Privacy Policy

Last updated 30 July 2026

This policy explains what personal data TODO_LEGAL_ENTITY_NAME collects when you register for Shameless Self Worth, why it is collected, how long it is kept, and what you can ask us to do with it.

1. Who we are

TODO_LEGAL_ENTITY_NAME (“we”, “us”) operates this website and sells Shameless Self Worth, a live 90-minute online workshop. We are the data fiduciary for the personal data described below, as that term is used in India’s Digital Personal Data Protection Act, 2023.

2. What we collect

We collect only what is needed to sell you a seat and get you into the room.

Data	Why we need it
Your name	To address you, and to match your payment to your registration.
Email address	To send your Zoom link, your workbook, and reminders before the session.
Mobile number	To send reminders and, if you join it, the WhatsApp community invite.
Payment reference IDs	To reconcile your payment and process any refund we owe you.
IP address, browser type, referring page	Security, fraud prevention, and measuring which ads led to registrations.
Advertising cookies (see section 5)	To measure the performance of our advertising.

We never see or store your card, UPI or bank details. Payments are handled entirely by Razorpay on their own systems. We only ever receive a payment reference number confirming that a payment succeeded.

3. Why we process it, and on what basis

To deliver what you paid for. Sending your Zoom link, workbook and reminders. This is necessary to perform our contract with you.
To meet legal and financial obligations. Tax records, payment reconciliation, and dispute handling.
To measure our advertising. See section 5.
To send you news of future workshops. Only if you ticked the optional consent box at checkout. That box is separate from your purchase, is unticked by default, and you can withdraw it at any time without affecting your registration.

4. Who we share it with

We do not sell your personal data. We share it only with the service providers we need to run this:

Razorpay, payment processing. They are the ones who handle your payment instrument, not us.
Vercel, website hosting.
Neon, the database holding your registration record.
Resend, sending your confirmation and reminder emails.
Zoom, hosting the live session you attend.
Meta Platforms, advertising measurement, as described in section 5.

Some of these providers store or process data on servers outside India. Where that happens, the transfer is made on the basis that it is necessary to provide the service you have bought.

5. Cookies and advertising measurement

We advertise on Facebook and Instagram, and we need to know which ads actually lead to registrations. To do that we use the Meta Pixel and the Meta Conversions API.

Two things are worth being straightforward about:

Cookies named _fbp and _fbc are set in your browser to recognise that the same visitor who clicked an ad later registered. They are stored for up to 90 days.
When you complete a purchase, we send Meta a server-side event confirming it. Your email address and phone number are irreversibly hashed with SHA-256 before they leave our server, so Meta receives a fingerprint rather than your actual details. We also send your IP address and browser user agent, which are not hashed, as Meta requires them in that form.

You can limit this from Meta’s side through your Facebook or Instagram ad preferences, and you can block cookies in your browser settings. Blocking them does not affect your registration or your access to the workshop.

6. How long we keep it

Registration and contact details: up to 3 years after the workshop, so we can help if you contact us later.
Payment and tax records: 8 years, as required under Indian tax law.
Advertising cookies: up to 90 days.
Marketing list: until you unsubscribe.

7. Your rights

Under the Digital Personal Data Protection Act, 2023, you can ask us to:

tell you what personal data of yours we hold and who we have shared it with;
correct anything that is wrong or incomplete;
erase your data, where we are not required to keep it for tax or legal reasons (payment records are the usual exception);
withdraw your marketing consent, at any time;
nominate someone to exercise these rights on your behalf if you are unable to.

Write to mindsetmentorshaheen@gmail.com and we will respond within 30 days.

8. Grievance officer

If you are unhappy with how we have handled your data, contact our grievance officer directly:
TODO_GRIEVANCE_OFFICER_NAME
mindsetmentorshaheen@gmail.com
TODO_PHONE_WITH_COUNTRY_CODE

If we do not resolve it to your satisfaction, you may complain to the Data Protection Board of India.

9. Children

This workshop is intended for adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has registered, write to us and we will delete the record.

10. Security

The site runs over HTTPS. Payment credentials never reach our systems. Access to the registration database is restricted, and secrets are held in environment variables rather than in code. No system is perfectly secure, but we take reasonable measures appropriate to the data we hold.

11. Changes

If we change this policy we will update the date at the top. Material changes affecting how we use data you have already given us will be notified by email.