Privacy Policy
Last updated: 20 August 2026
This policy explains what personal data Grady Golf collects, why, and what you can do about it. It is written to be read, not to be survived.
1 · Who we are
Grady Golf Pvt Ltd ("Grady Golf", "we") is the Data Fiduciary for the personal data described here.
Vihar Colony, Subhash Nagar, Ajmer, Rajasthan, India CIN: [to follow] · GSTIN: [to follow]
Grievance Officer: Daksh Sharma — daksh@gradygolf.in
2 · What we collect
When you join our list or open the Learning Lab. Your email address. Nothing else is required and nothing else is asked for.
When you use the Learning Lab. Which chapters you have opened, so the Lab can keep your place and so we can see which material is useful.
Automatically, when you visit. Standard server and security logs — IP address, browser and device type, pages requested, timestamps. Every website receives these; we keep them to run the site, diagnose faults and detect abuse.
When you buy from us. This does not apply yet — we do not sell in India at the time of writing, and this section becomes operative when we do. At that point we would collect your name, delivery address, phone number and order details. We never receive or store your card or UPI details — payment is handled by the payment provider, and we see only whether a payment succeeded.
We do not collect your date of birth, gender, location beyond what an IP address implies, or any health, biometric or financial data.
3 · Why we collect it, and on what basis
| What | Why | Basis |
|---|---|---|
| Email address | To send you the emails you asked for, and to give you access to the Learning Lab | Your consent, given when you submit the form |
| Email address | To send the sign-in code that opens your account | Necessary to provide the service you asked for |
| Learning Lab progress | To keep your place, and to understand which material helps | Necessary to provide the service |
| Server and security logs | To run the site, fix faults, and detect abuse | Our legitimate use in maintaining the service |
| Order details (not yet operative) | To fulfil and support your order | Necessary to perform our contract with you |
We do not sell your personal data. We do not share it for anyone else's advertising.
4 · Who processes it for us
We use a small number of service providers. They process data on our instructions only.
| Provider | What it does | Where |
|---|---|---|
| Supabase | Our database and sign-in system — where your email address and Lab progress are stored | Mumbai, India |
| Resend | Delivers our email, including sign-in codes | Ireland |
| Vercel | Hosts the website, holds server logs, and provides our analytics | Global network |
| Shopify | Website analytics now; order processing when we begin selling | Global |
| Workspace, for email you send us. Separately, YouTube — but only if you play a video (see §9) | Global |
5 · Where your data goes outside India
Your email address is stored in India, on Supabase in Mumbai. It leaves India when we send you email, because our email provider sends from Ireland. If you play a video in the Learning Lab, YouTube receives your IP address wherever its servers sit.
Indian law permits transfers outside India subject to the conditions the government prescribes, and we transfer only what a service needs to do its job.
6 · How long we keep it
We keep personal data only for as long as it is needed for the purpose it was collected for. When that purpose ends — or when you withdraw consent or ask us to erase it — we erase it, unless a law requires us to keep it longer.
We keep processing logs for at least one year, which the DPDP Rules require of us.
7 · Your rights
You can ask us to:
- tell you what personal data of yours we hold and what we have done with it
- correct or complete anything inaccurate or out of date
- erase your personal data, where we no longer need it for the purpose you gave it for
- nominate someone to exercise these rights on your behalf if you die or become incapacitated
- raise a grievance about how we have handled your data
Write to daksh@gradygolf.in. We will respond within a reasonable period. If you are not satisfied with our answer, you may complain to the Data Protection Board of India.
8 · Withdrawing consent
You can withdraw your consent at any time, and it should be no harder than giving it was.
- Marketing email: use the unsubscribe link at the bottom of any email we send, or write to daksh@gradygolf.in.
- Everything else: write to daksh@gradygolf.in and we will erase your account.
Withdrawing consent stops future processing. It does not make past processing unlawful, and where a law requires us to keep something, we keep that.
9 · Cookies, analytics and video
Cookies. We set one cookie: a session cookie that keeps you signed in. It cannot be read by scripts, is sent only to this site, and is encrypted in transit. We set no advertising or cross-site tracking cookies.
Analytics. We use Vercel's analytics, which sets no cookies, to count page views and to record a small number of anonymous events — how far down the homepage a visit reaches, whether the sign-up form was used, and which link to the Learning Lab was followed. These are counts. They are never tied to you, your email address or any identifier we hold. We also use Shopify's analytics to count page views.
Video. Learning Lab chapters embed video from YouTube, and we take two deliberate steps to
limit what that costs you: nothing loads from YouTube until you press play, and we use
youtube-nocookie.com rather than the standard domain. Once you press play, YouTube receives your
IP address and applies its own privacy policy.
10 · Children
This site is not directed at children, and we do not knowingly collect the personal data of anyone under 18. If you believe a child has given us personal data, write to daksh@gradygolf.in and we will erase it.
If you cannot give valid consent for yourself, your lawful guardian can give it on your behalf.
11 · How we protect your data
Data is encrypted in transit. Our database restricts access by row, so an account is visible only to the person it belongs to. Administrative keys are held server-side and never reach a browser.
We do not store passwords, because we do not use them — signing in is a six-digit code sent to your email, which means there is no password of yours for us to lose.
No system is perfectly secure, and we do not claim otherwise.
12 · If something goes wrong
If personal data is exposed, we will tell the people affected in plain language — what happened, what it means for you, and what we are doing — and we will report it to the Data Protection Board of India as the law requires.
13 · Links to other sites
Where we link to another website, that site's own privacy policy applies once you arrive. We are not responsible for how other companies handle your data.
14 · Changes to this policy
If we change this policy we will update the date at the top. If a change materially affects how we use data you have already given us, we will tell you by email before it takes effect.
15 · How to reach us
Daksh Sharma, Grievance Officer daksh@gradygolf.in Grady Golf Pvt Ltd, Vihar Colony, Subhash Nagar, Ajmer, Rajasthan, India