Privacy policy

1. Data we collect

• Account data: email address, and optionally your name and phone number.
• Purchase data: what you bought, amount, date and Razorpay order/payment references. Card, UPI and bank details are handled by Razorpay, not us.
• Learning data: lessons watched, progress and completion.
• Booking and intake data: session times and what you choose to tell us about your goals and context before a private session.
• Applications and enquiries: name, email, phone, organisation and the goals you describe.
• Mailing list: your email address and the topic or waitlist you signed up for.
• Technical data: essential cookies that keep you signed in, and standard server logs (such as IP address and browser) kept for security.

2. Why we use it

• To create your account, deliver the programs, cohorts and sessions you buy, and give you access to them.
• To process payments, issue receipts and meet tax and accounting obligations.
• To prepare for and run coaching sessions using the intake information you provide.
• To reply to applications and enquiries.
• To send newsletters and waitlist updates you have asked for. Every email includes a way to unsubscribe.
• To keep the service secure, prevent abuse and fix problems.

We process personal data on the basis of your consent, given when you sign up, buy, apply or subscribe, and for legitimate uses permitted by the DPDP Act, such as complying with law. We do not sell your personal data and do not use it for third-party advertising.

3. Children's data

We do not knowingly collect personal data from anyone under 18 without verifiable consent from a parent or legal guardian. Products for young athletes are purchased and managed by the parent or guardian, who gives that consent at checkout. We do not track, behaviourally monitor or target advertising at children. If you believe a child has given us data without consent, contact us and we will delete it.

4. Who we share it with

We use trusted service providers (Data Processors) who process data only on our instructions:

• Supabase — Account sign-in and database hosting
• Razorpay — Payment processing
• Mux — Video hosting and playback
• Resend — Transactional email (receipts, confirmations, sign-in links)
• Vercel — Website hosting
• Google / Zoom — Calendar invitations and live-session video calls

Some providers store data outside India. Where they do, we rely on their contractual safeguards and transfer data only as permitted under the DPDP Act. We may also disclose data where required by law or to protect our rights.

5. How long we keep it

We keep account and learning data while your account is active. Payment records are kept for as long as tax and accounting law requires. Applications, intake notes and mailing-list data are deleted when no longer needed for the purpose they were collected for, or when you ask us to delete them, unless the law requires us to keep them.

6. Your rights

• Access a summary of your personal data and how we process it.
• Correct, complete or update inaccurate data.
• Erase your data, subject to legal retention requirements.
• Withdraw consent at any time. This does not affect processing already carried out, and some services may stop working without it.
• Nominate another person to exercise your rights if you die or become incapacitated.
• Seek grievance redressal from us, and then, if unresolved, complain to the Data Protection Board of India.

Email hello@sujithsom.com to exercise any of these rights. We may need to verify your identity first.

7. Security

Data is encrypted in transit, access to it is restricted to people who need it, and payment details never touch our servers. If a personal data breach occurs, we will notify affected users and the Data Protection Board as the law requires.

8. Grievance officer and contact

For any privacy question or complaint, write to our grievance contact at hello@sujithsom.com. We aim to respond within 30 days.

9. Changes to this policy

We will post any changes here and update the date above. Where a change is significant, we will tell you by email.