Privacy Policy

I Love Pondicherry

Effective date: 01 September 2026

Last updated: 07 September 2026

This Privacy Policy explains how I Love Pondicherry ("ILP", "we", "us", "our") collects, uses, shares, and protects your personal data, and the rights you have over that data. ILP is a media and community brand owned and operated by Gobalakrishnan V and Sivakumar T, based in Puducherry, India.

For the purposes of India's Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Digital Personal Data Protection Rules, 2025, ILP acts as the Data Fiduciary that determines the purpose and means of processing your personal data, and you are the Data Principal.

1. Scope

This policy applies to personal data we collect through:

It does not cover the independent data practices of the platforms above. Their handling of your data is governed by their own privacy policies.

2. Personal data we collect

2.1 Social media platforms

When you follow, join, message, comment on, or otherwise interact with our accounts and groups, we may collect and see:

2.2 Meta lead and enquiry forms (Facebook / Instagram)

When you submit an instant form or enquiry through our Facebook or Instagram advertising, we collect the fields you provide, which typically include:

2.3 WhatsApp chatbot and messaging (Wati.io)

When you message us on WhatsApp or interact with our WhatsApp chatbot, we collect:

Our WhatsApp messaging is operated using the WhatsApp Business Platform through our provider, Wati.io.

2.4 Website (once live)

2.5 Website email updates signup

When you enter your email address in the "notify me" or subscription box on our website (including our launch page), we collect:

We use this to email you about our launch and to send you the updates, offers, and information about Pondicherry you have subscribed to. These submissions are stored in Google Sheets and in Brevo, our email marketing platform.

We do not collect payment card numbers, bank details, government identifiers (such as Aadhaar or PAN), or passwords through the surfaces above.

3. How we use your data

We use your personal data to:

4. Legal basis for processing

We process your personal data on the basis of your consent, which you give when you contact us, submit a form, message us, subscribe to our email updates, or opt in to our communities and updates. Where permitted by the DPDP Act, we may also process data for certain legitimate uses, such as responding to a request you have voluntarily made. You may withdraw your consent at any time (see Section 9).

5. Who we share your data with

We do not sell your personal data. We share it only with service providers ("Data Processors") who process it on our behalf, and only as needed to provide our services:

ProviderPurpose
Meta Platforms (Facebook, Instagram, WhatsApp)Social platforms, advertising, lead forms, and WhatsApp messaging
Wati.ioWhatsApp Business messaging and chatbot
Google (Workspace, and Analytics once the site is live)Email, storage, and website analytics
Google SheetsStoring and managing enquiries, leads, and email subscriptions
CloudflareWebsite hosting and delivery
Brevo (Sendinblue)Sending launch announcements and email updates, and managing unsubscribes

We may also disclose data where required by law, regulation, or a valid legal request.

6. Cross-border transfers

Some of the providers above may store or process your data on servers outside India. Where this happens, such transfers are made in accordance with the DPDP Act and any conditions notified by the Government of India.

If you access our services from outside India, such as from the European Union or the United Kingdom, we aim to honour equivalent data protection rights available to you under your local law, including the right to access, correct, and delete your data, and to object to or withdraw consent for marketing at any time.

7. Data retention

We keep your personal data only for as long as needed for the purposes described in this policy, or as required by law. Indicative periods: enquiry and lead data retained for 24 months from last contact; email subscription data retained until you unsubscribe or withdraw consent, after which we remove you from our active mailing list. When data is no longer needed, we delete or anonymise it.

8. Your rights as a Data Principal

Under the DPDP Act, you have the right to:

To exercise any right, contact us using the details in Section 12. We will respond within the timelines required by law.

9. Withdrawing consent

You may withdraw your consent at any time. Withdrawing is as easy as giving consent: message us, email us, reply "STOP" or "UNSUBSCRIBE" to our messages, or leave the relevant group or channel. For email updates, you can also unsubscribe at any time using the unsubscribe link included in every email. Withdrawal does not affect processing already carried out on the basis of your earlier consent.

10. Children's data

Our content and services are intended for a general adult audience. We do not knowingly collect personal data from children below 18 years of age without verifiable consent of a parent or lawful guardian, and we do not engage in tracking, behavioural monitoring, or targeted advertising directed at children. If you believe a child has provided us personal data, contact us and we will delete it.

11. Security

We take reasonable security safeguards to protect your personal data against unauthorised access, use, disclosure, or loss. No method of transmission or storage is fully secure, but we work to protect your data and to notify affected persons and the Data Protection Board of India of a personal data breach as required by law.

12. Grievance and contact

For any question, request, or complaint about your personal data or this policy, contact our designated person:

If your concern is not resolved, you may lodge a complaint with the Data Protection Board of India.

13. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top shows the latest version. Material changes will be communicated through our channels where appropriate.