DPDP Act.

11. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal data from minors.

In compliance with the DPDP Act, 2023, if we discover that we have inadvertently collected data from a child, we will promptly delete such data. Where services may be accessed by minors, we will obtain verifiable parental or guardian consent before processing the child's data.

If you believe a minor has provided us with personal data without appropriate consent, please contact us immediately at: info@goodthoughts.in

12. Third-Party Links

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those external sites. We encourage you to review the privacy policies of any third-party websites you visit.

13. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable law. When we make material changes, we will notify you by Posting the updated Policy on our website with a revised effective date

We encourage you to review this Policy periodically. Continued use of our services after an update constitutes acceptance of the revised Policy.

14. Governing Law and Jurisdiction

This Privacy Policy is governed by and construed in accordance with the laws of India. Any disputes arising under this Policy shall be subject to the exclusive jurisdiction of the courts at Ahmedabad, Gujarat.

15. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at:

Email: info@goodthoughts.in
Address: Ahmedabad, Gujarat, India.