Privacy Policy

Effective date: 29 October 2026 · Last updated: 29 October 2026

This Privacy Policy explains how Moonlight Musings (“we”, “us”), the training and coaching practice of Ritu Rahul Rathod, collects, uses, shares and protects your personal data when you visit riturathod.com (the “Website”), contact us, or use our coaching, training, speaking and education services (the “Services”).

We follow the Digital Personal Data Protection Act, 2023 and its Rules (“DPDP Act”), the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. For the DPDP Act, we are the “Data Fiduciary” and you are the “Data Principal”.

1. Who we are

2. Personal data we collect

Information you give us

• Sign-up and enquiry forms (including the sign-up pop-up on this Website): name, email address, WhatsApp or mobile number and, where you choose to share them, company, designation, team size and your message.
• Bookings: when you book a call through our scheduling tool, your name, email, phone number and the time slot you choose.
• Clients and participants: details needed to deliver a programme, such as your role, goals, attendance, session notes and feedback. For image consulting this may include photographs you choose to share for wardrobe or colour analysis.
• Payments: billing name, address and GST details where applicable. Card, UPI and bank details are entered on our payment provider’s secure page; we do not see or store them.
• Communications: messages you send us by email, WhatsApp, phone or social media.

Information collected automatically

• Device and usage data: IP address, browser and device type, pages visited, time spent, the website or advertisement that referred you, and approximate location (city level).
• Advertising identifiers such as Google click ID (gclid) and Meta click ID (fbclid) when you arrive from one of our ads.
• Cookies and similar technologies, as explained in section 11.

We do not ask for sensitive personal data such as health information, financial account details, biometric data or passwords. Please do not send it to us.

3. How and why we use your data

We will not use your data for any purpose that is not compatible with the purpose for which you gave it without asking you first. We do not sell your personal data.

4. Consent and how to withdraw it

When you submit a form on this Website you are shown a notice and asked to tick a box agreeing to be contacted. That box is never pre-ticked. You can withdraw your consent at any time, as easily as you gave it, by:

• emailing riturahulrathod@gmail.com with the subject “Withdraw consent”,
• replying STOP to any WhatsApp or SMS message from us, or
• clicking “unsubscribe” in any marketing email.

Withdrawing consent does not affect anything we lawfully did before you withdrew it. After withdrawal we will stop processing your data for that purpose within a reasonable time and delete it unless the law requires us to keep it.

5. Who we share your data with

We share personal data only with service providers that help us run our practice, under contracts or terms that require them to protect it and use it only for our instructions:

• Website hosting (SiteGround) and WordPress plugins that run riturathod.com and store the enquiries submitted through its forms.
• Google (Gmail, Google Analytics, Google Ads) for receiving enquiries by email and measuring advertising.
• Meta Platforms (Instagram, Facebook, WhatsApp) for advertising measurement and for messaging you when you have asked us to.
• Cal.com for booking calls and sessions.
• Payment gateways and banks for processing payments.
• Accountants and professional advisers where needed for tax and legal compliance.

For corporate programmes, we may share attendance and general feedback with the organisation that engaged us. We will not share an individual participant’s personal coaching notes with their employer without that participant’s permission.

We may disclose data where required by law, a court order or a government authority, or to protect our rights or the safety of others.

6. Transfers outside India

Some of our service providers (for example Google, Meta and Cal.com) store data on servers outside India, including in the United States. We transfer data only to countries not restricted by the Government of India under the DPDP Act, and we use providers that apply recognised security standards.

7. How long we keep your data

• Enquiries and call-back requests that do not become clients: up to 24 months from our last contact with you, then deleted.
• Client and participant records: for the length of the engagement and up to 3 years after it ends, so we can support you and handle any questions.
• Invoices and accounting records: 8 years, as required by Indian tax laws.
• Website analytics: as set in our analytics tools (Google Analytics data is kept for 14 months).

If you ask us to delete your data, we will do so unless we must keep it to meet a legal obligation.

8. How we protect your data

We use reasonable security practices, including HTTPS encryption on the Website, two-factor authentication on our accounts, access limited to people who need it, and providers with recognised security certifications. No method of transmission or storage is completely secure. If a personal data breach affects you, we will inform you and the Data Protection Board of India as required by law.

9. Your rights

Under the DPDP Act you have the right to:

• Access: get a summary of the personal data we hold about you and how we use it, and know who we have shared it with.
• Correction and updating of inaccurate or incomplete data.
• Erasure of your data when it is no longer needed or when you withdraw consent.
• Grievance redressal: complain to our Grievance Officer (section 12) and, if you are not satisfied, to the Data Protection Board of India.
• Nominate another person to exercise your rights if you die or become unable to do so.

If you live outside India (for example in the United States, the UK or the EU), you may have similar rights under your local laws, such as the right to object to processing, to restrict it, to data portability and to opt out of targeted advertising. Contact us using the details below and we will respond in line with the law that applies to you.

To use any right, email riturahulrathod@gmail.com. We may ask you to confirm your identity. We do not charge for reasonable requests.

10. Children

Some of our education programmes (such as creative writing, SAT and IELTS preparation) are for students under 18. For anyone under 18, we collect personal data only from, and with the verifiable consent of, a parent or lawful guardian, who registers the student. We do not track children for advertising or target advertising at them.

The sign-up form on this Website is meant for adults. If you are under 18, please ask a parent or guardian to contact us. If we learn that we have collected a child’s data without parental consent, we will delete it.

11. Cookies

We use cookies and similar technologies for the Website to work, to remember your choices (for example, not showing you the pop-up form again), for analytics (Google Analytics) and for advertising (Google Ads and Meta). You can block or delete cookies in your browser settings, and opt out of personalised ads through Google’s Ad Settings and Meta’s Ad Preferences.

12. Grievance Officer and contact

13. Changes to this policy

We may update this Privacy Policy when our practices or the law change. The “Last updated” date at the top shows the latest version. If a change significantly affects how we use data you have already given us, we will tell you and, where needed, ask for your consent again.