Effective Date: 1 March 2026
Last Updated: 20 September 2026

1. Who We Are and Scope

1.1 This Privacy Policy ("Policy") explains how Hindustan Astro ("Hindustan Astro", "we", "us" or "our") collects, uses, stores, shares and protects your personal data when you use www.hindustanastro.com (the "Website"), our support channels and our Services. It forms part of our Terms of Service, and capitalised words not defined here have the meaning given in those Terms.

1.2 We are the Data Fiduciary for your personal data under the Digital Personal Data Protection Act, 2023 (the "DPDP Act"). References in this Policy to the DPDP Act include the Digital Personal Data Protection Rules, 2025.

1.3 This Policy describes the personal data we process, the purposes of processing, the way you can exercise your rights, and the way you can complain to the Data Protection Board of India. Where the law requires your consent, we shall also present a separate consent notice to you at the point where your personal data is collected.

2. Definitions

2.1 "personal data" means any data about an individual who is identifiable by or in relation to that data.

2.2 "Data Principal" means the individual to whom the personal data relates, which in this Policy is you. Where the individual is a child, it includes the parent or lawful guardian.

2.3 "Data Fiduciary" means the person who decides the purpose and means of processing, which in this Policy is us.

2.4 "processing" means any operation performed on personal data, including collection, storage, use, sharing and erasure.

3. Personal Data We Collect

3.1 Data you give us. Your name, email address, telephone number, billing address and delivery address, and the date, time and place of birth of the person for whom a Service is requested.

3.2 Data created through the Services. Your consultation inputs, your birth chart details, your personalised reports, your bookings and orders, and records of your payments.

3.3 Data from our support channels. Your calls, messages and enquiries on telephone, WhatsApp, social media and Website chat, including your voice where a call is recorded.

3.4 Data from Webinars. Your name or username, image, voice, chat messages and questions, where a Webinar is recorded.

3.5 Data collected automatically. Your internet protocol address, device and browser details, pages visited, and identifiers from cookies and similar technologies.

3.6 Payment data. Payments are processed by third party payment processors. We receive confirmation of your payment, and we do not store your card details on our own systems.

4. How We Use Your Personal Data

4.1 We use your personal data to (a) prepare your birth chart, analysis and personalised reports, (b) schedule and deliver Consultations and Webinars, (c) process orders and payments and deliver Products, (d) provide customer support and respond to requests and grievances, (e) send service communications such as confirmations, schedules and order updates, (f) operate, secure and improve the Website and the Services, (g) prevent fraud and misuse and contest chargebacks, and (h) comply with our legal, accounting and tax obligations.

4.2 With your consent, we send you updates and promotional communications. You may withdraw this consent at any time without affecting any Service you have purchased.

4.3 We may use reviews, ratings and general feedback in connection with our business, as set out in our Terms of Service. We publish your name, image or an identifying testimonial in advertising only with your separate consent.

4.4 We may use chat and call material to train our team and our AI systems and to improve the quality of our service. Before any material is used for this purpose, we remove your name, telephone number, address and other identifying details.

5. Legal Basis and Consent

5.1 We process your personal data on the basis of your consent, or for the legitimate uses permitted under Section 7 of the DPDP Act, including where you voluntarily provide your personal data for a specified purpose such as a booking, an order or an enquiry, and where processing is necessary to comply with the law or with an order of a court or authority.

5.2 Where we rely on consent, the consent is for the specific purpose stated when we ask for it, and you may withdraw it at any time as easily as you gave it, through the privacy contact on our Contact Information page.

5.3 Withdrawal of consent does not affect processing carried out before the withdrawal. Where the personal data is necessary for a Service, withdrawal may mean that we cannot deliver that Service, and you bear the consequences of the withdrawal.

6. Birth Details

6.1 The date, time and place of birth, and any similar details used to prepare an astrological analysis, are treated by us with a higher degree of care. We use them only to deliver the Service requested, and we limit access to them.

6.2 Where you provide the birth details of another person, you confirm that you have that person's consent, or that you are the parent or lawful guardian of a child.

7. Consultations, Webinars and Recordings

7.1 Consultations are private and confidential. We do not record the audio or video of a Consultation without your permission. Where you permit a recording, we use it only for quality and training purposes.

7.2 A Webinar may be recorded after notice to you at the time of recording. The recording and its use are governed by our Terms of Service. If you do not wish your image or voice to be recorded, you may keep your camera and microphone off, or write to us before the session.

7.3 You may not record, distribute or publish any Consultation or Webinar, as set out in our Terms of Service.

8. Support Channels, Calls and AI

8.1 Our telephone, WhatsApp, social media and Website chat support is operated through third party service providers. Calls and messages on these channels, including your voice, may be recorded and stored for support, quality, training and record purposes.

8.2 Your call or message may first be attended by an AI agent, which records your details and passes them to our team. An AI agent can make mistakes. For any important or legal matter, you should write to us by email.

8.3 If we change a service provider, we shall select a reputable provider that is bound to protect your personal data to the standard of this Policy.

9. Cookies and Tracking

9.1 The Website uses cookies and similar technologies. Essential cookies are required for the Website, the cart and the checkout to function. Analytics cookies help us understand how the Website is used. Marketing cookies help us measure and show relevant advertising.

9.2 We use tracking tools provided by third parties, including the Meta Pixel and Google analytics and advertising tools, and we may use similar tools from other providers. These tools collect data such as your internet protocol address, device and browser identifiers, the pages you view, and actions such as adding an item to the cart or completing a purchase.

9.3 This data is shared with Meta and Google, which process it under their own privacy policies and may combine it with other data they hold about you. We use it to measure the performance of the Website and of our advertising, and to show relevant advertising to you and to similar audiences on their platforms.

9.4 Where the law requires consent, analytics and marketing cookies and tools are used only after you accept them on the cookie banner. You may change your choice at any time through the cookie settings on the Website or through your browser settings. Blocking essential cookies may prevent parts of the Website from working.

10. Marketing, Advertising and No Sale of Data

10.1 We do not sell your personal data to any third party for money.

10.2 Where marketing cookies and tools are active, certain data about your visit is shared with advertising partners, as described in Clause 9. Some laws outside India may treat this as a sale or sharing of data. You may opt out at any time on the Your Privacy Choices page of the Website.

11. Sharing and Disclosure

11.1 We share your personal data only where it is necessary and lawful. The recipients are our Data Processors and service providers, namely our online store and hosting platform, payment processors, courier and shipping partners, birth chart preparation partners, printing and formatting providers, chat, calling and automation providers, webinar and video platforms, email and messaging providers, analytics and advertising providers, cloud based office and storage tools, and professional advisers.

11.2 Each provider is required to use your personal data only for the purpose we agree with it and to maintain appropriate security.

11.3 We keep certain internal records, such as lead and customer lists, in secure cloud based office tools accessed through our own protected accounts, with access limited to those who need it.

11.4 We may disclose your personal data where required by law or by a court, regulator or other lawful authority, or where necessary to establish or defend a legal claim, including a payment dispute.

11.5 If the ownership or structure of our business changes, your personal data may be transferred to the successor, which shall remain bound by this Policy.

12. Transfers Outside India

12.1 Some of our service providers process or store data on servers outside India. Any such transfer is carried out in accordance with the DPDP Act and any restriction notified by the Central Government, and we require the provider to apply appropriate safeguards.

13. Retention

13.1 We keep your personal data only for as long as it is needed for the purpose for which it was collected, or for as long as the law requires.

13.2 Consultation, report and order records are kept for as long as needed to deliver the Service and to meet our legal, accounting and tax obligations. Financial and transaction records are kept for the period required by law. Unpublished Webinar recordings are kept for up to 1 year. Webinar recordings published for education or promotion remain available until we remove them or act on a valid request. Cookie data is kept in accordance with your choice.

13.3 When the applicable period ends, or when you withdraw consent and no law requires retention, we erase or anonymise the personal data and require our Data Processors to do the same.

14. Security and Personal Data Breach

14.1 We protect your personal data with reasonable technical and organisational safeguards designed to prevent unauthorised access, misuse, loss or disclosure. No digital system can guarantee complete security.

14.2 If a personal data breach affects your personal data, we shall act promptly to contain it, and we shall notify the Data Protection Board of India and each affected Data Principal in the manner and within the timelines required under the DPDP Act.

15. Children

15.1 The Website and the Services are intended for persons aged 18 or above. We do not knowingly process the personal data of a person under 18, except where a parent or lawful guardian gives verifiable consent and requests the Service on behalf of the child.

15.2 We do not track or monitor the behaviour of children, and we do not direct targeted advertising at children.

15.3 If we learn that we have processed the personal data of a child without the required consent, we shall erase it.

16. Your Rights

16.1 Subject to the DPDP Act, you have the right to (a) obtain a summary of the personal data we process about you and of the processing activities, (b) know the identities of the Data Fiduciaries and Data Processors with whom your personal data has been shared, (c) have inaccurate or incomplete personal data corrected, completed or updated, (d) have your personal data erased where it is no longer needed and no law requires retention, (e) withdraw your consent at any time, (f) have your grievance redressed, and (g) nominate another individual to exercise your rights in the event of your death or incapacity.

17. Your Duties

17.1 Under the DPDP Act, you shall provide only authentic information, shall not impersonate another person, shall not suppress any material information, and shall not file a false or frivolous request or grievance.

18. How to Exercise Your Rights and Complain

18.1 To exercise any right, you shall write to the privacy contact stated on our Contact Information page. We shall verify your identity before acting on a request, and we shall respond within 1 month of receipt.

18.2 If you are not satisfied, you may write to our Grievance Officer, whose details and response timelines appear on our Contact Information page.

18.3 If your grievance is still not resolved after you have used this process, you may complain to the Data Protection Board of India in the manner provided under the DPDP Act.

19. Third Party Websites

19.1 The Website may link to third party websites and services. We do not control them and are not responsible for their privacy practices, and you should read their own privacy policies.

20. Users Outside India

20.1 If you use the Services from outside India, your personal data shall be transferred to and processed in India and in the other locations described in this Policy. Where the law of your country gives you additional rights that apply to us, we shall honour them to the extent that law requires.

21. Changes to This Policy

21.1 We may update this Policy at any time. The updated version takes effect on publication on the Website with a revised date. Where a change requires your consent under the law, we shall ask for it.

22. Contact

22.1 Every contact detail, including our privacy contact and our Grievance Officer, is set out on our Contact Information page.

23. Governing Law

23.1 This Policy is governed by the laws of India, and Clause 25 of our Terms of Service applies to any dispute arising from it.