Privacy Policy

The short version: we only collect your email and who you are (couple, guest or planner) so we can tell you when Wishmaala launches. We don't sell it, we don't use cookies or analytics, and you can ask us to delete it any time by writing to hello@wishmaala.in.

01Who we are

Wishmaala ("Wishmaala", "we", "us") is a pre-launch wedding-wishlist concept. It is operated by Angel Manchanda, an individual resident in India, who decides why and how your personal data is processed and is therefore the Data Fiduciary under the Digital Personal Data Protection Act, 2023 ("DPDP Act"). There is no company yet. If one is formed, we will update this policy and tell you before your data is transferred to it.

Contact for everything in this policy: hello@wishmaala.in.

This policy is our notice under section 5 of the DPDP Act and our privacy policy under rule 4 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules"), made under the Information Technology Act, 2000.

02What we collect

Data	Where it comes from	Required?
Email address	You, in the waitlist form	Yes
"I am" choice (getting married / guest or friend / wedding planner)	You, in the waitlist form	Yes (pre-selected; you can change it)
Consent record: that you ticked the consent box, the policy version, the date and time, and the page you signed up on	Generated when you submit	Yes
Name, wedding month or city	Only if you choose to tell us later, for example by replying to an email	No, optional
Technical data (IP address, browser type, time of request)	Logged automatically by our website host and form provider for security and to deliver the page	Automatic

We do not collect passwords, bank, card or UPI details, Aadhaar, PAN, or any other financial information. We do not collect any "sensitive personal data or information" as listed in rule 3 of the SPDI Rules. No payments can be made on Wishmaala today.

03Why we use it

We use your data only for these purposes:

To tell you when Wishmaala launches and invite you to early access.
To send occasional pre-launch updates, and optionally ask your opinion about the product (you never have to answer).
To understand interest in aggregate, for example how many couples or planners have signed up. These figures don't identify you.
To keep the form secure and prevent spam or abuse.

We will not sell or rent your data, share it for others' marketing, build advertising profiles, or use it for any purpose not listed here without asking you first.

04Your consent

We process your data on the basis of your consent (section 6 of the DPDP Act), which you give by ticking the box on the waitlist form. Your consent is specific to the purposes above.

You can withdraw consent at any time, as easily as you gave it: use the unsubscribe link in any email, or write to hello@wishmaala.in. We will then stop emailing you and delete your data as set out below. Withdrawal does not affect anything we lawfully did before it.

We use a few service providers (Data Processors) who handle data only on our instructions and under their own security commitments:

Waitlist form or storage provider: Formspree (formspree.io) or Google Sheets (Google LLC), which receives and stores signups.
Email provider: Zoho Mail or Google Workspace, for the hello@wishmaala.in mailbox and launch emails.
Website host / CDN: Netlify, Vercel or Cloudflare Pages, which serves this site and keeps short-lived technical logs.

Some of these providers may store data on servers outside India (for example in the USA or EU). The DPDP Act permits this except to countries the Central Government restricts (section 16). We will not use a provider in a restricted country.

We may also disclose data if Indian law, a court or a government authority lawfully requires it.

06How long we keep it

Waitlist data: until 12 months after Wishmaala launches, or until you unsubscribe or ask for deletion, whichever comes first. If the project is shut down without launching, we will delete the list within 90 days of that decision.
Emails you send us: as long as needed to reply and resolve your request, then deleted within 12 months.
Technical logs: kept by our host or form provider for their standard log period (usually days or weeks).

Once a purpose is over, or you withdraw consent, we erase your data unless the law requires us to keep it (section 8(7) of the DPDP Act).

07Your rights

Under the DPDP Act (sections 11 to 14), you can:

Access: ask for a summary of the personal data we hold about you and what we do with it.
Correct, complete or update it.
Erase it.
Withdraw consent at any time.
Nominate someone to exercise your rights if you die or become unable to.
Raise a grievance with us, and if you are unhappy with our answer, complain to the Data Protection Board of India.

To use any right, email hello@wishmaala.in from the address you signed up with, so we can verify it's you. We aim to reply within 7 days and will resolve your request within one month at the latest.

08Cookies and analytics

This site does not set cookies, and it does not use analytics, advertising pixels or third-party trackers. Our fonts and scripts are hosted on our own site, so loading a page does not send your data to font or script networks.

If we ever add analytics or cookies, we will update this policy first and, where required, ask for your consent.

Preview builds only: when the waitlist isn't connected to a form provider yet (a local or demo copy of the site), a signup is saved only in your own browser's local storage and is never sent to us. You can clear it by clearing your browser's site data.

09How we protect it

We use reasonable security practices in line with rule 8 of the SPDI Rules and section 8(5) of the DPDP Act. Access is limited to the operator, accounts are protected with strong passwords and two-factor authentication, data travels over HTTPS, and we use reputable providers that encrypt stored data. We collect only what we need (data minimisation).

If a personal data breach happens, we will inform affected users and the Data Protection Board as the DPDP Act and its Rules require.

10Children

Wishmaala is meant for adults (18+). We don't knowingly collect data from anyone under 18. If you think a child has signed up, write to us and we will delete it.

11Grievance Officer and contact

Grievance Officer: Angel Manchanda (operator, Wishmaala)
Email: hello@wishmaala.in (subject line: "Privacy request" or "Grievance")
Response: acknowledgement within 48 hours where possible; resolution within one month of receipt.

This officer is designated under rule 5(9) of the SPDI Rules and handles requests and grievances under the DPDP Act. Before complaining to the Data Protection Board of India, you must first raise the grievance with us (section 13(3)).

12Changes to this policy

If we change this policy, we will update the version and date at the top. If a change affects how we use data you've already given, we will email you and, where needed, ask for fresh consent. Each signup stores the policy version you agreed to.