Privacy Policy

Who is responsible for your data

Aromal Chekaver is responsible for the personal data collected on this website (the “Data Fiduciary”). In this policy, “we” and “us” mean Aromal Chekaver and the team who manage this website.

Contact: aromalchekaver1@gmail.com

What we collect and why

We only collect what we need, and only for the purposes below.

• When you use the contact form: your name, email address, phone number (only if you give it) and your message. Purpose: to read your message and reply to it, for example about a booking, collaboration, press request or a message from a fan. Basis: your consent, which you give by ticking the box on the form.
• A record of your consent: when you agreed, which version of this policy you agreed to, and the language it was shown in. Purpose: to be able to show that you consented.
• When you make a privacy request: your email address, your name (if you give it) and the details you write. Purpose: to carry out your request and keep a record that we did, as the law requires.
• To stop spam and abuse: when you send a form, we keep a one-way scrambled code made from your IP address for up to 24 hours, to limit how many messages can be sent. It can’t be turned back into your IP address.

We don’t use analytics, advertising or tracking cookies, we don’t send marketing emails, and we never sell or rent your data.

Children

If you are under 18, please ask a parent or guardian before using the contact form; by ticking the consent box you confirm that you are 18 or older, or that they have agreed. If we learn that we hold a child’s data without that agreement, we will delete it.

Where your data is stored and who can see it

Messages and privacy requests are stored in a private database run by Turso, separate from the system that publishes the website’s content. Only named members of our team can read them, after signing in to a private portal with their GitHub account, and every view, change and deletion is logged.

These service providers process data for us:

• Turso: stores contact messages and privacy requests.
• Our website hosting provider: delivers the website and may keep short-lived technical logs, such as IP addresses, for security.
• Sanity: stores the website’s public content (music, photos, blog posts). It never receives what you send through our forms.
• GitHub: lets our team sign in to the private portal. It receives no data about visitors.
• Cloudflare Turnstile: checks that forms are sent by a person, not a bot.

Some of these providers may store or process data on servers outside India. We only use providers that protect data with appropriate security measures.

How long we keep your data

• Messages are kept while we are in conversation with you, and afterwards only as long as they are needed for the same matter, such as an ongoing booking. We review stored messages regularly and delete the ones we no longer need. You can ask us to delete yours at any time.
• Privacy requests are kept as a record of how we handled them, and deleted once that record is no longer needed.
• Anti-spam codes are deleted automatically within 24 hours.

Your rights

You can ask us to:

• Tell you what we hold about you and how we have used it.
• Correct or complete your data if it is wrong or out of date.
• Delete your data.
• Withdraw your consent at any time. It’s as simple as giving it: use the form below or email us. Withdrawing doesn’t affect anything we did before, but we will stop using your data and delete it.
• Nominate someone to use these rights for you if you die or become unable to.
• Raise a grievance with our Grievance Officer (below). If you are not satisfied with our response, you can complain to the Data Protection Board of India.

We respond to every request within 30 days. We may ask you to confirm that the email address is yours before we share or delete anything.

Keeping your data safe

The website uses encrypted connections (HTTPS). Personal data is kept only in the private database, never in the public content system. Access is limited to named team members, and all access is logged. If a data breach affects your personal data, we will tell you and the Data Protection Board of India as the law requires.

Cookies and embedded content

This website doesn’t set advertising or tracking cookies. It uses your browser’s session storage to remember that you have already seen the intro animation; this is cleared when you close the tab. Team members who sign in to the private portal get a sign-in cookie.

Some pages show music and videos from YouTube, Spotify, Apple Music or Amazon Music. When they load, those services may set their own cookies and receive your IP address under their own privacy policies. YouTube videos are shown in YouTube’s privacy-enhanced mode.

Changes to this policy

When we change this policy, we update the date at the top. If a change affects how we use data you have already given us, we will ask for your consent again where the law requires it.

Grievance Officer

Aromal Chekaver, Grievance Officer
Email: aromalchekaver1@gmail.com
We respond within 30 days.

If you would like this policy in another language, please contact us.

Make a privacy request

Use this form to see, correct or delete your data, withdraw your consent, nominate someone, or raise a grievance.