Privacy Policy

Who is responsible

Kush Khair operates this personal professional website and is the contact for information submitted here. For privacy requests or complaints, email contact@kushkhair.com. Please identify the request without attaching identity documents or financial records unless a secure, necessary verification process has been agreed.

Information you choose to provide

The enquiry form collects your name, email, phone, enquiry category and message so that Kush Khair can understand the topic and respond. Do not include sensitive identifiers, login credentials or financial documents. Contact details are not automatically added to a marketing list.

How this website uses information

Enquiries are kept in the website’s private administrative inbox. When the owner configures email delivery, the submitted name, email, phone, topic and message are also sent to the designated owner mailbox. Information may be accessed by the website owner and authorised service providers as needed for hosting, maintenance and communication. It is not sold. An enquiry does not create a public-practice engagement.

Calculators

Income-tax, financial-planning and investment calculators process inputs in your browser. The GST calculators and HSN/SAC search send entered values to this website’s server in a protected POST request to calculate a result or search the catalogue. The GST application does not save raw inputs or results in its database, session, application logs or analytics, and does not forward them to an external calculation service. Limited security metadata, such as request counters and expiry times, may be retained to prevent abuse. Calculator values are not added to enquiries or client records. Printing or saving a result is controlled by your device and browser.

Essential session cookies protect forms and administrator access; browser storage remembers your theme and privacy choice. Separate counters run by default, including when you close the notice, and retain daily totals for 180 days for approved page paths, named checklist/file responses, calendar reminders and report-generation/download actions. The counters store only day, action type, approved page/resource/tool identifier, file format and a total. They do not store a visitor ID, session ID, IP address, source, device, detailed timestamp, financial input or individual journey. Repeated requests and bots can affect totals; these are not unique people or confirmed file saves. Hosting security logs are separate.

Optional cookies and analytics

Accept optional cookies enables first-party analytics linked by random browser identifiers for up to 365 days. Accept essential cookies leaves that detailed tracking off. All tools remain usable. The essential preference lasts up to 180 days; optional consent lasts up to 365 days. Cookie preferences in the footer lets you change your choice. Closing the banner is not optional consent. This version does not load advertising trackers or Google Analytics.

What optional analytics records

After consent, random browser, session, page and tool-run codes record approved page paths, visible and active time, section visibility, scroll thresholds, tool opening and deliberate use, successful calculations, report creation, download initiation and checklist responses, navigation and outbound-link clicks, FAQ openings, search-use counts, calendar-filter use and theme changes. The extra interaction events contain fixed action categories, not typed text or full link destinations. Broad referral source and screen-size category are included. These codes do not establish a person’s identity. Analytics does not contain names, email addresses, phone numbers, raw IP addresses, calculator values, financial results, typed search terms, full referrer URLs or URL query strings. There is no session recording, fingerprinting, cross-site tracking or advertising profile. Enquiry contact details are kept separately. A download event cannot confirm that a file was saved to a device.

Analytics retention and your controls

Raw analytics is retained for up to 365 days, or a shorter period selected by the owner. A minimal consent receipt is retained for up to 365 days to enforce consent expiry. Cookie preferences lets you export linked analytics, delete it or withdraw consent. Withdrawal stops collection immediately and requests deletion of linked analytics on the server. If deletion cannot be confirmed, an on-screen message asks you to retry or contact the privacy address. Clearing browser/session data can make historical records difficult to locate; a privacy request can still be made using a previously saved visitor code. Analytics cleanup runs during site use and by a scheduled maintenance task when configured. Hosting backups may retain copies until their rotation period ends; the owner must reapply deletions when restoring a backup. Aggregate search-engine reports are kept for up to 395 days and are not linked to visitors.

Children and optional analytics

Educational content and tools are accessible without optional tracking. We do not intentionally profile children; people under 18 should use essential cookies. The website does not collect a date of birth or claim to verify age. If you believe analytics about a child was collected, use the privacy contact to request its deletion.

Service providers

The website uses hosting and technical maintenance services to operate the site and protect requests. Configured email services handle enquiry notifications. Optional analytics processes visit information only after consent. External booking and messaging destinations process the information you submit to them under their own terms. These categories do not imply that the website shares calculator inputs with those services.

Requests, withdrawal and complaints

Use the privacy contact above to request access, correction or deletion, withdraw consent to further optional communications, or raise a privacy complaint. Explain what you would like changed and provide enough information to locate your enquiry. Necessary verification may be requested. Analytics consent can be withdrawn through Cookie preferences. Withdrawing a choice does not undo earlier processing or remove records that must be retained for a valid legal reason.

Third-party destinations

WhatsApp, LinkedIn, Instagram, Google Maps, Google Calendar and official reference links open third-party services with their own privacy terms. Booking information entered on a third-party appointment page is handled by that service. No map or social feed is embedded automatically. Do not upload tax returns, bank statements or identity documents through the public contact form.

Retention and your requests

Enquiries are retained only as needed for follow-up, administrative purposes and any applicable record-retention duties. You may request access, correction or deletion by emailing the contact address below. Deletion may be limited where retention is required by law or an agreed professional engagement. The owner periodically reviews enquiries and removes those no longer needed. Deleting a website enquiry removes its website record and email-delivery status. Copies already delivered to the owner’s mailbox must be deleted separately; hosting backups may retain older copies until their retention period ends.

Security metadata

The website records a limited audit trail containing event type and time only, with up to 2,000 events retained for at most 30 days during ongoing use. Rate-limit counters use a hash of the connection address and an expiry time; the raw address and submitted values are not stored in these counters. Expired counters are cleared on subsequent rate-limited requests. The hosting provider may separately retain access logs containing connection metadata under its configured retention policy.

Security and contact

Private storage, administrator authentication and form-security controls reduce risk but cannot guarantee absolute security. For privacy enquiries, contact contact@kushkhair.com. Material changes to how information is handled will be reflected in this policy.