1 Introduction

Welcome to CrunchyCashFlow ("we," "our," or "us"), a personal finance blog accessible at crunchycashflow.blogspot.com. This blog is operated by an individual content creator based in India.

This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website. It applies to all users of the website and governs our data collection practices in compliance with:

• The Digital Personal Data Protection Act, 2023 (DPDP Act) — India's principal personal data protection legislation
• The Information Technology Act, 2000 and its amendments
• The IT (Reasonable Security Practices and Sensitive Personal Data or Information) Rules, 2011
• Google's applicable policies (as the provider of the Blogger platform and Analytics)

By accessing or using our website, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the website.

2 Information We Collect

We collect two categories of information:

2.1 Information Collected Automatically

When you visit our website, certain data is collected automatically by third-party services we use. This may include:

• Log data: Your IP address (anonymised), browser type and version, operating system, referring URL, pages visited, time and date of visit, and time spent on pages.
• Device information: Screen resolution, device type (mobile, tablet, desktop), and language preferences.
• Cookies and similar tracking technologies: Session cookies, persistent cookies, and analytics cookies placed by Google Analytics and Blogger.
• Aggregated usage data: Page views, bounce rate, and traffic source data collected in anonymised, non-personally-identifiable form.

We do not intentionally collect Sensitive Personal Data or Information (SPDI) as defined under the IT Rules, 2011, which includes passwords, financial information, health data, biometric data, and similar categories.

2.2 Information You Provide Voluntarily

We may collect personal information that you voluntarily submit to us, such as:

• Comments: If you post a comment using your Google account through Blogger's commenting system, your name and profile picture may be publicly visible. This data is processed by Google under its own privacy policy.
• Contact form inquiries: If you reach out via our contact page, we may receive your name and email address solely for the purpose of responding to your inquiry.
• Newsletter subscriptions: If you subscribe to email updates, your email address is collected through the relevant email service provider. You may unsubscribe at any time.

3 How We Use Your Information

We use the information we collect for the following legitimate purposes:

• Website analytics: To understand how visitors interact with our content, identify popular articles, improve user experience, and guide our content strategy.
• Service delivery: To operate, maintain, and provide you with the features and functionality of the website.
• Communications: To respond to your inquiries and, where you have opted in, to send periodic newsletters or content updates.
• Legal compliance: To comply with applicable Indian laws and regulations, including the DPDP Act, 2023, and to cooperate with law enforcement when legally required.
• Security: To detect and prevent fraudulent or malicious activity, spam, and other harmful behaviours.

We do not use your personal data to make automated decisions that produce legal or similarly significant effects on you.

We do not sell, rent, trade, or otherwise transfer your personally identifiable information to outside parties, except as described in this policy.

4 Cookies & Tracking Technologies

Cookies are small text files stored on your device when you visit a website. We use cookies for the following purposes:

Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or be notified when a cookie is set. Note that disabling cookies may affect the functionality of some website features.

• Google Analytics opt-out: Install the Google Analytics Opt-out Browser Add-on to prevent your visit data from being sent to Google Analytics.
• Google Ad personalisation: Manage your ad settings at Google Ad Settings.
• General opt-out: Visit the Network Advertising Initiative opt-out page.

5 Third-Party Services

Our website integrates third-party services that have their own privacy policies. We encourage you to review the privacy policies of these providers. We are not responsible for the content or privacy practices of third-party websites or services.

5.1 Google / Blogger

This website is hosted on Blogger, a platform owned by Google LLC. Google automatically processes certain data about visitors to Blogger-hosted sites. Please review Google's Privacy Policy and Terms of Service. Google may store data on servers located outside India.

5.2 Google Analytics

We use Google Analytics (Property ID: G-BRN4BLYNVG) to collect and analyse website traffic data. Google Analytics uses cookies to collect information such as how often users visit the site, what pages they visit, and what other sites they visited prior to arriving. We use the information to improve this website. Google Analytics collects only the IP address assigned to you at the time of your visit, not your name or other identifying information. We have enabled IP anonymisation on this property.

Google's ability to use and share information collected by Google Analytics about your visits to this site is restricted by the Google Analytics Terms of Service and Google's Privacy Policy.

5.3 Google AdSense

We may display advertisements served by Google AdSense on this website. Google AdSense uses cookies and web beacons to serve ads based on your prior visits to our website and other sites on the internet. You may opt out of personalised advertising by visiting Google's Ads Settings. Google's use of advertising cookies enables it and its partners to serve ads based on your visit to our site and other sites on the internet.

5.4 TradingView

Our homepage includes a live market ticker widget provided by TradingView. TradingView may collect data when the widget loads. Please review TradingView's Privacy Policy for details.

5.5 YouTube

We embed YouTube videos on some pages. When you interact with a YouTube video, YouTube (operated by Google) may collect data in accordance with its Privacy Policy. Videos are loaded using YouTube's privacy-enhanced mode where possible.

5.6 External Links

Our website contains links to external websites not operated or controlled by us. We are not responsible for the privacy practices of those websites. We encourage you to review the privacy policy of every website you visit.

6 Affiliate Disclosure & Sponsored Content

CrunchyCashFlow participates in affiliate marketing programmes. This means that when you click on certain links on this website and make a purchase or sign up for a service, we may earn a commission or referral fee at no additional cost to you.

Current affiliate relationships include, but may not be limited to:

• Zerodha – India's largest retail stockbroker
• Hostinger – Web hosting services

Affiliate relationships do not influence our editorial content, product recommendations, or opinions. We only recommend products and services we genuinely believe provide value to our readers. All affiliate links are clearly identified or disclosed where applicable.

If we publish sponsored posts or receive compensation for content, that content will be explicitly labelled as "Sponsored," "Paid Partnership," or "Advertisement" in compliance with ASCI guidelines.

Earnings from affiliate commissions and advertising help support the costs of operating this blog and allow us to continue providing free educational content.

7 Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by applicable law.

• Google Analytics data: Retained for 26 months by default, after which it is automatically deleted. You can request shorter retention periods via Google Analytics settings.
• Contact inquiries: Emails and correspondence are retained for up to 12 months unless you request earlier deletion or an ongoing relationship requires otherwise.
• Comment data: Managed by Google/Blogger and subject to their data retention policies.

Once the retention period expires, personal data is deleted or anonymised in a manner that prevents identification of the individual.

8 Data Security

We implement reasonable technical and organisational measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction. These measures include:

• HTTPS encryption for all website traffic (TLS/SSL)
• Reliance on Google's secure infrastructure (Blogger platform) which maintains ISO/IEC 27001 certification
• Limited access to personal data on a need-to-know basis

9 Your Rights Under the DPDP Act, 2023

The Digital Personal Data Protection Act, 2023 (DPDP Act) grants individuals ("Data Principals") the following rights with respect to their personal data processed by Data Fiduciaries. Where CrunchyCashFlow acts as a Data Fiduciary, we are committed to honouring these rights:

• Right to access information (Section 11): You have the right to obtain a summary of the personal data we hold about you and the processing activities undertaken.
• Right to correction and erasure (Section 12): You have the right to request correction of inaccurate or misleading personal data, and to request the erasure of personal data that is no longer necessary for the purpose it was collected.
• Right to grievance redressal (Section 13): You have the right to have your grievances addressed in an expeditious manner. Please see the contact details in Section 13 of this policy.
• Right to nominate (Section 14): You may nominate another individual to exercise your rights on your behalf in the event of your death or incapacity.

To exercise any of the above rights, please contact us using the details provided in Section 13. We will respond to your request within a reasonable period and in compliance with applicable law.

Withdrawal of Consent: Where processing is based on your consent, you may withdraw consent at any time. However, withdrawal of consent will not affect the lawfulness of processing carried out prior to withdrawal.

Note on Third-Party Data: For data held by Google (via Analytics, Blogger, AdSense, or YouTube), please exercise your rights directly through Google's platform. Google's Data Protection Officer details are available at policies.google.com/privacy.

10 Children's Privacy

CrunchyCashFlow is intended for general audiences and is not directed at children under the age of 18 years. We do not knowingly collect personal data from minors. The DPDP Act, 2023 imposes heightened obligations on Data Fiduciaries processing data of children, including the requirement to obtain verifiable parental consent.

If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us immediately using the details in Section 13, and we will take prompt steps to delete such information.

11 Cross-Border Data Transfers

As this website is hosted on Google's Blogger platform and uses Google Analytics, data collected from you may be transferred to and stored on servers located outside India, including in the United States and other jurisdictions.

The Government of India may, under the DPDP Act, 2023, notify certain countries to which the transfer of personal data is restricted. We will comply with any such notifications. Google LLC, as a Data Processor, maintains standard contractual clauses and other safeguards for international data transfers.

By using this website, you acknowledge that your data may be processed outside India, subject to the applicable safeguards described above.

12 Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. Changes will be effective immediately upon posting the updated policy to this page, with the "Last Updated" date revised accordingly.

For material changes, we will make reasonable efforts to notify users by posting a prominent notice on the homepage or via any newsletter subscription you have opted into. Your continued use of the website after the posting of changes constitutes your acceptance of those changes.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

13 Contact Us / Grievance Officer

In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, the designated Grievance Officer for CrunchyCashFlow is:

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please reach out to us via the Contact Us page. We are committed to addressing all legitimate queries promptly and in good faith.

If you are not satisfied with our response, you may file a complaint with the Data Protection Board of India once it is constituted and operational under the DPDP Act, 2023.