Data protection
This page explains how Bloglly protects personal data and how to use your rights. It follows India's Digital Personal Data Protection Act, 2023, and the main principles of the EU and UK GDPR for readers outside India. For what we collect in the first place, see the privacy notice.
Our principles
- Collect less. We ask only for what a feature needs: an e-mail address for the newsletter, and contact and article details for a guest post.
- Use it only for the stated reason. Newsletter addresses are used only to send the newsletter, and guest-post details only to handle that order.
- Don't keep it forever. Unconfirmed newsletter sign-ups are deleted after 30 days. Reaction anti-spam codes expire after 24 hours. Order records are kept only as long as accounting law requires.
- Never sell it. Personal data is not sold, rented or traded.
Lawful basis
- Consent: the newsletter (you tick the box and confirm by e-mail), plus analytics and personalised ads where a cookie banner is shown. You can withdraw consent at any time.
- Contract: guest posts. We need your details to review, publish and e-mail you about the post you paid for.
- Legal obligation: keeping payment and invoice records.
- Legitimate interest: security logs and anti-spam checks that keep the site safe.
How we keep data safe
- The whole site is served over HTTPS, so data is encrypted in transit.
- Payment keys and other secrets are stored encrypted. Card and bank details are handled only by Razorpay and never reach our servers.
- Only the site administrator can open the admin area, behind a password-protected login.
- Uploaded guest-post files are kept in private storage and can't be opened by the public.
- Databases are backed up before updates so data isn't lost.
Your rights
You can ask us to:
- tell you what personal data we hold about you and how we use it;
- correct data that is wrong or incomplete;
- delete your data, unless the law requires us to keep it (for example, payment records);
- stop using your data for something you consented to;
- give your data to you in a common format;
- name someone to act on your behalf if you are unable to.
To unsubscribe from the newsletter you don't need to write to us: use the link at the bottom of any e-mail.
How to make a request
E-mail notifications@bloglly.com with the subject "Data request", and write from the address the request is about so we can confirm it's you. We reply within 30 days and usually much sooner. Requests are free.
Grievances
If you're unhappy with how we've handled your data, e-mail notifications@bloglly.com with the subject "Grievance". We will acknowledge it within 72 hours and try to resolve it within 30 days. If you are in India and we can't resolve it, you can complain to the Data Protection Board of India. In the EU or UK, you can contact your local data protection authority.
Data breaches
If a security incident ever affects your personal data, we will tell you and the relevant authority without undue delay, as the law requires.