Privacy Policy

Decode Your Love (“we”, “us”) provides relationship coaching content and one-to-one coaching sessions. This policy explains what personal data we collect, why, how it is stored, and the rights you have over it — under the EU/UK General Data Protection Regulation (GDPR) and India's Digital Personal Data Protection Act, 2023 (DPDP Act) alike.

Who we are

This site is operated by [LEGAL ENTITY NAME], registered at [REGISTERED ADDRESS]. For any question about this policy or your data, contact our grievance officer at [GRIEVANCE OFFICER EMAIL].

What we collect

Account and booking information

• Name, email address, phone number, and timezone.
• Booking details: the service booked, session times, and any intake responses you submit ahead of a session.
• Payment details are processed by Razorpay; we store the resulting transaction record (amount, status, provider reference) but never your full card or bank details.

Session notes and intake responses

Notes Priya takes during or after a session, and the answers you give on an intake form, describe personal and often sensitive details of your relationship. These are encrypted at rest with a key held outside the database, separate from the credentials that back up the database itself — so a stolen database copy alone cannot be read. Only Priya and, where necessary, site administrators can access them, and every access is logged.

Enquiries and marketing

If you use the contact form or a lead-capture form (such as a quiz or a downloadable guide), we store what you submitted and, if you opt in, use it to send you occasional coaching-related emails. You can withdraw that consent at any time via the unsubscribe link in any such email. We also store a salted, one-way hash of the IP address a form was submitted from — not the address itself — solely to detect abusive submission patterns.

Analytics and cookies

We use privacy-respecting analytics (PostHog) to understand which pages are useful and where visitors drop off before booking. Analytics cookies are only set after you accept them in the cookie banner — nothing is loaded before that choice is made. You can change your choice at any time; see the banner control in the page footer.

Why we process your data

• Contract: to schedule and deliver a coaching session you booked, and to take payment for it.
• Consent: for marketing emails and for analytics cookies — both are opt-in and can be withdrawn at any time.
• Legal obligation: to keep financial records as required by Indian tax law.
• Legitimate interest: to keep the site secure and to detect abuse of our forms.

Who we share it with

We use the following processors, each bound by their own data-processing terms. We do not sell personal data to anyone.

• Razorpay — payment processing.
• Google — calendar scheduling and generating your session's Meet link.
• Resend — transactional email delivery (booking confirmations, reminders, contact-form replies).
• PostHog — product analytics, only once you accept analytics cookies.
• Sanity — hosts the article and site content you read; no personal data about you is sent to it.

How long we keep it

• Account data is kept while your account is active, plus a reasonable window after.
• Booking and payment records are retained for as long as Indian tax and accounting law requires, even after account erasure (see below) — kept in anonymised form once your account is erased.
• Session notes and intake responses are retained for the duration of the coaching relationship and a limited period after, then deleted — sooner if you request erasure.
• The abuse-detection IP hash on a form submission is kept for a limited window and then deleted; it is never linked back to a real IP address once discarded.

Your rights

Under GDPR and the DPDP Act you can ask us to: give you a copy of your data, correct inaccurate data, erase your data (subject to the financial-record retention above), restrict or object to certain processing, and receive your data in a portable format. Indian users additionally have the right to nominate another individual to exercise these rights on their behalf in the event of death or incapacity, and the right to lodge a complaint with the Data Protection Board of India.

To exercise any of these rights, email [GRIEVANCE OFFICER EMAIL]. We aim to respond within 30 days.

Children

This site is not directed at, and coaching is not offered to, anyone under 18.

Security and breach notification

Passwords are hashed, never stored in plain text. Session notes and intake answers are encrypted at rest. Access to the coach console requires authentication and every session-note read is logged. If a breach occurs that risks your rights and freedoms, we will notify affected users and, where legally required, the relevant regulator, without undue delay.

Changes to this policy

If we make a material change to this policy, we will post the update here and, where appropriate, notify registered users by email.

Last updated: 29 August 2026