Privacy Notice

Last updated: 24 September 2026

1. Who is responsible for your data

This website, tejasdecodes.in ("tejas.decodes", "we", "us"), is run by Adv. Tejas Sudhakar K, Bengaluru, Karnataka, India. For your personal data we are the Data Fiduciary under the Digital Personal Data Protection Act, 2023 ("DPDP Act"), and the body corporate responsible for it under S. 43A of the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules").

2. What personal data we collect

When	What we collect
When you buy a course	Full name, email address, mobile number, postal address, city, state and PIN code, and the course or package you selected.
When your order is processed	Order ID, amount, date and time, and whether the payment succeeded, failed or is pending. We receive this from our payment provider.
When you contact us	Whatever you choose to send us by email, WhatsApp or Instagram, such as your name, number and your query.
When you browse the site	Basic technical data (such as IP address, browser and device type) processed by our hosting provider to deliver and secure the website. Your light or dark theme choice is stored only in your own browser.

What we do not collect: card numbers, UPI IDs, net banking credentials or any other payment instrument details. You enter these directly on Cashfree's payment page and they never reach us. Browsing the courses, resources and manuals does not require you to give us any personal data.

3. Why we use it

Purpose	Data used
Processing and verifying your payment	Name, email, phone, course, amount, order and payment status
Giving you access to the course you bought and sending you your login details	Name, email, phone, course
Contacting you about your order, including one follow-up if a payment you started was not completed, and answering your queries	Name, email, phone, order details
Issuing invoices and keeping accounts as required by tax law (including GST and income tax)	Name, address, state, PIN code, course, amount, order details
Keeping the website and payments secure and preventing fraud	Order details and technical data
Complying with legal obligations and lawful requests from authorities	Only what the law requires

We process this data because you provide it voluntarily for the purpose of buying a course (S. 7(a) of the DPDP Act) and, where required, on the basis of your consent. We do not use it for any other purpose. We will not send you promotional messages unless you separately opt in, and we do not sell or rent your data to anyone.

4. Who we share it with

We share your data only with service providers who help us run this service, and only as much as each one needs:

• Cashfree Payments India Private Limited, our RBI-authorised payment aggregator, to process your payment. Your payment details are handled by Cashfree under its own privacy policy.
• Our course delivery platform (LMS), to create your account and give you access to the lectures you bought.
• Cloudflare, Inc., which hosts and secures this website.
• Google (Gmail), which we use to email you about your order.
• Professional advisers, auditors and government authorities, only where the law requires it.

Some of these providers may store or process data outside India. Any such transfer is made only as permitted under S. 16 of the DPDP Act.

5. How long we keep it

• Order and invoice records: for as long as tax and accounting laws require us to keep them, which is generally up to eight years.
• Course access details: for as long as your access to the course continues. After that we erase them, or keep them in a form that no longer identifies you, unless the law requires otherwise.
• Records of how data was processed, and security logs: for at least one year, as required by law.
• Messages you send us: until your query is resolved and for a reasonable period afterwards.

6. How we protect it

We follow reasonable security practices, including: encrypted (HTTPS) connections across the site; payments taken only on Cashfree's PCI-DSS compliant checkout; payment system credentials kept on the server and never exposed in the website; prices and orders verified on the server; and access to buyer data limited to us. If a personal data breach occurs, we will inform affected users and the Data Protection Board of India as the law requires.

7. Your rights

Under the DPDP Act you have the right to:

• Access a summary of the personal data we hold about you and how we use it, and the identities of those we have shared it with (S. 11).
• Correct, complete, update or erase your personal data (S. 12). We may keep what the law requires us to keep, such as invoice records.
• Withdraw your consent at any time, as easily as you gave it (S. 6(4)). Withdrawing does not affect processing already done, and if we need the data to give you course access, we may no longer be able to provide it.
• Have your grievances redressed (S. 13).
• Nominate another person to exercise these rights for you in the event of your death or incapacity (S. 14).

To exercise any of these rights, email tejas.sudhakark18@gmail.com from the email address you used for your purchase, or mention your order ID, so that we can confirm it is you.

8. Children

Our courses are meant for adults. If you are under 18, your parent or lawful guardian must make the purchase and give consent on your behalf. If we learn that we have received a child's personal data without such consent, we will delete it.

9. Cookies and tracking

We do not use advertising or cross-site tracking cookies. Your theme preference is saved in your own browser's local storage. Cashfree's checkout page may use cookies that are necessary to complete your payment securely, as described in its own policy.

10. Grievance Officer and complaints

If you have a concern about how your data is handled, contact our Grievance Officer:

Adv. Tejas Sudhakar K, Grievance Officer
Email: tejas.sudhakark18@gmail.com
WhatsApp: +91 72043 55682
Bengaluru, Karnataka, India

We will acknowledge your grievance promptly and resolve it within one month of receiving it. If you are not satisfied with our response, you may complain to the Data Protection Board of India in the manner prescribed under the DPDP Act.

11. Changes to this notice

If we change how we handle your data, we will update this page and the date at the top. For significant changes affecting data we already hold, we will inform you directly.