Privacy Policy

Last updated: November 2026

This Privacy Policy describes how ddridestories.com (“we”, “us”, or “our”) collects, uses, and protects your information when you visit our website. We are committed to protecting your privacy and being transparent about our data practices.

1. Information We Collect

Information You Provide

• Comments: When you leave a comment, we collect your name, email address, website URL (optional), and the comment content. Your IP address and browser user agent may also be collected for spam detection.
• Contact: If you contact us directly, we collect your name, email, and message content.
• Subscriptions: If you subscribe to our newsletter, we collect your email address.

Information Collected Automatically

• Log data: IP address, browser type, referring/exit pages, operating system, date/time stamps, and clickstream data.
• Cookies: Small data files stored on your device (see Section 4).
• Analytics: Page views, session duration, bounce rate, and traffic sources via Google Analytics (through Google Site Kit).
• Device information: Device type, screen resolution, and language preferences.

2. How We Use Your Information

• To operate, maintain, and improve our website
• To respond to your comments, questions, and requests
• To send newsletters and updates (only if you subscribed)
• To detect and prevent spam, abuse, and security threats
• To analyze website traffic and user behavior to improve content
• To display relevant content and improve user experience

3. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA), we process your personal data under these legal bases:

• Consent: When you subscribe to our newsletter or accept cookies
• Legitimate interest: For website security, spam prevention, and analytics
• Contract: When you engage with us for services
• Legal obligation: When required by law

4. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience. Types of cookies we use:

• Essential cookies: Required for the website to function (e.g., security, session management)
• Analytics cookies: Google Analytics cookies to understand how visitors use our site
• Functional cookies: Remember your preferences (e.g., language, region)
• Social media cookies: Set by embedded social media content (Instagram, YouTube)

You can control cookies through your browser settings. Disabling cookies may affect website functionality. For more information, visit allaboutcookies.org.

5. Third-Party Services

We use the following third-party services that may collect your data:

• WordPress.com / Jetpack: Hosting, security, performance, and site statistics. Automattic Privacy Policy
• Google Analytics (Site Kit): Website traffic analysis. Google Privacy Policy
• Yoast SEO: SEO optimization and indexing
• Gravatar: Profile images for comments. Automattic Privacy Policy
• Instagram / YouTube embeds: Social media content displayed on our site. These platforms have their own privacy policies.
• Facebook, LinkedIn: Social sharing and profile links

6. Embedded Content

Our website may include embedded content (videos, images, posts) from other websites. Embedded content behaves as if you visited the other website directly, and those sites may collect data about you, use cookies, and track your interactions.

7. Social Media

We maintain a presence on social media platforms (Instagram, Facebook, YouTube, LinkedIn). When you interact with our social media pages, the platform’s privacy policy applies. We do not control how these platforms process your data.

8. Your Rights

Depending on your location, you may have the following rights:

• Right to access: Request a copy of your personal data
• Right to rectification: Correct inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data
• Right to restrict processing: Limit how we use your data
• Right to data portability: Receive your data in a machine-readable format
• Right to object: Object to processing of your data
• Right to withdraw consent: Withdraw consent at any time
• CCPA (California): Right to know, delete, and opt-out of sale of personal information

To exercise any of these rights, please contact us at the email below. We will respond within 30 days.

9. Data Retention

We retain personal data only as long as necessary for the purposes described in this policy. Comment data is retained indefinitely unless you request deletion. Analytics data is retained for 26 months (Google Analytics default). You may request deletion of your data at any time.

10. Children’s Privacy

Our website is not directed at children under 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

11. Data Security

We implement reasonable security measures to protect your personal data, including SSL encryption, secure hosting (WordPress.com), and regular security updates. However, no method of transmission over the internet is 100% secure.

12. International Data Transfers

Your data may be processed and stored in countries outside your own, including the United States, where our hosting provider (WordPress.com/Automattic) operates. We ensure appropriate safeguards are in place for international transfers.

13. Compliance with Indian Laws

In addition to GDPR and CCPA, we comply with Indian data protection laws including the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDP Act). Under these laws:

• We collect and process personal data only for lawful purposes with your consent
• We implement reasonable security practices to protect your sensitive personal data
• You have the right to access, correct, and erase your personal data
• We do not sell or share your personal data with third parties for marketing without consent
• We designate a grievance officer for data protection concerns (contact below)
• We retain data only as long as necessary and delete it upon request

Grievance Officer: Dhruv Dutta
Email: dhruv.dutta@gmail.com
Response time: Within 30 days of receiving a complaint

14. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date. We encourage you to review this policy periodically.

15. Contact Us

If you have questions about this Privacy Policy or your personal data, please contact:

ddridestories
Email: dhruv.dutta@gmail.com
Website: https://www.ddridestories.com

This privacy policy was created to comply with GDPR, CCPA, and general privacy best practices.