Bhavesh Singhal

Comprehensive Data Privacy & Information Governance Protocol (CG-DPIGP-v.2025.5.27.P)

Effective Date: Commencing forthwith upon electronic promulgation (2025-05-27), or coterminous with the User's initial instantiation of interaction with the Service, whichever eventuality transpires later. Last Revised: 2025-05-27 Version: 1.0.0-Gamma

Prolegomenon to Data Privacy & User Information Stewardship

This Comprehensive Data Privacy & Information Governance Protocol (hereinafter referred to as the "Privacy Protocol," "Policy," or "Data Governance Framework") is promulgated by Bhavesh Singhal, operator of the digital informational platform accessible via the Uniform Resource Locator https://collegegnosis.in (said platform, encompassing all constituent sub-pages, affiliated domains, Application Programming Interfaces (APIs), embedded functionalities, content repositories, and ancillary services, hereinafter collectively and individually designated as the "Service" or the "Bhavesh Singhal Blog"). We, [Bhavesh Singhal] (hereinafter "We," "Us," "Our," or "Data Controller"), acknowledge the profound significance of User privacy and are unreservedly committed to upholding robust data protection principles and practices. This Privacy Protocol delineates, with exhaustive particularity, the methodologies, rationales, and frameworks governing Our collection, processing, utilization, disclosure, retention, security, and management of information, including data that may directly or indirectly identify an individual ("Personal Data") and data of an aggregated, anonymized, or pseudonymized nature ("Non-Personal Data"), from and pertaining to You, the end-user ("User," "You," "Your," or "Data Subject"), when You access, navigate, interact with, or otherwise avail Yourself of the Service.

BY ACCESSING, UTILIZING, OR OTHERWISE INTERACTING WITH THE SERVICE, YOU HEREBY AFFIRM, ACKNOWLEDGE, AND AGREE THAT YOU HAVE METICULOUSLY READ, COMPREHENDED, AND CONSENTED TO THE DATA PRACTICES, POLICIES, AND PROCEDURES DESCRIBED IN THIS PRIVACY PROTOCOL. IF YOU DO NOT AGREE WITH OR CONSENT TO ANY ASPECT OF THIS PRIVACY PROTOCOL, YOUR SOLE AND EXCLUSIVE REMEDY IS TO IMMEDIATELY CEASE AND DESIST FROM ALL USE OF AND INTERACTION WITH THE SERVICE.

1. Categorization and Modalities of Information Acquisition

We undertake the acquisition of various categories of information from and concerning You and Your engagement with the Service, predicated upon the nature of Your interactions and the functionalities You elect to utilize. Such information is broadly classifiable as follows:

1.1. Voluntarily Proffered Personal Data (Principally for Subscription Services)

The primary, and indeed potentially sole, instance of Personal Data collection arises when You, by Your own volition and affirmative action, elect to subscribe to Our electronic mailing list or newsletter service. In such circumstances, the specific item of Personal Data solicited and collected is Your electronic mail address (email address). The provision of this email address is entirely optional and is predicated upon Your explicit consent to receive periodic communications from Us, as further detailed in Article 2 hereunder. No other Personal Data is actively solicited by Us as a prerequisite for general access to the publicly available content on the Service.

1.2. Automatically Acquired Non-Personal and/or Pseudonymized Data (Operational and Analytical Data)

In common with prevalent internet service operational methodologies, We may automatically or passively collect certain categories of Non-Personal Data or pseudonymized information pertaining to Your utilization of the Service. This information, while not typically identifying You directly as an individual, is instrumental for the operational integrity, analytical assessment, and enhancement of the Service. Such data may encompass, inter alia: (a) Log File Data: Information automatically recorded by Our servers, including but not limited to Your Internet Protocol (IP) address (which may, in certain jurisdictions or contexts, be considered Personal Data, and if so, will be treated accordingly), browser type and version, operating system and platform, language preferences, referring/exit Uniform Resource Locators (URLs), date and time stamps of access, clickstream data, and error logs. (b) Device Information: Data pertaining to the specific device utilized to access the Service, such as device model, manufacturer, operating system version, unique device identifiers (e.g., MAC address, IDFA, Android Advertising ID, subject to platform policies and User settings), screen resolution, and mobile network information, if applicable. (c) Usage and Interaction Data: Information concerning Your patterns of interaction with the Service, including pages visited, content viewed, features utilized, duration of visit, frequency of access, search queries entered (if any), and other behavioral metrics. (d) Cookie and Tracking Technology Data: As more exhaustively detailed in Article 3, information collected through the deployment of cookies, web beacons (also known as pixel tags or clear GIFs), local storage objects (LSOs), software development kits (SDKs), and analogous tracking technologies.

The information collected pursuant to Article 1 is utilized for specific, legitimate, and predefined purposes, grounded in appropriate legal bases as mandated by applicable data protection regulations.

2.1. Utilization of Voluntarily Proffered Personal Data (Email Address)

Your email address, provided solely through Your affirmative act of subscription, will be utilized exclusively for the following purposes: (a) Dissemination of Content: To transmit new blog post notifications, newsletters, informational updates, and other communications directly related to the content and subject matter of the Bhavesh Singhal Blog. (b) Service-Related Communications: Occasionally, to send important administrative or service-related announcements (e.g., changes to Our Terms of Service or this Privacy Protocol), if deemed necessary. The legal basis for this processing is Your explicit consent, manifested through Your voluntary subscription. We affirm that Your email address will not be sold, leased, rented, or otherwise disclosed or transferred to any unaffiliated third-party entities for their direct marketing or promotional purposes without Your additional, explicit, and unambiguous opt-in consent.

2.2. Utilization of Automatically Acquired Non-Personal and/or Pseudonymized Data

The Non-Personal and/or pseudonymized data collected automatically is utilized for the following legitimate operational and analytical purposes: (a) Service Provision and Maintenance: To operate, maintain, secure, and ensure the technical functionality of the Service. (b) Service Improvement and Optimization: To analyze usage trends, monitor performance metrics, diagnose technical issues, and enhance the user experience, design, and content relevancy of the Service. (c) Aggregate Analytics and Reporting: To generate aggregated statistical insights regarding user demographics, preferences, and interaction patterns for internal strategic planning and service development (such data being anonymized and not identifying individual Users). (d) Security and Fraud Prevention: To monitor for, detect, prevent, and investigate potentially prohibited or illegal activities, security breaches, or fraudulent behavior. The legal basis for processing this category of data is typically Our legitimate interests in operating, maintaining, improving, and securing Our Service, provided such interests are not overridden by Your fundamental rights and freedoms.

3. Cookies, Tracking Technologies, and Digital Beacons: An In-Depth Explication

The Service employs cookies and analogous tracking technologies to facilitate the collection and analysis of Non-Personal Data concerning Your interaction patterns with the Service. A "cookie" is a diminutive text file containing a string of alphanumeric characters that is transmitted to Your computer or mobile device by a web server and stored by Your web browser.

3.1. Categories of Cookies and Technologies Deployed

We may utilize various types of cookies and tracking technologies, including: (a) Session Cookies: Transient cookies that exist only for the duration of Your browsing session and are typically erased when You close Your browser. They are used for purposes such as session management and maintaining user preferences during a single visit. (b) Persistent Cookies: Cookies that remain on Your device for a pre-defined period or until manually deleted by You. They are used to remember Your preferences and settings across multiple visits. (c) First-Party Cookies: Cookies set directly by the Service (i.e., by the domain https://collegegnosis.in). (d) Third-Party Cookies: Cookies set by domains other than the Service, typically by analytics providers (e.g., Google Analytics) or social media platforms (if share buttons or similar functionalities are integrated). The use of such third-party cookies is governed by the respective privacy policies of those third parties. (e) Web Beacons/Pixel Tags: Miniscule, often transparent, graphic images embedded in web pages or emails, used to monitor user activity, such as whether a page has been visited or an email opened, often in conjunction with cookies. (f) Local Storage Objects (LSOs): Technologies like HTML5 Local Storage or Flash LSOs that allow websites to store larger amounts of data locally on Your device, beyond what cookies typically allow.

The deployment of these technologies serves several critical functions: (a) Essential Functionality: Certain cookies are strictly necessary for the proper operation of the Service, enabling basic navigation and access to core features. (b) Performance and Analytics: To collect aggregated, anonymized data on how Users interact with the Service (e.g., page views, bounce rates, traffic sources), enabling Us to understand usage patterns, measure effectiveness, and optimize performance. (c) Functionality Enhancement: To remember Your preferences (e.g., language settings, display preferences) and provide a more personalized and streamlined user experience.

3.3. User Control and Opt-Out Mechanisms for Cookies

You possess a significant degree of control over the use of cookies. Most modern web browsers provide settings that allow You to: (a) View the cookies stored on Your device. (b) Accept or reject all cookies, or cookies from specific websites. (c) Delete existing cookies. (d) Configure Your browser to notify You when a cookie is set. You are advised to consult the "Help" or "Settings" section of Your specific web browser for detailed instructions on managing cookie preferences. Please be cognizant that disabling, rejecting, or deleting cookies may adversely impact the functionality, accessibility, or user experience of certain features or sections of the Service. The Service does not currently respond to "Do Not Track" (DNT) signals transmitted by web browsers, as there is no universally adopted standard for DNT.

4. Data Subject Rights and User Prerogatives

Consistent with applicable data protection legislation, You, as a Data Subject, possess certain rights concerning Your Personal Data.

You retain the unequivocal right to withdraw Your consent for the processing of Your email address for Our mailing list at any time and without charge. This can be effected by clicking the conspicuous "unsubscribe" hyperlink provided at the footer of every email communication We dispatch to You. Upon receipt of Your unsubscribe request, We will cease sending You further email communications and will process the deletion of Your email address from Our active mailing lists in accordance with Article 5.

4.2. Other Potential Rights

Depending on Your jurisdiction of residence and applicable law, You may possess additional rights, such as the right to access, rectify, erase (right to be forgotten), restrict processing of, or object to the processing of Your Personal Data, and the right to data portability. As We collect minimal Personal Data (primarily email addresses for subscriptions), the applicability or exercise of some of these rights may be limited in scope. For inquiries regarding these rights, please contact Us as stipulated in Article 9.

5. Data Retention and Erasure Protocols

Our data retention policies are designed to ensure that Personal Data is not retained for longer than is necessary for the purposes for which it was collected and processed, or as required by applicable legal or regulatory obligations.

5.1. Retention of Email Addresses

Your email address, provided for subscription purposes, will be retained in Our active mailing list for as long as You remain an active subscriber, signifying Your continued consent.

5.2. Erasure upon Unsubscription or Request

Upon Your affirmative action to unsubscribe from Our email list, or upon a verifiable request for erasure (where applicable by law), We will take commercially reasonable steps to delete Your email address from Our active marketing databases within a reasonable timeframe, typically within [e.g., 30 business days], subject to any overriding legal obligations or technical constraints (such as data residing in immutable backup archives, which will be decommissioned according to their lifecycle).

5.3. Retention of Non-Personal Data

Aggregated, anonymized, or pseudonymized Non-Personal Data collected for analytical or operational purposes may be retained for longer periods as it does not directly identify individuals and is valuable for longitudinal trend analysis and service improvement.

6. Information Security Posture and Safeguards

We implement and maintain a suite of reasonable and appropriate technical, administrative, and physical security measures designed to protect the information We collect, particularly Personal Data, from unauthorized access, acquisition, disclosure, alteration, misuse, loss, or destruction. These measures may include, inter alia, data encryption (where appropriate), access controls, secure server environments, regular security assessments, and staff training on data protection.

However, You acknowledge and accept that no website, internet transmission, computer system, or electronic data storage system can be guaranteed to be 100% secure or impervious to compromise. Despite Our diligent efforts, We cannot warrant or guarantee the absolute security of any information You transmit to Us or that We store. Any transmission of information is undertaken at Your own inherent risk. In the event of a data breach involving Your Personal Data that is likely to result in a high risk to Your rights and freedoms, We will endeavor to notify You and relevant authorities in accordance with applicable legal requirements.

7. Children's Privacy and Protection

The Service is not designed for, intended for, or directed at individuals under the age of thirteen (13) years (or such higher age of digital consent as may be stipulated by applicable law in Your jurisdiction, e.g., 16 years under GDPR in certain contexts without parental consent). We do not knowingly or intentionally collect, solicit, or maintain Personal Data from children under this specified age threshold without verifiable parental consent.

If We become aware that We have inadvertently collected Personal Data from a child below the applicable age of consent without requisite parental authorization, We will take prompt and commercially reasonable steps to delete such information from Our records. If You are a parent, legal guardian, or concerned individual and believe that a child under the applicable age has provided Us with Personal Data, please contact Us immediately at worknbhavesh@gmail.com with sufficient detail to enable Us to investigate and take appropriate remedial action.

8. Revisions, Amendments, and Modifications to this Privacy Protocol

We reserve the absolute, unilateral, and unfettered right, exercisable in Our sole and exclusive discretion, to amend, modify, supplement, revise, or replace this Privacy Protocol, or any part thereof, at any time and from time to time. Such modifications shall become effective immediately upon their posting on the Service, unless a later effective date is explicitly stated. We will indicate the date of the "Last Revised" version at the apex of this document.

You acknowledge and agree that it is Your sole and continuing responsibility to periodically review this Privacy Protocol to remain informed of any changes. Your continued access to or use of the Service following the posting or notification of any amendments, modifications, or revisions to this Privacy Protocol shall constitute Your irrevocable and unconditional acceptance of, and agreement to be bound by, such changes. If You do not agree to any such changes, Your sole recourse is to immediately discontinue Your access to and use of the Service.

9. Contact, Inquiries, and Data Protection Communications

Should You possess any questions, concerns, ambiguities, or require further elucidation regarding this Privacy Protocol, Our data handling practices, or Your rights as a Data Subject, or if You wish to exercise any applicable data protection rights, please do not hesitate to direct Your formal written communication to Us via electronic mail at:

worknbhavesh@gmail.com

We will endeavor to respond to legitimate and clearly articulated inquiries within a reasonable timeframe, consistent with applicable legal obligations and Our operational capacities.