Short version: we collect very little. We don't sell your data, we don't run advertising trackers, and we don't use third-party analytics today. If that changes, we will update this page and ask for your consent where the law requires it, before anything new is switched on.
1. Who we are
nodelyf (“nodelyf”, “we”, “us”) is a business, markets and technology publication operated by Choose4Choice, 17-8-415/6/1 Chanchalguda, Hyderabad, Telangana, India. Choose4Choice is the data controller (and “Data Fiduciary” under India’s Digital Personal Data Protection Act, 2023) for personal data processed through nodelyf.com.
Contact for privacy matters: info@nodelyf.com, +91 90009 77966. Our Grievance Officer is named on our Grievance Redressal page.
2. What we collect
When you simply read nodelyf
- Server logs. Like every website, our web server records technical data for each request: IP address, date and time, page requested, browser type and referring page. We use these logs only to keep the site running and secure (for example, to stop attacks), and delete them within 30 days unless needed to investigate a specific security incident.
- Article view counts. We count page views to show “Most Read” lists. The count is a number attached to the article; it is not linked to you.
We do not use advertising cookies, tracking pixels, fingerprinting or third-party analytics. Our fonts and images are served from our own servers, so reading an article does not send your data to Google, Meta or other third parties.
When you contact us
If you email or call us, we receive your name, contact details and whatever you choose to tell us. We use this to reply, handle corrections or complaints, and keep a record of the correspondence.
When you create an account or comment
Reader accounts and comments are being introduced. When they are, we will collect your name or display name, email address, a securely hashed password (we never store the password itself), and the comments you post. To prevent spam and abuse we store a keyed hash of your IP address and browser identifier with each comment rather than the raw values, and we use Cloudflare Turnstile to check that you are human (see section 5).
Newsletter
If we launch a newsletter, we will collect your email address only with your explicit opt-in, confirm it with a double opt-in email, and include an unsubscribe link in every message.
Contributors and team members
If you write for us, we process the information needed to work with you: name, contact details, biography, photo (if supplied) and payment details where applicable.
3. Why we use it, and our legal bases
| Purpose | Legal basis (GDPR / UK GDPR) | India (DPDP Act) |
|---|---|---|
| Operating and securing the website, preventing fraud and abuse | Legitimate interests | Legitimate use (s.7) |
| Replying to messages, corrections and complaints | Legitimate interests; legal obligation for statutory grievances | Consent you give by contacting us; legal obligation |
| Running reader accounts and comments | Contract (providing the service you signed up for) | Consent |
| Sending a newsletter | Consent | Consent |
| Complying with law, court orders and regulators | Legal obligation | Legal obligation |
You may withdraw consent at any time; this does not affect processing that happened before you withdrew it.
4. Who we share it with
We do not sell or rent personal data, and we do not “share” it for cross-context behavioral advertising as defined by California law. We disclose data only to:
- Service providers who host and run the site for us (web hosting, email delivery, security and CDN services such as Cloudflare), under contracts that limit their use of the data to providing services to us;
- Authorities when required by law, court order or a valid government request, or to protect the rights and safety of our readers, staff or others.
We will list the specific providers here as they are engaged.
5. Cloudflare Turnstile
Forms that accept comments or account sign-ups use Cloudflare Turnstile, a privacy-focused alternative to traditional CAPTCHAs, to block bots. Turnstile processes limited technical signals from your browser to tell humans from bots. It does not use advertising cookies. See Cloudflare’s privacy policy for details.
6. International transfers
We are based in India and our servers may be located in India or other countries. When we transfer personal data of people in the European Economic Area, United Kingdom or Switzerland to a country without an adequacy decision, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses. Transfers from India follow any restrictions notified by the Government of India under the DPDP Act.
7. How long we keep it
- Server logs: up to 30 days.
- Correspondence: up to 3 years after the matter is closed, or longer where needed for legal claims.
- Accounts and comments: while your account is active; deleted or anonymized within 30 days of your request to close it (published comments may be removed or anonymized).
- Newsletter: until you unsubscribe.
- Grievance records: as long as required by the Information Technology Rules, 2021 and other applicable law.
8. Your rights
Depending on where you live, you have some or all of the following rights. We honor them for every reader regardless of location wherever practical.
- Access a copy of your personal data, and information about how we use it.
- Correct inaccurate or incomplete data.
- Delete your data (“right to erasure”).
- Object to or restrict processing based on legitimate interests.
- Portability: receive your data in a machine-readable format.
- Withdraw consent at any time.
- Nominate another person to exercise your rights in the event of death or incapacity (India).
- Non-discrimination: we will not treat you differently for exercising your rights (California).
To exercise a right, email info@nodelyf.com with the subject “Privacy request”. We may need to verify your identity. We respond within 30 days (one month under GDPR; 45 days under CCPA, extendable where the law allows). You may use an authorized agent where your local law permits.
Regional information
European Economic Area and UK: You may complain to your local data protection authority. We would appreciate the chance to resolve your concern first.
California (CCPA/CPRA): In the past 12 months we collected identifiers (such as IP address and email address) and internet activity information (server logs), for the purposes described above. We have not sold or shared personal information, and we do not use or disclose sensitive personal information for purposes other than those permitted. We honor Global Privacy Control signals as a request to opt out of sale and sharing.
Singapore (PDPA): You may request access to or correction of your personal data and withdraw consent by contacting us. Our Data Protection Officer can be reached at info@nodelyf.com.
India (DPDP Act, 2023): You may raise a grievance with our Grievance Officer. If you are not satisfied with our response, you may complain to the Data Protection Board of India.
9. Children
nodelyf is a business publication intended for adults. We do not knowingly collect personal data from anyone under 18, and accounts are not available to under-18s. If you believe a child has given us personal data, contact us and we will delete it.
10. Security
We protect data with encryption in transit (HTTPS), hashed passwords (Argon2id), hashed IP addresses, strict access controls for our team, audit logs and regular updates. No system is perfectly secure; if a breach affects your personal data, we will notify you and the relevant authorities as the law requires.
11. Changes
We will update this policy as nodelyf adds features (for example comments, a newsletter, analytics or advertising). Significant changes will be announced on the site, and where consent is needed we will ask for it before the change takes effect. The “Last updated” date above shows when it last changed.