Privacy Policy | Mahipal Katha – Global Financial Adviser

1. Who We Are

This website, mahipalkatha.com, is operated by Mahipal Katha — Founder of EApps Technologies, Co-Founder of BatAI, and Partner at Finsetter & Prudent Corporate Advisory Services Ltd.

For the purposes of data protection law, Mahipal Katha is the data controller responsible for any personal data collected through this website.

Data Controller: Mahipal Katha
Registered offices: Hyderabad, Telangana, India & London, United Kingdom
Email: contact@mahipalkatha.com

Financial advisory services referred to on this website are offered through Finsetter, a platform of Prudent Corporate Advisory Services Ltd. (SEBI Registered Investment Adviser). Insurance products are facilitated as a licensed Business Associate of Tata AIA Life Insurance (IRDAI Regulated).

2. Data We Collect & Why

We collect personal data only when you actively provide it or when it is generated automatically as part of your visit to this website.

2a. Data you provide directly

When you submit the consultation booking form on this website, we collect:

Data Field	Purpose
Full name	To address you correctly in correspondence
Phone / WhatsApp number	To contact you to schedule your consultation
Email address	To send confirmation and follow-up communications
Country of residence	To determine applicable regulatory framework and relevant services
Service interest	To route your enquiry to the right advisory area
Your message (optional)	To understand your specific needs before the consultation

This data is written directly to a secure Google Sheets spreadsheet accessible only to the Finsetter advisory team.

2b. Data collected automatically

When you visit this website, the following data may be collected automatically:

IP address — collected by Google Analytics 4 (anonymised by default) and your web hosting provider's server logs
Browser type and version
Operating system
Pages visited and time spent
Referring URL — the page that linked you to this site
Device type (desktop, mobile, tablet)
Approximate geographic location (country / city level, derived from IP)

This data is used solely to understand how visitors use the website and to improve its content and performance. It is not used to identify you personally.

3. Lawful Basis for Processing

We rely on the following lawful bases under the UK GDPR and India's Digital Personal Data Protection (DPDP) Act 2023:

Consent — by completing and submitting the consultation form, you give your explicit consent for us to process your personal data to respond to your enquiry and arrange a consultation.
Legitimate interests — we have a legitimate interest in analysing anonymised website traffic data to improve the user experience and understand which content is most valuable to our audience. This does not override your rights or freedoms.

You may withdraw your consent at any time by contacting us at contact@mahipalkatha.com. Withdrawing consent will not affect the lawfulness of any processing carried out before withdrawal.

4. How Data Is Shared

We do not sell, rent, or trade your personal data to any third party. Your data is shared only in the following limited circumstances:

Finsetter / Prudent Corporate Advisory team

Form submission data is stored in a Google Sheets document accessible only to the authorised advisory team at Finsetter & Prudent Corporate Advisory Services Ltd. This is necessary to process your consultation request.

Google LLC

We use Google Analytics 4 (GA4) to collect anonymised website usage statistics. Google may process your data on servers located outside of India and the UK. Google LLC participates in the EU–US Data Privacy Framework. You can opt out of GA4 tracking via the Google Analytics opt-out browser add-on.

Form submissions use Google Sheets API. Data is stored on Google's servers and subject to Google's Privacy Policy.

Legal requirements

We may disclose personal data if required to do so by law, or in response to valid requests from public authorities (e.g. a court or regulatory body).

We do not share your data with insurance companies, investment platforms, or any other commercial third parties without your explicit, separate consent.

5. Data Retention

We retain personal data submitted via the consultation form for a maximum of 24 months from the date of submission, unless:

You become an active client, in which case data is retained for the duration of the advisory relationship plus any statutory retention period required by SEBI, IRDAI, or applicable law; or
You request deletion earlier (see Your Rights).

Anonymised analytics data collected by Google Analytics 4 is retained for 14 months in line with GA4's default retention setting.

Server log data (including IP addresses) is retained by the hosting provider for a standard period of up to 90 days for security and diagnostic purposes.

6. Your Rights

Depending on your country of residence, you have the following rights regarding your personal data:

UK visitors — UK GDPR rights

Right of access Request a copy of the personal data we hold about you.

Right to rectification Ask us to correct inaccurate or incomplete data.

Right to erasure Ask us to delete your personal data ("right to be forgotten").

Right to restrict processing Ask us to limit how we use your data.

Right to data portability Request your data in a structured, machine-readable format.

Right to object Object to processing based on legitimate interests.

Right to withdraw consent Withdraw consent at any time without affecting prior processing.

Right to complain Lodge a complaint with the ICO (UK supervisory authority).

India visitors — DPDP Act 2023 rights

Right to information Know what personal data is being processed and for what purpose.

Right to correction & erasure Request correction of inaccurate data or deletion of data no longer necessary.

Right to grievance redressal Lodge a complaint with us within a reasonable timeframe.

Right to nominate Nominate another individual to exercise rights on your behalf in the event of death or incapacity.

To exercise any of these rights, please email contact@mahipalkatha.com with the subject line "Data Rights Request". We will respond within 30 days.

7. Cookies & Analytics

This website uses cookies — small text files stored on your device — to support site functionality and to collect anonymised analytics.

Cookies we use

Cookie type	Provider	Purpose	Duration
Session / functional	mahipalkatha.com	Maintains basic site functionality (e.g. navigation state)	Session (deleted on browser close)
Analytics (_ga, _ga_*)	Google Analytics 4	Anonymised traffic analysis — pages visited, session duration, device type	Up to 2 years
Analytics (_gid)	Google Analytics 4	Distinguishes unique users for analytics	24 hours

Managing cookies

You can control and delete cookies through your browser settings. The following links provide guidance for common browsers:

You can also opt out of Google Analytics tracking specifically using the Google Analytics opt-out browser add-on.

Please note that disabling certain cookies may affect the functionality of this website.

8. Security

We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it, including:

HTTPS encryption for all data transmitted between your browser and this website
Access controls limiting who can view form submission data in Google Sheets
No storage of payment card or financial account details on this website

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. If you have reason to believe your data has been compromised, please contact us immediately at contact@mahipalkatha.com.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable law. When we make material changes, we will update the "Last updated" date at the top of this page.

We encourage you to review this policy periodically. Continued use of this website after any changes constitutes acceptance of the updated policy.

10. Contact & Data Requests

For any questions about this Privacy Policy, to exercise your data rights, or to submit a complaint or data deletion request, please contact:

Mahipal Katha — Data Controller
Email: contact@mahipalkatha.com
Subject line: Data Rights Request

Offices: Hyderabad, Telangana, India & London, United Kingdom
Response time: Within 30 days of receipt

If you are a UK resident and are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: ico.org.uk/make-a-complaint
Helpline: 0303 123 1113

If you are an India resident and wish to raise a grievance, you may do so in writing to the email address above. We will acknowledge your grievance within 48 hours and endeavour to resolve it within 30 days.