Version 2026-08-15
Your details are deleted the moment your report is sent
The summary above is in your language. The full policy below is written in English; if any part of it is unclear, write to us and we will explain it in your language.
Chayan Remedies prepares Vastu reports for homes. We are based in Kolkata, India. You can reach us at support@chayanremedies.com for anything concerning your personal data.
Our business is in India and is governed by India's Digital Personal Data Protection Act, 2023. We have chosen to apply the stricter standards of the EU General Data Protection Regulation (GDPR) to everyone, whether or not you live in Europe, because we would rather hold your details to the higher standard than work out which one applies to you. The same approach covers customers under the UK GDPR, Brazil's LGPD, Canada's PIPEDA, Singapore's PDPA, the Australian Privacy Act and the California CCPA — holding almost nothing, for almost no time, satisfies all of them at once.
Two things we will never do, anywhere in the world: we do not sell your personal information, and we do not share it for advertising. If you are in California, this is our “do not sell or share” statement — there is nothing to opt out of, because it never happens.
| What | Why we need it |
|---|---|
| Your name and e-mail address | To send you your report and to reach you if we have a question about your plan. |
| Your phone number and city | Optional. Used only if e-mail fails or your plan needs clarifying. |
| Your floor plan and compass reading | This is the measurement. Without it there is no report. |
| The problems you describe | The remedies are chosen for the problems you are facing. This may include health, money and family circumstances. |
| Anything you write in the notes | Context you consider relevant — occupants, room use, deadlines. |
We do not collect anything else about you personally. We do not record the internet (IP) address you order from — the city you type in is the only location we hold, and you choose what to put there.
We do count visits, and it is worth being precise about what that means. We use a privacy-first measurement tool that tells us how many people opened a page, which page, and which country they came from. It sets no cookies. It creates no identifier that follows you — not between visits, and not to any other website. It builds no profile of you. We can see that a page was read; we cannot see who read it, and we could not tell you which visitor became which customer even if we wanted to.
What we do not have, and will not add: Google Analytics, Meta or any advertising pixel, cross-site trackers, session recording, or heatmaps. Nothing measured here is ever sold, shared for advertising, or joined to your booking.
For your name, e-mail, plan and compass reading, the basis is performance of a contract — you have asked us to prepare a report and we cannot do it without them.
For the problems you describe, the basis is your explicit consent, which is why the booking form asks you to tick a box before you can send it. These details may concern your health or your finances, and the law treats them as deserving stronger protection than a name and address.
Consent comes first, then payment. You tick the box before anything is charged. That order matters: it means you decide, in advance and without pressure, whether we may use these details at all.
Once payment is made, your report is prepared immediately and automatically, and your details are deleted the moment it is sent to you. No person is involved at any stage, and there is no window in between where a request could be acted upon — by the time you could write to us, the data is already gone. For that reason the order cannot be withdrawn or refunded after payment. If you are unsure, do not tick the box and do not pay. Nothing at all is kept from a booking that is never completed.
The moment your report is sent to you, we delete everything you gave us: your floor plan, your name, your e-mail address, your phone number, your city, the problems you described and your notes. Not after thirty days — at delivery, automatically, as the last step of preparing your report.
Because of that, the e-mail carrying your report also contains a written copy of everything you told us, together with your Booking ID. That e-mail becomes the only remaining record. Please keep it.
The one thing we hold on to is the report itself, for 30 days, in case you lose the e-mail and need it again. It is filed under your Booking ID and nothing else — we no longer have your name or address to attach to it. After 30 days the report is deleted too, and nothing of yours remains.
There is one exception, and we would rather state it than leave it out: if your report fails to generate, we keep what you sent until we have put it right and delivered it, because we cannot re-run it otherwise. That is swept after 30 days in every case.
A business has to be able to show what it sold and to whom. So when your report is delivered, one line goes to our own business mailbox as a transaction record: your name, e-mail address, phone number, the city you gave us, your Booking ID, what you ordered and what you paid. Your own copy of the report e-mail lists exactly the same things, so you can see precisely what we hold. It is kept for 8 years, which is the period Indian tax and company law requires books of account to be retained.
What is not in that record, and never will be:
This split is deliberate. Who bought something is an accounting fact. What they are suffering from is nobody's business but their own, and there is no setting in our software that can turn it back on.
We give our word that this record is never sold, never shared, and never used for marketing. It exists for audit and for answering your queries, and for nothing else.
Your report is produced by a fully automated system. No person reads your floor plan, your details, or the problems you describe at any point in preparing it. There is no human intervention in the process at all.
This is also why we can delete your details so quickly: nobody needs to keep them in order to do the work.
No system can be guaranteed against every attack, and we will not claim otherwise. What we can do is hold almost nothing, for almost no time — which protects you far better than any single security measure could. After your report is sent, there is simply nothing of yours left to take.
Section 8 sets out every service that touches your data and where each one is, including the two that are outside India.
We would rather tell you this plainly than leave it out, including the part we have not yet solved.
Your floor plan and details are stored on a server in Bangalore, India. But preparing and delivering your report involves a small number of services, and two of them are outside India. This is the complete list — there are no others:
| What it does | Where | What it handles |
|---|---|---|
| Hosting | Bangalore, India | The server your plan is stored on until your report is sent. |
| Payment gateway | India | Your payment. Card details go straight to the gateway and never reach us. |
| Automated analysis | United States | The automated system that reads your floor plan and the problems you described, in order to prepare the analysis. No person is involved. |
| E-mail delivery | United States | Delivers the e-mail carrying your report. |
| Website delivery and protection | Global | Serves this website and defends it from attack. |
| Web fonts | Global | Your browser fetches the page fonts, so the font provider receives your IP address. Nothing else is sent. |
We have described these by what they do rather than by company name. Data protection law permits either the recipients or the categories of recipient to be given, and we keep the specific names off a public page for security reasons. If you want the specific companies named, write to us and we will tell you — that is your right, and we will answer it.
None of these services is permitted to use your data for its own purposes, and we neither sell nor share your data with anyone else.
Your data leaves your region when you use this service. Under the GDPR that is a “restricted transfer”, and you are entitled to know the basis for it.
India has not received an adequacy decision from the European Commission, and neither has the United States for transfers of this kind outside the Data Privacy Framework. We rely on Article 49(1)(a) — your explicit consent, given by the tick box on the booking form — and on Article 49(1)(b), the transfer being necessary to perform the contract you have asked us to perform.
We want to be straightforward about the limitation. We have not yet put Standard Contractual Clauses in place, and regulators read the Article 49 derogations narrowly — they are intended for occasional transfers rather than as a permanent arrangement. We are working on it. We are telling you now rather than after you have paid.
What genuinely reduces the risk, and is already true today: your plan and the problems you described exist on our systems for a matter of minutes, are deleted the moment your report is sent, are never seen by any person, and are never included in any record we keep afterwards.
If you would prefer that your data were not processed outside your region, please do not submit the form, and write to us instead at support@chayanremedies.com. We would rather lose the order than take your data on a basis you are not comfortable with.
Most of these are already done for you: your details are deleted at delivery without your having to ask. Before that point, and for anything else, you can ask us to:
We will not ask you why, and asking will never affect the service you receive.
Simply reply to the e-mail your report came in, or write to support@chayanremedies.com quoting your Booking ID. The Booking ID is how we identify your order — since we no longer hold your name or address, it is the only way we can find your report. Please forward the delivery e-mail with your query, as it contains the details we have already deleted. We reply within two working days, and always within 30 days.
This website sets no cookies. Your browser stores one thing locally: the language you chose, so the page opens in it next time. Nothing about you is sent anywhere as a result, and clearing your browser data removes it.
This service is intended for adults. We do not knowingly collect data about anyone under 18. If you believe a child's details have been sent to us, write to us and we will delete them.
When you e-mail us — a question, a problem with your report, a request — we keep your message and our reply so that we can answer you, and so that if you write again we can see what was already said. We keep correspondence for 90 days from the last message in the thread, and then delete it.
This is a separate record from your booking, and we would rather be plain about the difference than let the promise in section 4 sound wider than it is. That promise covers what you submitted through the booking form: your floor plan and the problems you described are deleted the moment your report is sent, and we hold no copy. An e-mail is a second copy that you have made, sitting in an inbox — we cannot delete it at delivery without also losing the ability to answer you.
So please quote your Booking ID rather than repeating personal details. You never need to describe your problems again in an e-mail; the Booking ID alone identifies your order. If you have already sent us more than you meant to, ask and we will delete that correspondence straight away rather than waiting for the 90 days.
Our e-mail is handled by a provider whose servers are outside India. What that means for you, if you are in the EU or UK, is set out in section 8 — it applies to correspondence in the same way it applies to your plan.
If we change how we handle your details, we will change this page and its version date. The consent you gave is recorded against the version that was in force at the time, so a later change cannot be treated as something you already agreed to.