Privacy Policy

This Privacy Policy explains how Atul Singh ("I", "me", "we") collects, uses, stores, and protects your information when you visit atulsingh.co.in, book a strategy call, or engage any of my AI sales & marketing services. This policy is written with the EU General Data Protection Regulation ("GDPR"), the UK GDPR, the Australian Privacy Act 1988, and India's Digital Personal Data Protection Act, 2023 ("DPDP Act") in mind.

1. Information I Collect

When you submit the consultation form on this website, I collect:

• Your name
• Work email address
• Company name or website
• Phone or WhatsApp number (optional)
• Country
• Team size
• Which service you're exploring (Chatbot, Outreach, Cohort, or Not sure)
• The optional message you write about your situation

During a paid engagement, I may additionally process information you choose to share with me — for example, brand documents, FAQs, prospect lists, or login credentials needed to deliver the project. Sensitive personal data (such as government IDs or payment card numbers) should never be sent to me by email — payments are handled by third-party processors that collect that data directly.

2. Why I Collect It

Your information is used only to:

• Reply to your enquiry and schedule the free 20-minute strategy call.
• Prepare a proposal and deliver any service you engage me for.
• Send you occasional updates directly related to my services (proposals, cohort dates, project status). You can opt out at any time by replying to any email.
• Meet legal, accounting, and tax obligations.

I do not use your information for advertising, profiling, or any unrelated purpose, and I do not sell or rent it.

3. Legal Basis (GDPR / UK GDPR)

For visitors in the EU, UK, or other jurisdictions where it applies, I rely on the following legal bases: (a) your consent when you submit the contact form, (b) the necessity to take steps at your request before entering a contract or to perform a contract once engaged, and (c) my legitimate interests in responding to enquiries and running my business — balanced against your rights and interests.

4. How It Is Stored

Form submissions are stored in a managed database (Lovable Cloud, powered by Supabase) hosted in the European Union. Access is limited to me via authenticated admin tools. Project files and email are stored on standard business productivity platforms (such as Google Workspace) with industry-standard security controls.

5. International Transfers

I am based in Noida, India, and most of my clients are in the US, UK, and Australia. By submitting your information, you understand that your personal data may be transferred to and accessed from India for the purpose of delivering the services you've requested. Where required, I rely on appropriate safeguards (such as Standard Contractual Clauses adopted by the European Commission and UK equivalents) for any cross-border transfers.

6. Sharing of Data

I do not sell, rent, or trade your personal information. I share it only with service providers strictly necessary to run my business — for example, hosting (Lovable Cloud / Supabase, Cloudflare), email (Google Workspace), payments (Stripe / Razorpay), and analytics (see Section 7). These providers process data on my behalf under their own privacy and security commitments.

7. Cookies & Analytics

This website may use Google Tag Manager, Google Analytics 4, Microsoft Clarity, and the Meta Pixel to understand anonymous, aggregated usage patterns (which pages are visited, where visitors come from, which CTAs perform). These tools may set cookies or similar identifiers. They are used for analytics and conversion measurement only — I do not run paid advertising at this time. You can disable cookies in your browser settings or use a tracking blocker.

8. Data Retention

I keep enquiry data for up to 24 months from your last interaction, after which it is deleted unless we have an active engagement or a legal obligation requires longer retention (for example, invoices and tax records).

9. Your Rights

You have the right to:

• Request access to the personal data I hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data ("right to be forgotten").
• Object to or restrict certain processing.
• Request a portable copy of your data.
• Withdraw consent at any time, where consent was the basis.
• Lodge a complaint with your local data protection authority (for example, the ICO in the UK, your EU member-state DPA, the OAIC in Australia, or India's Data Protection Board once operational).

To exercise any of these rights, email me at join@atulsingh.co.in. I will respond within a reasonable timeframe and at most within 30 days.

9a. California Residents — Your CCPA / CPRA Rights

If you are a California resident, the California Consumer Privacy Act ("CCPA"), as amended by the California Privacy Rights Act ("CPRA"), gives you specific rights regarding your personal information. This section is provided as a "notice at collection" and is intended to be read together with the rest of this Privacy Policy.

Categories of personal information collected in the past 12 months: identifiers (name, email, phone, IP address), commercial information (services you enquired about), internet or network activity (pages visited, referring URL, device/browser information collected via cookies and similar tools), and inferences drawn from the above to understand how the site is performing.

Sources: directly from you (the contact form), automatically from your browser (analytics tools), and from service providers (hosting, email).

Business purposes: to respond to enquiries, deliver services, run the website, measure performance, and meet legal / accounting obligations.

Sale or sharing of personal information: I do not "sell" personal information for money. However, the Meta (Facebook) advertising pixel and similar ad-measurement cookies, when enabled, may constitute "sharing" of personal information for cross-context behavioural advertising under the CPRA. You can opt out at any time via Your Privacy Choices. We also honour the Global Privacy Control (GPC) browser signal as a valid opt-out.

Sensitive personal information: I do not use or disclose sensitive personal information for purposes that require the right-to-limit under the CPRA.

Retention: see Section 8 above.

Your California rights: right to know, right to delete, right to correct, right to opt out of sale/sharing, right to limit use of sensitive personal information, and the right to non-discrimination for exercising any of these rights. To submit a request (including via an authorised agent), email join@atulsingh.co.in with the subject "California Privacy Request". I will verify your identity and respond within 45 days as required by law.

"Shine the Light" (Cal. Civ. Code § 1798.83): California residents may request information about disclosures of personal information to third parties for their direct marketing purposes. I do not share personal information with third parties for their own direct marketing.

9b. Other US States

If you are a resident of Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, Delaware, Iowa, New Hampshire, New Jersey, or Tennessee, comprehensive privacy laws in your state grant you rights broadly similar to California's — including the right to access, delete, correct, port, and opt out of targeted advertising and the sale of personal data. Use the same Your Privacy Choices page to opt out, or email join@atulsingh.co.in to exercise any of these rights. We honour the Global Privacy Control (GPC) browser signal as a universal opt-out where applicable.

10. Data Security

I follow reasonable security practices including access-controlled storage, encrypted transmission (TLS), least-privilege access for any tools or contractors, and regular review of the third-party services I rely on. No system is perfectly secure, but I take protecting your data seriously.

11. Children's Data

This website and these services are intended for adults and businesses. I do not knowingly collect personal information from anyone under 16.

12. Updates to This Policy

I may update this policy from time to time. The most recent version will always be available on this page with an updated date at the top.

13. Contact

For any privacy-related question, write to me at join@atulsingh.co.in. Based in Noida, India · Serving SMBs globally.