Privacy Policy for Amir Khan Wali

Effective Date: January 8, 2026
Last Updated: January 8, 2026

Website: Amir Khan Wali – Author, Advocate-at-Law & Alchemist (https://amirkhanwali.life/)

  1. Introduction and Your Consent

Welcome. I, Amir Khan Wali (“I,” “me,” “my,” or “Data Fiduciary”), respect your privacy and am committed to protecting your personal data. This Privacy Policy explains how I collect, use, disclose, and safeguard your information when you visit my website, https://amirkhanwali.life/ (the “Site”).

By using the Site, you expressly consent to the practices described in this Privacy Policy. If you do not agree with the terms herein, please do not access or use the Site.

This Policy is formulated in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) of India and other applicable Indian laws. For the purposes of the DPDP Act, I am the “Data Fiduciary” responsible for your personal data.

  1. Definitions (As per DPDP Act, 2023)

· Data Principal: The individual to whom the personal data relates. In this context, “you” are the Data Principal.
· Data Fiduciary: The person who alone or in conjunction with other persons determines the purpose and means of processing of personal data. Here, I, Amir Khan Wali, am the Data Fiduciary.
· Personal Data: Any data about an individual who is identifiable by or in relation to such data.
· Processing: Any operation performed on personal data, including collection, storage, use, sharing, etc.
· Consent: Your clear, specific, and unambiguous agreement, signified by a clear affirmative action.

  1. Information I May Collect

I collect minimal personal data necessary for the stated purposes. This may include:

· Identifiers & Contact Data: Your name, email address, and phone number, which you voluntarily provide when contacting me via the email (comms@amirkhanwali.com) or phone number listed on the Site.
· Technical & Usage Data: Information automatically collected about your interaction with the Site, such as your IP address, browser type, operating system, referring URLs, pages viewed, and the dates/times of your visits. This is primarily collected through cookies and similar tracking technologies (see Section 6).
· Communication Data: Copies of your messages and inquiries sent through the contact information on the Site.

I do not knowingly collect:

· Sensitive Personal Data as categorically defined under the DPDP Act (e.g., financial data, passwords, biometric data, genetic data, official identifiers, health data, etc.) through general Site interaction.
· Personal Data of Minors. The Site is not directed to individuals under the age of 18. If I learn that I have collected personal data from a minor without verified parental consent, I will take steps to delete that information.

  1. How and Why I Use Your Information (Purpose & Lawful Basis)

Under the DPDP Act, I process your personal data only for lawful purposes for which you have given consent, or where processing is necessary for certain legitimate functions.

Purpose of Processing Categories of Personal Data Lawful Basis (as per DPDP Act)
To respond to your inquiries, comments, or requests for information sent via contact details. Identifiers & Contact Data, Communication Data Your voluntary consent by initiating contact.
To provide information about my professional services, writings, or podcast upon your request. Identifiers & Contact Data Your consent and legitimate interest in providing requested information.
To operate, maintain, and improve the functionality and security of the Site. Technical & Usage Data Legitimate Use for purposes related to the security of the Site and preventing fraud, as permitted under the DPDP Act.
To comply with applicable laws, regulations, or legal processes (e.g., court orders). Any relevant data Necessary for compliance with legal obligation.

I will not process your personal data for any purpose that is incompatible with the purposes listed above.

  1. How I Share and Disclose Your Information

I value your privacy and do not sell, trade, or rent your personal data to third parties for marketing purposes. Disclosure is limited to the following scenarios:

· Service Providers (Data Processors): I may engage trusted third-party companies (e.g., website hosting providers, analytics services, email service providers) to perform functions on my behalf. These entities will have access to your personal data only as necessary to perform their tasks and are contractually obligated to maintain its confidentiality and security, and to process it only as per my instructions in compliance with the DPDP Act.
· Legal Requirements: I may disclose your information if required to do so by law or in the good faith belief that such action is necessary to (i) comply with a legal obligation, (ii) protect and defend my rights or property, (iii) prevent or investigate possible wrongdoing in connection with the Site, or (iv) protect the personal safety of users of the Site or the public.
· Professional Advisors: I may share information with my legal, financial, or other professional advisors where necessary for them to provide their services to me.

  1. Cookies and Tracking Technologies

The Site may use “cookies” and similar tracking technologies to enhance your experience. Cookies are small files placed on your device that help analyze web traffic and remember your preferences.

· Types Used: These may include essential (necessary for Site operation) and analytical/performance cookies (like Google Analytics) to understand how visitors use the Site.
· Your Control: Most web browsers are set to accept cookies by default. You can choose to set your browser to refuse cookies or to alert you when cookies are being sent. However, disabling some cookies may affect the functionality of the Site. Your continued use of the Site without changing your cookie settings signifies your consent to the use of cookies as described here.

  1. Data Security, Retention, and Deletion

· Security: I implement reasonable and appropriate technical and organizational security measures designed to protect your personal data from unauthorized access, disclosure, alteration, or destruction. However, no internet transmission or electronic storage method is 100% secure.
· Retention: I will retain your personal data only for as long as is necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Retention periods are determined based on the nature of the data and the purpose of processing.
· Deletion: Upon the expiry of the retention period or when the purpose of processing is fulfilled (whichever is earlier), I will securely delete or anonymize your personal data in accordance with my data retention policy and the DPDP Act.

  1. Your Rights Under the DPDP Act, 2023

As a Data Principal, you have the following rights regarding your personal data. To exercise any of these rights, please contact me using the details in Section 10.

  1. Right to Access & Confirmation: You have the right to request a summary of the personal data I process about you and the processing activities.
  2. Right to Correction & Erasure: You have the right to correct inaccurate or misleading personal data, complete incomplete data, and update your data. You also have the right to request the erasure of your personal data, subject to certain legal exceptions (e.g., where retention is required by law).
  3. Right to Grievance Redressal: You have the right to readily available means of registering a grievance with me. Please see Section 10.
  4. Right to Nominate: You have the right to nominate any other individual who can exercise your rights under the DPDP Act in the event of your death or incapacity.
  5. Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw your consent at any time. The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

I will respond to any valid request to exercise these rights within the timelines prescribed by the DPDP Act.

  1. Third-Party Links

The Site may contain links to other websites (e.g., social media platforms, podcast distributors). This Privacy Policy applies only to this Site. If you click on a third-party link, you will be directed to that third party’s site. I have no control over and assume no responsibility for the content or privacy practices of any third-party sites.

  1. Grievance Officer and Contact Information

In compliance with the DPDP Act, I have appointed myself as the point of contact for any data protection inquiries or grievances.

Grievance Officer: Katherine Sterling
Email for Data Privacy Queries: comms@amirkhanwali.com
Postal Address: [Your Professional Address, if you wish to include one for formal legal correspondence]

If you have any questions, concerns, or grievances about this Privacy Policy or my data practices, please contact me at the email above. I will make best efforts to resolve your grievance promptly.

  1. Updates to This Privacy Policy

I may update this Privacy Policy from time to time to reflect changes in my practices, the Site, or legal requirements. The updated version will be indicated by a revised “Last Updated” date at the top. I encourage you to review this page periodically for the latest information on my privacy practices.