Privacy notice

Swarag Ravikumar, an independent consultant based in Bengaluru, India, is the data controller (and "Data Fiduciary" under India's DPDP Act) for personal data collected through this website. Contact for all privacy matters, including grievances: krswarag@gmail.com.

• Booking and pricing requests: name, work email, company, role, challenge, service of interest, timeframe and any context you add.
• Free tools and PMO Health Check: your answers, the score, and — only if you request a detailed report — name, work email and optional company, role, company size and timeframe.
• Newsletter: email, optional name and the date you opted in.
• Usage data: anonymous page-view and button-click counts (no names or emails), and, only if you accept analytics cookies, Google Analytics data such as approximate location, device and pages viewed.

I do not knowingly collect special-category or sensitive data. Please don't submit confidential information about your employer or clients.

• Replying to your request and preparing for a call — steps you ask for before a contract, and legitimate interest in responding (GDPR Art. 6(1)(b) and (f)).
• Sending a detailed tool report and replying about it — your consent, given with the required checkbox (Art. 6(1)(a); DPDP s.6).
• Newsletter and marketing emails — separate, optional consent only. Never bundled with other requests.
• Analytics cookies — consent via the cookie banner. They stay off until you accept.
• Security, fraud and abuse prevention, and legal obligations — legitimate interest and legal obligation.

Lead scores are used only to prioritise my own replies. No decision with legal or similarly significant effect is made solely by automated means.

Detailed tool reports and the model advisor are generated by AI models through a secure gateway. Your answers are sent only to produce the report and are not used by me to train models. AI output may contain errors and should be validated before you rely on it.

I do not sell or rent personal data and do not share it for cross-context behavioural advertising. Data is shared only with service providers acting on my instructions:

• Website hosting and database (Lovable Cloud and its infrastructure providers).
• Email delivery (Resend).
• Scheduling (Google Calendar, when you choose a time) and analytics (Google Analytics, only with consent).
• AI model providers, via the AI gateway, for generating reports.

I may also disclose data where required by law or to protect rights and safety.

Providers may process data outside your country, including in the US, EU and India. Where required, transfers rely on adequacy decisions, Standard Contractual Clauses or the UK Addendum, and comply with any restrictions notified under the DPDP Act.

• Enquiries, tool leads and CRM records: up to 24 months after our last interaction, or for the duration of an engagement plus any period required by tax or contract law.
• Newsletter: until you unsubscribe; then only a suppression record so you are not emailed again.
• Analytics: kept for no longer than 14 months under Google Analytics data-retention settings.
• Security records (such as sign-in codes): minutes to days.

Data is encrypted in transit, access is limited to me through a private dashboard protected by a strong password and multi-factor authentication, database access rules prevent public reading, and public forms are rate-limited. No system is perfectly secure; if a breach affects your rights, I will notify you and the relevant authorities as the law requires.

Depending on where you live, you can ask to access, correct, complete, delete or port your data, restrict or object to processing, withdraw consent at any time (without affecting earlier processing), and nominate someone to act for you (DPDP). California and other US residents can request to know, delete and correct data and will not be discriminated against for doing so.

Email krswarag@gmail.com — I respond within 30 days and may need to verify your identity. Every newsletter has a one-click unsubscribe link.

You may complain to your data-protection authority — for example your EU supervisory authority, the UK ICO, or the Data Protection Board of India — though I'd appreciate the chance to resolve it first.

Strictly necessary storage keeps the site working and remembers your cookie choice. Optional Google Analytics cookies (such as _ga) are set only after you accept. No advertising cookies are used.

Change cookie settings

This site is for business professionals and is not directed at anyone under 18. I do not knowingly collect children's data; contact me if you believe this has happened and it will be deleted.

I may update this notice. The date at the top shows the latest version; material changes will be highlighted on this page.