Privacy Policy
This policy explains how Shefali Kapoor, operating from [CITY], India, handles personal information collected through this website and through coaching sessions. For the purposes of the Digital Personal Data Protection Act, 2023, Shefali Kapoor is the data fiduciary.
Questions, requests and complaints go to shefali@shefalikapoor.com.
For the lawyer: the DPDP Act's rules are being notified in stages. Please confirm which obligations are in force at the date of publication, and whether a designated contact person must be named for grievance redressal.
Sensitive categories of personal data are not deliberately collected. You are asked not to send financial account details, identity document numbers or health information by email.
Your information is not sold, rented or traded to anyone, and it is not used to build advertising profiles.
Coaching sessions are recorded, and the recording is made available to you afterwards. If you do not want to be recorded, say so before the session begins and it will not be.
What is discussed in a session is treated as confidential. Trading records, journals and personal circumstances shared for the purposes of coaching are used solely to deliver that coaching. They are not shared, published, used as teaching examples, or referred to in marketing, unless you give specific written permission, and permission for one purpose is not permission for another.
Where an anonymised pattern is useful for teaching, it is stripped of every detail that could identify you, and you may object to even that.
Payments are handled by a third-party payment provider. Your card number, UPI credentials and banking details go directly to that provider; they are never received, seen or stored here.
What is retained is the fact of a payment: an amount, a date, a reference number and its status, which is required in order to issue receipts, process refunds and meet tax obligations.
To fill in before publishing: name the payment provider and link to its own privacy policy. This is expected and improves trust at the point of payment.
Decision needed: the retention periods. Recommend 12 months for recordings, 12 months for shared trading records, 24 months for enquiries. Keeping session recordings indefinitely is a liability with no upside.
Reasonable technical and organisational measures are taken to protect your information, including encrypted connections, access controls on the systems used, and keeping payment credentials out of these systems entirely.
No system is perfectly secure, and no absolute guarantee can be given. In the event of a breach affecting your personal data, you will be notified and the matter reported as the law requires.
Subject to the Digital Personal Data Protection Act, 2023, you may:
Requests are answered within 30 days. Statutory records that must be retained for tax purposes cannot be deleted on request, and this will be explained if it applies.
These services are not offered to anyone under 18 and information is not knowingly collected from children. If you believe a child has provided personal information, write to the address above and it will be deleted.
This policy may be updated. The version in force is the one published here, and the date at the top reflects the most recent change. Material changes affecting how your information is used will be notified by email where you have given one.
If you are unhappy with how your information has been handled, write to shefali@shefalikapoor.com first. If that does not resolve it, you may complain to the Data Protection Board of India.