Privacy Policy

1. Introduction

Read this before you send anything through yalithist.world. It records the categories of personal data held by Yalithist, the purpose each category serves, and the routes by which you can have it corrected or erased.

Your rights under statute stand on their own. What follows describes how we meet them; it cannot narrow them, and any conflict between the two is settled in favour of the statute.

Each amendment carries a date at the bottom of the page, so you can tell at a glance which version applied when you visited.

2. Who is responsible for your data

Responsibility for the processing set out below rests with Yalithist. Our address and email are printed in the last section of this page.

Deciding why information is collected, and by what method, is what makes an organisation a controller. Those decisions are taken by us, and so is the answer for them.

Firms brought in to run part of the service receive written instructions and nothing beyond them. Putting your data to a purpose of their own is not permitted.

3. Data we collect

Everything described in this section comes to us in one of two distinct ways.

Details you provide. Nothing in this group arrives on its own. It is the contact details and the message body that you chose to type before pressing send.

Connection data. Every page request writes a short technical entry in the server log. Without that entry a page could not be routed back to you, and repeated abuse could not be spotted.

• the network address of the connection, shortened where the whole of it is not needed
• the software used to view the page, including its release number and host system
• which document was fetched, where the visit came from, and when it happened
• screen size and language preference, used to serve a readable layout
• where a form is sent, the time it arrived and a note of the consent that accompanied it

We do not ask for, and do not want, special category data — information about health, beliefs, political opinions, ethnicity or sexual orientation. Please do not include such details in a message to us.

What we hold is what you gave us and what the server logged. Nothing has arrived from a data vendor or from a scrape of public sources.

4. Legal bases for processing

The law allows information to be used only on defined grounds. In our case they are:

• Consent — asked for before optional cookies are set and before any promotional email goes out. You may take it back whenever you like, by the same route you gave it.
• Performance of a contract — where you have asked us for something and we need your details to deliver it, or to take steps before entering an agreement.
• Legitimate interests — for site security, fraud prevention, and aggregate measurement of how the site is used. We balance these against your rights and stop where yours prevail.
• Legal obligation — where retention or disclosure is required of us by law.

An objection needs no particular form and costs nothing. We will either halt the processing or set out in writing the compelling reasons that allow it to continue.

5. How we use your data

We use personal data for a short and specific list of purposes, and not for anything else without telling you first.

• dealing with messages sent to us and following them through to a conclusion
• delivering the material or the assistance you came here to obtain
• maintaining uptime and safety, which includes turning away automated traffic that causes harm
• measuring use at the level of the whole audience in order to find and fix weak pages
• meeting record-keeping obligations imposed on us by law

We do not sell personal data. We have never done so and the business does not depend on it.

Cross-site tracking and profile-building for advertising are outside what we do.

6. Sharing and disclosure

Your data reaches other parties only in the narrow circumstances set out here.

• Hosting and infrastructure — the operator of the machines on which this site and its logs sit.
• Email delivery — whoever transports the mail we send and the replies that come back.
• Analytics — where enabled and consented to, a measurement service that receives aggregate usage data.
• Outside specialists — professional advisers brought in for a defined question, with access limited to that question.
• Authorities — where a valid legal order compels disclosure.

Suppliers act under contract, on instruction, and may not repurpose what they process for us.

In the event of a sale or merger, data would pass to the successor under the same commitments made here, and you would be notified of any material change.

7. How long we keep data

We set a retention period for each category rather than keeping everything forever by default.

• Written enquiries — retained for the duration of the request and a modest period beyond it.
• Traffic records — cleared on a short schedule once they have served their operational purpose.
• Records of permission given — held while that permission is acted on, and afterwards only as evidence that it existed.
• Anything a statute requires — held for the term named in that statute, then removed.

At that point the material either disappears or survives only in a form from which no person can be recovered.

8. International transfers

Hosting and support work can be carried out from another country. Before anything crosses a border we establish which safeguard under applicable data protection law covers the route, and use it.

• an adequacy decision covering the destination country, where one exists
• the standard contract terms approved for such transfers, where it does not
• supplementary technical measures such as encryption in transit and at rest

Details of the arrangement behind any single transfer are available on request.

9. Your rights

Rights under applicable data protection law, and under the laws modelled on it, are set out below. None of them carries a charge:

• Access — confirmation of what is held about you, together with a copy and an account of its use.
• Correction — inaccurate entries put right, and gaps in a record filled in.
• Deletion — removal of material we can no longer justify holding.
• Restriction — processing held still while a question over accuracy or lawfulness is settled.
• Portability — what you supplied returned in a common electronic form that another provider can read.
• Objection — a challenge to processing we justify by legitimate interests, and an unconditional stop on marketing.
• Withdrawal of consent — permission revoked whenever you choose, with everything done beforehand remaining valid.

Requests go to the contact address below. The statutory deadline is one month; if we need an extension we will explain why before it expires.

We may ask you to confirm your identity before acting. That is a safeguard for you, not an obstacle: it stops someone else obtaining your data by asking for it.

The competent data protection authority is open to you if you disagree with how a request was handled, and you may approach it directly without exhausting our own process.

10. Security

Both the systems and the habits around them are arranged with the risk in mind. The controls listed underneath are maintained continuously, not signed off once.

• HTTPS across the whole site, so that nothing you type crosses the network in the clear
• a short list of people with access to anything, reviewed whenever roles change
• storage for messages and documents kept on different systems from the public pages
• software kept current, with security releases applied rather than deferred
• encrypted copies of the data, checked by restoring them and not by assuming they are sound

Residual risk remains whatever is done, and pretending otherwise would be the least trustworthy line in this document. Our commitment is to tell the competent data protection authority about a serious breach, and to tell you when the rules oblige us to.

11. Children

The site takes an adult reader as given: the design does not court a younger audience, and no child's details reach our records with our knowledge.

If you believe a child has sent us personal data, contact us and we will delete it without delay.

12. Automated decisions and profiling

We do not make decisions about you by automated means that produce legal effects or similarly significant consequences.

Rate limits and spam checks do run without a person watching. What they read is the shape of the traffic, not a dossier about the reader.

13. What we do not collect

What follows is the other half of the picture, and the more checkable half: categories of information that are not collected here at all.

• We do not ask the browser for a position and do not read one. Roughly which country a request came from is all that is apparent.
• No payment instrument is held, because none is taken through this site.
• We have no reason to see an identity document and never ask to.
• Nothing is purchased from a data broker, and no external source is used to enrich what a visitor has given.

If the position alters, this page is amended first and the practice follows, rather than the other way round.

14. Keeping what we hold accurate

An incorrect record serves nobody, least of all the individual concerned, and amending one is treated accordingly.

If something we hold about you is wrong or has gone out of date, write to the address below saying what it should be. We correct it and, where it has been passed on, tell the recipient as well.

If accuracy is contested rather than obvious, processing can be limited until the question is settled, and the disagreement is recorded next to the data itself.

15. Changes to this policy

This page always holds the current text. Superseded wording is replaced rather than kept alongside, and the revision date says which text you are reading.

Anything that alters what you can require from us is announced on the site itself; wording tidied for clarity passes without ceremony.

16. Contact

Questions about this document, or a request concerning your data, can be sent to the address below. We answer written enquiries in the order received and aim to reply within one calendar month.

Yalithist
1553 Raha Lane
713325 Āsansol
India
[email protected]
+91 341 1027382