Legal
Privacy Policy
This notice explains what personal data we collect, why we collect it, and what you can do about it. It describes how this website actually works rather than covering hypotheticals.
Last updated: August 2026
Sections
Section 1
Who we are
Astrologer Komal Kalra ("we", "us") is an independent consultation practice operating this website. For the purposes of India's Digital Personal Data Protection Act, 2023, we are the Data Fiduciary for the personal data described below, and you are the Data Principal.
Contact: consult@komalkalra.com · +91 98785 77077
Section 2
What we collect, and why
We collect only what a consultation booking actually requires. Each category below states its purpose, which is the basis on which you are asked to provide it.
- Account details — name, email address, phone number
- To create your account, confirm your booking, send your joining link and reminders, and contact you if something changes.
- Birth information — date, time and place of birth
- Optional. Used solely to prepare your consultation. You may decline to provide it, or provide only part of it, and still book. If you do not know your birth time you can say so, and the session proceeds.
- Consultation content — the question you submit when booking, and notes taken during a session
- To prepare for and conduct your consultation, and to give continuity if you book again.
- Payment records — amount, status, method type, and the transaction reference issued by Razorpay
- To confirm your booking, issue receipts, and meet tax and accounting obligations.
- Enquiries — anything you send through the contact form
- To reply to you. If you abandon a booking after entering your details, we retain those details as an enquiry so we can follow up.
- Technical data — IP address for rate limiting, and session cookies
- To keep you signed in and to prevent abuse of the booking and contact forms.
Section 3
What we never do
- We do not sell your personal data to anyone, under any circumstances.
- We do not share your birth details or consultation content with third parties.
- We do not run advertising trackers, third-party analytics pixels, or profiling of any kind on this site.
- We do not use your data to train any automated system.
- We never see or store your card number, UPI PIN, CVV or bank credentials. Those are entered on Razorpay’s secure checkout and never reach our servers.
Section 4
Cookies
This site sets only what it needs to function. There are no advertising or analytics cookies, which is why you are not asked to dismiss a consent banner.
- Authentication cookies — keep you signed in. Set by Supabase, our authentication provider. Removing them signs you out.
- A short-lived booking session cookie — lets your own held time slot stay visible to you while you complete checkout. It expires within hours and identifies a browser session, not a person.
Section 5
Who else processes your data
We use a small number of service providers, each receiving only what it needs to do its job and each bound by its own data protection obligations.
- Supabase
- Database hosting and authentication. Stores your account, bookings and payment records.
- Razorpay
- Payment processing. PCI-DSS compliant. Receives your name, email, phone and the amount payable; handles your payment credentials entirely within its own systems.
- Only if you choose to sign in with Google. We receive your name, email address and profile picture. We do not receive your Google password or access anything else in your Google account.
- Our email provider
- Sends booking confirmations, reminders and receipts.
Section 6
How long we keep it
- Booking and payment records — retained as long as Indian tax and accounting law requires.
- Consultation notes and birth details — kept while your account is active, so a repeat session has context. Deleted on request.
- Enquiries — kept while we follow up, then periodically cleared.
- Payment provider event logs — retained for reconciliation and audit, with payload contents pruned after twelve months.
Section 7
Your rights
Under the DPDP Act you have the right to access a summary of your personal data and how it is processed, to have it corrected or completed, to have it erased, to nominate someone to exercise these rights if you are unable to, and to a grievance redressal process.
Most of this is self-service: sign in and open your dashboard to view your bookings and payments, and your profile to correct or remove your details, including your birth information. For anything else — erasure of your whole account, a copy of your data, or withdrawal of consent — contact the Grievance Officer below and we will action it.
Withdrawing consent is always available to you. Note that we may still need to retain payment and booking records where law requires it, and that withdrawing consent for the data a consultation depends on may mean we cannot deliver the session.
Section 8
Grievance Officer
In accordance with the Information Technology Act, 2000 and the rules made under it, and as the contact point for data protection requests:
- Name: Astrologer Komal Kalra
- Designation: Grievance Officer
- Email: consult@komalkalra.com
- Phone: +91 98785 77077
We acknowledge complaints within 48 hours and aim to resolve them within 30 days.
If you are not satisfied with our response, you may complain to the Data Protection Board of India.
Section 9
Children
This service is not directed at children. You must be 18 or over to create an account or make a booking. A parent or guardian may book a consultation concerning a minor, in which case they provide the minor’s details and are responsible for that consent.
Section 10
Security
Data is encrypted in transit. Access is restricted at the database level so one client’s records cannot be read by another. Administrative actions affecting money or bookings are logged with the account that performed them.
No system is perfectly secure. If a breach affecting your personal data occurs, we will notify you and the Data Protection Board as required.
Section 11
Changes to this notice
If we change how we handle personal data we will update this page and its revision date. Where a change is material we will tell account holders directly rather than relying on you to notice.