We use analytics and advertising cookies to understand how this site is used. They are not set unless you agree. Declining changes nothing about what you can read here. Cookie policy
How Finvorais handles personal data: what is collected, who else sees it, and what you can ask us to do about it.
Last updated
Several sections below describe services only if they are switched on. As of the date at the top of this page, this site runs advertising, analytics and the newsletter provider Brevo. Sections describing a service that is off do not apply to you today.
The site is Finvorais, at https://finvorais.com. The organisation responsible for deciding how personal data is handled here (the “data controller”, in the language of several privacy laws) is Penugonda Kalyani, an individual publisher based in India. This site is not operated by a registered company. No postal address is published; write to the address below and one will be provided if you need it for a legal or regulatory purpose.
Privacy questions go to hello@finvorais.com, which is read by the person who runs the site.
No Data Protection Officer has been appointed, and no EU or UK representative. Those obligations attach to organisations carrying out large-scale or systematic monitoring. This is a small publication that runs advertising and aggregate analytics, and holds nothing beyond newsletter addresses and ordinary email correspondence.
Requests to this site are logged by the hosting platform, as they are on essentially every website. A log entry typically contains the IP address the request came from, the time, the URL requested, the response status, the referring page and the browser’s user-agent string. These logs exist to keep the site running and to investigate abuse and outages, not to build a profile of you.
Analytics are currently enabled on this deployment, and no analytics script is loaded outside a production build or before you agree to it on the cookie banner. The service in use is Google Analytics, and nothing else. What that collects is page URLs, referrer, approximate location derived from your IP address, device and browser type, and the interaction events Google Analytics measures by default: how far down a page you scroll, clicks on links leading off the site, file downloads, and the moment you start filling in a form. No session replay runs on this site: nothing records your mouse movements or plays your visit back. Analytics only run in production builds, and the configuration has a “respect Do Not Track” option that is on by default; see the cookie policy for what that means in practice.
If you subscribe to the newsletter, you give us an email address. That address is used to send the newsletter and nothing else: it is not sold, rented, or used to build advertising audiences. Every email includes an unsubscribe link, and unsubscribing takes effect immediately. Depending on the configured provider, the address is stored with a third-party email service (see third parties below).
If you email us, we keep the message and your address for as long as needed to deal with it, and afterwards as a record of the correspondence.
There are no user accounts, no logins and no passwords. There is no comment system. Nothing on this site asks for a payment card, a phone number, a date of birth or a government identifier, and you should be suspicious of any page here that appears to.
The site itself sets no tracking cookies. The light/dark theme preference is stored in your browser’s localStorage under the key theme: that is local to your device and is never sent to the server. Third-party services, where enabled, do set cookies. The full breakdown, including how to block or delete them, is in the cookie policy.
Each of the following applies only if the operator has enabled that service.
These providers act under their own privacy policies, which govern what they do with the data they receive. We do not sell personal data and we do not share it with anyone beyond the services listed here and anyone we are legally obliged to give it to.
Where a law such as the GDPR requires a legal basis, these are the ones relied on:
Depending on where you live, you may have some or all of the following rights. We will act on a request from anyone, regardless of jurisdiction, where it is technically possible to do so.
Readers in the EU and UK will recognise these as the rights in Articles 15 to 21 of the GDPR, and also have the right to complain to their national supervisory authority.
California. If you are a California resident, you may request disclosure of the categories of personal information collected and the purposes for it, request deletion, and opt out of any “sale” or “sharing” of personal information for cross-context behavioural advertising. Serving personalised ads may count as “sharing” under the CCPA/CPRA. To opt out, either disable personalised ads at adssettings.google.com, enable Global Privacy Control in your browser, or email us. We will not treat you differently for exercising these rights.
India. Under the Digital Personal Data Protection Act, 2023, you may access and correct your personal data, request its erasure, nominate someone to exercise your rights on your behalf, and raise a grievance. Grievances go to Penugonda Kalyani, who is the Grievance Officer for the purposes of the Act, at hello@finvorais.com. Because this site is run by one person, that is the same address as everything else on this page, which is the point: there is no queue to be lost in.
Canada. Under PIPEDA you may ask what personal information we hold about you, ask for it to be corrected, and withdraw consent. Complaints can be taken to the Office of the Privacy Commissioner of Canada if you are not satisfied with our answer.
Australia. Under the Privacy Act 1988 and the Australian Privacy Principles you may request access to your personal information and ask for corrections. Complaints can be taken to the Office of the Australian Information Commissioner.
Everywhere else. The rights listed above are offered to every reader regardless of where they live. Where your local law gives you more, it applies; where it gives you less, we do not use that as a reason to give you less.
To exercise anything above, email hello@finvorais.com with enough detail to identify the data in question. We may need to ask a question or two to confirm we are talking to the right person. We aim to respond within 30 days.
This site is written for adults making their own financial decisions and is not directed at children. We do not knowingly collect personal data from anyone under 13, or under 16 where local law sets that higher age. If you believe a child has given us personal data, email us and we will delete it.
The hosting, analytics and advertising services used here operate globally, so data may be processed in countries other than the one you are in: in practice, often the United States. Where the law requires a transfer mechanism, the providers rely on their own (typically Standard Contractual Clauses or an adequacy decision). The primary jurisdiction for this site is India, where the publisher is based.
Do not confuse that with what the articles are about. Guides here are written for specific countries (the United States, India and the United Kingdom) and each one states its jurisdiction at the top. That is the subject matter. It has no bearing on which law governs this site or your data, which is Indian law regardless of the article you happen to be reading or the country you read it from.
The site is served over HTTPS and there is no user account system to compromise. That said, no method of transmission or storage is completely secure, and we cannot guarantee the security of data held by third-party providers.
When this policy changes, the “last updated” date at the top of the page changes with it. Material changes (a new category of data, a new third party, a new purpose) will be flagged on the site, and where the law requires fresh consent, we will ask for it rather than assume it. The current version is always the one on this page.
Privacy questions, requests and complaints: hello@finvorais.com. General enquiries are handled through the contact page.