Privacy

Privacy notice

Last updated 16 August 2026.

This site is a personal portfolio for Sahruda PDV, a minor. It is run by her parent. This page explains what data the site collects, why, and what rights you have over it — in plain language, not a template.

What this site does not do

• No cookies are set anywhere on the site.
• No analytics, advertising, or tracking scripts of any kind run on this site.
• No data is sold, rented, or shared with advertisers.
• Nothing about you is profiled or used to make automated decisions.

What the site does collect

The contact form

If you use the contact form, we collect your name, email address, chosen reason for contact, and message. That's used only to reply to you. It's sent through Brevo (Sendinblue SAS, an email delivery service based in France) to two personal inboxes the site owner and Sahruda use — nowhere else. We don't keep a separate record or database of messages beyond what sits in those inboxes and in Brevo's own delivery logs, which Brevo retains under its own retention policy as our data processor.

Legal basis: your consent, given by submitting the form, and our legitimate interest in responding to you.

Ordinary web server logs

Like effectively every website, our hosting provider (Google's Firebase Hosting) logs IP addresses and basic request metadata as a normal part of serving pages and keeping the site secure. We don't access this for any purpose beyond troubleshooting, and it isn't linked to anything else.

The admin editor

The site has a private editor at /admin, used only by Sahruda and her parent to publish content. Sign-in is handled by Firebase Authentication (Google Cloud). This has nothing to do with site visitors — it exists so the two of them can update the site without a developer.

Where data is processed

This site's infrastructure (hosting, the admin function, authentication) runs on Google Cloud, primarily in its asia-south1 (Mumbai) region. Google is contractually bound as a data processor under Google Cloud's Data Processing Addendum, which incorporates Standard Contractual Clauses for any transfer of personal data outside the EEA. Brevo, our email delivery processor, is based in France (EEA).

Your rights

If you're in the EEA, UK, or a jurisdiction with similar protections, you can ask to see, correct, or delete any personal data we hold about you (in practice: whatever you sent us through the contact form). To do that, use thecontact form itself and say what you'd like — a parent handles these requests personally, since this is a small, single-family site with no dedicated data protection team.

Children's data

This site is about a minor but is not directed at collecting data from children — the contact form is meant for adults (admissions officers, programme organisers, press). We don't knowingly collect personal data from children through this site.

Changes to this notice

If what this site collects or how it's processed changes, this page will be updated and the date at the top will change accordingly.