This policy explains what personal data we collect, why we collect it, how we use and protect it, and the rights available to you under Indian law — including the Digital Personal Data Protection Act, 2023 (“DPDP Act”), the DPDP Rules, 2025, the Information Technology Act, 2000, and the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. By using the site you consent to the practices described here.

1. Who we are

For the purposes of the DPDP Act, NawiDunia acts as the “Data Fiduciary” in relation to the personal data we collect through the site, and you, the user, are the “Data Principal”.

2. Personal data we collect

Information you provide directly

• Name, email address and phone number — when you register, subscribe to the newsletter, or comment on an article;
• Login credentials, if you create an account;
• Anything submitted through contact forms, surveys, feedback, or story tips sent to the editorial desk;
• Payment information, if you subscribe to a paid service — processed by a third-party payment gateway; we do not store full card details.

Information collected automatically

• IP address, browser type, device type and operating system;
• Pages visited, time spent on the site, referring URLs and click patterns;
• Approximate location, derived from the IP address where enabled;
• Cookies and similar technologies — see section 6.

Information from third parties

• If you sign in through Google, Facebook or another service, we may receive your name, email address and profile information as permitted by your settings on that platform;
• Analytics and advertising partners may share aggregated or de-identified data with us.

We do not intentionally collect sensitive personal data — financial, health, biometric, or religious and political beliefs — unless you provide it voluntarily, for example while submitting a story tip or a survey response.

3. Why we collect it

• To deliver, operate and personalise the site and its content;
• To send newsletters, breaking-news alerts and marketing communications, with your consent where required;
• To respond to your queries, feedback and grievances;
• To manage subscriptions and process payments;
• To analyse usage patterns and improve our content and the reading experience;
• To serve relevant advertisements through third-party ad networks;
• To detect, prevent and address fraud, security and technical issues;
• To comply with legal obligations under Indian law, including requests from law enforcement or regulatory authorities.

We process personal data only for the purpose disclosed to you when it was collected, in line with the purpose-limitation principle under the DPDP Act.

4. Legal basis for processing

Under the DPDP Act we process your personal data on the basis of:

• Your consent, given in a clear, itemised and informed manner at the point of collection — account creation, newsletter sign-up, cookie banner; or
• Legitimate uses permitted under the Act, such as when you voluntarily provide data for a specified purpose (submitting a comment or a story tip), or where processing is necessary to answer a request you made.

You may withdraw consent at any time — see section 8 — though this does not affect the lawfulness of processing carried out before the withdrawal.

5. Sharing and disclosure

We do not sell your personal data. We may share it with:

• Service providers who help us run the site — hosting, email and newsletter delivery, analytics, payment gateways — under contractual obligations to protect it;
• Advertising and analytics partners, who may use cookies to serve relevant ads and measure performance;
• Legal and regulatory authorities, where required to comply with a court order, a government request, or applicable Indian law;
• A successor business, in the event of a merger, acquisition or sale of assets, subject to equivalent privacy protections.

Where personal data is transferred outside India, we will ensure the transfer complies with the DPDP Act and any restrictions notified by the Central Government.

6. Cookies and tracking

We use cookies and similar technologies to:

• Remember your preferences and whether you are signed in;
• Understand how visitors use the site, through analytics tools;
• Deliver personalised advertisements.

You can control or disable cookies through your browser settings, though some features may stop working. Where required, we will show a cookie consent banner allowing you to accept or customise your preferences before non-essential cookies are set.

7. How long we keep it

We retain personal data only for as long as it is needed for the purposes described here, or for as long as the law requires. Once the purpose is fulfilled and no retention obligation remains, we delete or anonymise it, in line with the storage-limitation principle under the DPDP Act.

8. Your rights as a Data Principal

• Access — a summary of the personal data we hold about you and what we do with it;
• Correction of data that is inaccurate or incomplete;
• Erasure of data no longer needed for the purpose it was collected for;
• Withdrawal of consent, as easily as it was given;
• Grievance redressal — raise it with the contact below, and if it is unresolved, with the Data Protection Board of India;
• Nomination of someone to exercise these rights on your behalf in the event of your death or incapacity.

To exercise any of these, write to us at support@nawidunia.com. We respond within the timelines prescribed under the DPDP Rules, 2025.

9. Children’s privacy

We do not knowingly collect personal data from children under 18 without verifiable parental or guardian consent, and we do not carry out tracking, behavioural monitoring or targeted advertising directed at children. If you believe a child has given us personal data without that consent, tell us and we will act on it.

10. Security

We use reasonable security practices — technical and organisational safeguards, encryption where appropriate, access controls and regular reviews — to protect personal data against unauthorised access, alteration, disclosure or destruction, in line with the DPDP Act and the IT Rules, 2011. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Data breaches

In the event of a personal data breach we will notify the Data Protection Board of India and the affected Data Principals, as required under the DPDP Act and the DPDP Rules, 2025.

12. Grievance Officer and data protection contact

Grievance Officer: to be confirmed — write to support@nawidunia.com in the meantime

Email: support@nawidunia.com

Address: to be confirmed — write to support@nawidunia.com in the meantime

If you are not satisfied with our response, you may approach the Data Protection Board of India as provided under the DPDP Act.

13. Third-party links

The site links to third-party websites. This policy does not apply to them, and we encourage you to read their own privacy policies before sharing personal data with them.

14. Changes to this policy

We may update this policy to reflect changes in our practices or in the law. The updated version is posted on this page with a new “last updated” date, so it is worth looking again from time to time.

15. Contact

NawiDunia — support@nawidunia.com. Our terms and conditions govern the rest of your use of the site.