Privacy notice
Updated 3 Nov 2026
This notice explains what personal data we collect on gauravkunal.com, why we collect it, who we share it with, and the choices and rights you have. We follow India’s Digital Personal Data Protection Act, 2023 (DPDP Act) and the rules made under it.
Who we are
This website is run by Gaurav Kunal, Bengaluru, Karnataka, India (“we”, “us”). For anything about your personal data, contact our Grievance Officer:
- Name: Gaurav Kunal
- Email: privacy@gauravkunal.com
- WhatsApp: use the WhatsApp button on any page
What this notice covers
This notice covers gauravkunal.com only. When you enrol or pay, you do that on actuateminds.com, run by ActuateMinds, under its own privacy notice. IBAIC exams are run by IBAIC under its own privacy notice at ibaic.org.
What we collect
What you give us
When you fill in a form on this site, we collect:
- your name
- your WhatsApp number or email address
- the programme or topic you are interested in
- a record that you agreed to be contacted, and when
If you message us on WhatsApp or by email, we also keep those messages.
What is collected automatically
- Security and delivery. Our hosting provider, Cloudflare, processes your IP address, browser type and the pages you request so it can deliver the site and protect it from attacks.
- Site statistics. We use Cloudflare Web Analytics to count visits and measure page speed. It does not use cookies and does not identify you.
- Meta Pixel and Conversions API (workshop page only). On our workshop booking page, Meta (the company behind Facebook, Instagram and WhatsApp) receives information about your visit: your IP address, browser details, a Meta cookie identifier, the ad you clicked, and actions such as viewing the page, tapping “Book” or tapping WhatsApp. We use this to measure and improve our ads. We do not send your name, phone number or email to Meta from this site.
- Ad and campaign tags. If you arrive from an ad or a link with tracking tags (such as
utm_sourceorfbclid), we pass those tags on to actuateminds.com when you click to enrol, so we know which ad brought you. - Videos. Videos are only loaded from YouTube or Vimeo when you press play. From that point, that provider’s own privacy notice applies.
Why we use your data
| Purpose | Data used | Basis |
|---|---|---|
| Replying to you about training you asked about | Form details, messages | Your consent |
| Sending you workshop details, Zoom links and reminders | Contact details | Your consent |
| Measuring and improving our ads | Meta Pixel and Conversions API data | Your consent, which you can withdraw at any time |
| Keeping the site secure and working | IP address, browser data | Legitimate use: security and preventing fraud |
| Meeting legal, tax and accounting duties | Records we must keep by law | Legal obligation |
We do not sell your personal data, and we do not use it for anything that is not listed here.
Who we share it with
We share personal data only with service providers who help us run this site and our training, and only as far as they need it:
- Cloudflare: hosting, security and site statistics
- Meta: ad measurement (workshop page) and WhatsApp messaging
- Google Workspace: storing enquiries from our forms
- Zoom: running live online sessions you have booked
- ActuateMinds (ActuateMinds): enrolment, payment, invoices and refunds, when you choose to enrol
- IBAIC: if you attend a session that includes an exam voucher, your name and email may be shared with IBAIC so the voucher can be issued
We may also share data when the law requires it, or to protect our rights or someone’s safety.
Some of these providers process data outside India. We only use providers that protect data to a standard at least as high as this notice, and we never transfer data to a country the Government of India has restricted.
How long we keep it
- Enquiries and messages: up to 24 months after we were last in touch, or until you withdraw consent, whichever comes first.
- Security logs: for the short period Cloudflare needs them.
- Records we must keep by law (for example, tax records): for as long as the law requires.
After that, we delete the data or make it anonymous.
Your rights
Under the DPDP Act you can:
- ask for a summary of the personal data we hold about you and who we have shared it with
- ask us to correct, complete or update your data
- ask us to delete your data, where we no longer need to keep it by law
- withdraw your consent at any time. It is as easy as giving it: reply STOP on WhatsApp, or email privacy@gauravkunal.com. Withdrawing consent does not affect anything we did before you withdrew it.
- nominate someone to use these rights for you if you die or become unable to
- raise a grievance with our Grievance Officer. We will reply within 30 days. If you are not satisfied with our reply, you can complain to the Data Protection Board of India.
To use any of these rights, email privacy@gauravkunal.com from the email address or WhatsApp number you gave us, so we can confirm it is you.
Children
Our programmes are for people aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you are a parent or guardian and think your child has sent us their details, email privacy@gauravkunal.com and we will delete them.
How we protect your data
The site is served only over HTTPS. Form submissions go directly to our enquiry store and are not kept on the website itself. Access to enquiries is limited to the people who need it to reply to you. No system is completely secure, but if a breach affects your data, we will tell you and the Data Protection Board as the law requires.
Changes to this notice
If we change this notice, we will update the date at the top of this page. If a change affects how we use data you have already given us, we will tell you before it takes effect.