Privacy Policy | Right Buy
Last Updated: April 5, 2025
1. Introduction
Welcome to www.rightbuy.org ("Website", "Site"). This Website is operated by Manas Gujral ("we", "us", "our"). We take the protection of your personal data very seriously. This Privacy Policy explains how we collect, use, process, and protect your personal data when you visit our Website, in compliance with the General Data Protection Regulation (GDPR) and relevant data protection principles.
2. Data Controller
The responsible party (controller) for data processing on this Website is:
Manas Gujral
C1108, RML Doctors Hostel, Old rk ashram road
New Delhi -110001
India
Email: [email protected]
3. General Information on Data Processing
Scope: We process personal data of our users principally only to the extent necessary to provide a functional website and our content and services.
Legal Basis: The processing of personal data regularly takes place with the user's consent (Art. 6(1)(a) GDPR) or on the basis of statutory regulations that permit data processing (e.g., legitimate interests - Art. 6(1)(f) GDPR, or legal obligations - Art. 6(1)(c) GDPR).
Data Erasure and Storage Duration: Personal data will be deleted or blocked as soon as the purpose for storage ceases to apply, unless statutory retention obligations preclude deletion.
Security Measures: We implement appropriate technical and organizational security measures (TOMs) to protect your data against accidental or intentional manipulation, loss, destruction, or unauthorized access.
4. Provision of the Website and Creation of Log Files (Hosting)
Description: Our website is hosted by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA ("Cloudflare"). When you visit our Website, Cloudflare may automatically collect and store information in server log files that your browser transmits for security and performance purposes. This may include browser type/version, operating system, referrer URL, hostname, time of request, and IP address (typically anonymized or truncated by Cloudflare for general visitors).
Purpose: This data is processed for the purposes of ensuring the security and stability of the website, delivering the website content correctly, analyzing errors, and defending against attacks.
Legal Basis: The legal basis for this temporary storage and processing is our legitimate interest in the technically flawless presentation and security of our website pursuant to Art. 6(1)(f) GDPR.
Data Transfer: Cloudflare operates a global network. Data processing may occur in the USA. Cloudflare typically processes data based on Standard Contractual Clauses (SCCs) approved by the European Commission as a safeguard for data transfers. However, data protection levels in the USA may not be equivalent to those in the EU.
Further Information: For more details, please refer to Cloudflare's Privacy Policy: https://www.cloudflare.com/privacypolicy/
5. Use of Cookies & Consent Management
Description: Our Website uses cookies. Cookies are small text files stored on your computer system by your internet browser.
Types of Cookies:
Essential Cookies: Necessary for basic website function (e.g., session management, potentially storing consent preferences). Their use is based on our legitimate interest (Art. 6(1)(f) GDPR).
Non-Essential Cookies: Includes cookies for analytics (like Google Analytics). These are only set after you provide explicit consent via our cookie consent banner.
Consent Management: We use a built-in website feature [(Verify this Publii feature actively blocks non-essential cookies before consent)] to inform you about cookies and manage your consent according to GDPR requirements (Art. 6(1)(a) GDPR for non-essential cookies).
Managing Cookies: You can configure browser settings to refuse cookies. You can manage or withdraw your consent for non-essential cookies at any time via our consent management tool/banner. Withdrawing consent does not affect the lawfulness of processing based on consent before withdrawal.
6. Google Analytics
Description: This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses cookies (set only after your consent, see Section 5).
Purpose: To analyze website traffic, understand user behavior, and improve our website content and user experience.
Data Collected: Information generated by the cookie about your use of the website (including your anonymized IP address). We have configured our Google Analytics settings to disable Granular location and device data collection and Google Signals data collection.
IP Anonymization: We have activated IP anonymization for Google Analytics on this website. Your IP address will be truncated by Google within the EU/EEA before potential transmission to the USA. [Ensure this is enabled in your GA4 settings!]
Legal Basis: Use of Google Analytics cookies is based solely on your explicit consent (Art. 6(1)(a) GDPR).
Data Processing Agreement: We have concluded a DPA with Google.
Data Transfer to USA: Data transfer to the USA is typically based on SCCs agreed with Google. Despite these measures, US authorities might potentially access data under US law, and protection levels may differ from the EU. Your consent to Google Analytics includes consent to this potential data processing in the USA.
Opt-Out Options:
Withdraw consent via our consent management tool/banner.
Prevent cookie storage via browser settings.
Install the Google Analytics opt-out browser add-on: https://tools.google.com/dlpage/gaoptout?hl=en
Further Information: Google's Privacy Policy: https://policies.google.com/privacy?hl=en
7. Email Contact
Description: If you contact us via email at [email protected], the personal data you transmit (name, email address, message) will be stored.
Purpose: Solely for processing your inquiry and communication.
Legal Basis: Your consent (Art. 6(1)(a) GDPR) or, if related to contractual matters, Art. 6(1)(b) GDPR.
Data Disclosure: Data is not passed to third parties unless necessary for your request or required by law.
Retention: Data is deleted once the purpose is fulfilled and no statutory retention periods apply.
8. Affiliate Links
Description: Our website contains affiliate links (e.g., to Digistore24 or other partners). If you click on these links and make a purchase, we may receive a commission at no extra cost to you. These links may set cookies directly on the partner's website after you click the link, governed by their respective privacy policies. We do not collect personal data directly through the placement of these links on our site itself.
9. Social Sharing Links
Description: We may provide links that allow you to share our content on social media platforms (like Facebook, X, Pinterest, Instagram). These are standard external links. Clicking these links will redirect you to the respective platform, which then operates under its own privacy policy. No data is transferred to these platforms merely by viewing the links on our site. [(If using active widgets that load scripts, this section needs significant expansion)].
10. Your Rights as a Data Subject (GDPR)
As a user subject to the GDPR, you have the following rights regarding your personal data processed by us:
Right of Access (Art. 15)
Right to Rectification (Art. 16)
Right to Erasure (Art. 17)
Right to Restriction of Processing (Art. 18)
Right to Data Portability (Art. 20)
Right to Object (Art. 21)
Right to Withdraw Consent (Art. 7(3))
Right to Lodge a Complaint with a supervisory authority (Art. 77)
To exercise these rights, please contact us using the details provided in Section 2.
11. Data Retention
We process and store personal data only for the period necessary for the purpose of storage or as permitted by law. Data is routinely blocked or deleted afterwards.
12. Changes to this Privacy Policy
We reserve the right to adapt this Privacy Policy. The current version published on our website applies. We recommend reviewing this policy periodically.