Privacy policy

This website is run by The Green Hype (The GreenHype, a sole proprietorship of Hari Harsh), 2032, Johari Bazaar, Jaipur, Rajasthan 302003, India (“The Green Hype”, “we”, “us”). For the personal data described here, we are the Data Fiduciary under the Digital Personal Data Protection Act, 2023 (the “DPDP Act”): we decide why and how it is processed.

This policy is written in line with the DPDP Act and the Digital Personal Data Protection Rules, 2025, and with the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, which continue to apply until the DPDP framework fully commences.

It covers personal data we collect through this website (thegreenhype.in) and its forms. It does not cover the work we do for clients: when a client shares their customers’ or audience’s data with us for a project, we handle it as their processor, under our agreement with that client and their own privacy notice.

We only collect what you type into a form yourself. Nothing is collected in the background for marketing or profiling.

• Project enquiries (the contact form): your name, email address, WhatsApp number, organisation or brand, how you heard about us, and whatever you tell us about your project, topic and timeline. Why: to reply, understand what you need, and prepare a proposal.
• Job applications (the careers form): your name, email address, phone number, links to your portfolio and resume, and your message. Why: to assess your application and get back to you. Please don’t include information about your caste, religion, health, finances or other sensitive matters; we don’t need it.
• friends.hype (building an octopus for our wall): your name, a short note and your octopus’s look, which are published on the site for everyone to see; and your email address and phone number, which are never published. Why: to show your octopus on the wall, and to reach you about your post if we need to (for example if it’s reported). Use a first name or nickname if you prefer.
• Technical logs: like every website, our hosting provider automatically records your IP address, browser type, the pages requested and the time. Why: to keep the site running and secure, and to investigate misuse.

We don’t use analytics, advertising or tracking tools, we don’t build profiles of visitors, and we do not sell or rent personal data to anyone.

Everything in the forms above is information you choose to give us for a specific purpose: a reply to your enquiry, a decision on your application, or a place on our wall. We use it for that purpose, as section 7(a) of the DPDP Act allows, and for nothing else. We won’t add you to a mailing list or send you marketing unless you separately ask us to.

We may also process data where the law requires it, for example to comply with a court order or a lawful direction from a government authority, or to respond to a security incident.

This website is not meant for anyone under 18, who is a “child” under the DPDP Act. We don’t knowingly collect a child’s personal data, and we won’t without verifiable consent from a parent or lawful guardian. If you are under 18, please don’t use our forms. If you think a child has sent us their details, tell us and we will delete them.

We use a small number of service providers to run this website. They process data only on our instructions, as our Data Processors, and are bound to keep it secure:

• Vercel hosts the website and keeps the technical logs described above.
• Cloudinary stores the site’s photos and videos, and keeps enquiry and job-application submissions in private storage that only we can open.
• Supabase stores the friends.hype wall.
• Sanity holds the site’s written content. It holds no visitor data, but your browser connects to it to load that content.

Some parts of the site show content from other companies, which load directly from their servers:

• YouTube (Google), for embedded films. We use YouTube’s privacy-enhanced mode, but YouTube may set its own cookies once you play a video.
• Instagram (Meta), for the images in our Instagram feed.

When your browser loads their content, those companies receive your IP address and browser details and handle them under their own privacy policies. We may also disclose data when Indian law requires it, for example to comply with a court order or a lawful request from a government agency.

Some of these providers store data on servers outside India. Section 16 of the DPDP Act allows this, except to countries the Central Government restricts by notification. We will stop any transfer the law does not permit.

• Project enquiries: while we’re in conversation and for up to 12 months after the last contact; if we go on to work together, for as long as our agreement and tax and accounting laws require.
• Job applications: up to 12 months after we decide, so we can reach you about future roles. Ask us and we’ll delete yours sooner.
• friends.hype posts: until you ask us to remove your octopus, or we take it down.
• Technical logs: for the period our hosting provider keeps them, and at least as long as Indian law requires such records to be kept.

After that, we delete the data or anonymise it so it no longer identifies you.

We take reasonable security safeguards, as the DPDP Act and the IT Act require. The site is served only over encrypted connections (HTTPS). Form submissions are kept in private storage that can only be opened with our secret keys. Our editing tools are password-protected, and only the people who need the data can see it. No system is perfectly secure, but we work to prevent unauthorised access, loss or misuse.

If we have a personal data breach, we will tell the people affected and the Data Protection Board of India, as the DPDP Act and Rules require. We will also report cyber security incidents to CERT-In within the time its directions set. We will explain what happened, what it may mean for you, and what we are doing about it.

Under the DPDP Act, you can ask us to:

• tell you what personal data of yours we hold, what we do with it, and who we have shared it with (section 11);
• correct, complete or update it, or erase it where we no longer need it (section 12);
• stop using it, where our use rests on your consent; withdrawing is as easy as giving it was, though it doesn’t undo what was done before;
• hear and resolve a complaint about how we handled it (section 13);
• let someone else, a nominee, exercise these rights for you if you die or become unable to (section 14).

To use any of these rights, write to us by email at hariharsh@thegreenhype.in or through our contact page. We may ask for something to confirm it’s you. We acknowledge every request within 6 working days and resolve it within 2 months.

The DPDP Act also asks something of you (section 15): give accurate information, don’t impersonate anyone, don’t share someone else’s personal data without their permission, and don’t file false or frivolous complaints.

If you are unhappy with how we handled your data, please contact us first; see our grievance redressal page for how, and how quickly we respond. If we don’t resolve it, you can complain to the Data Protection Board of India, which the DPDP Act set up to deal with these complaints.

We will update this policy when our practices or the law change, and change the date at the top. If a change affects how we use data you have already given us, we will tell you before it takes effect where we can.

Questions about this policy or your data: write to us by email at hariharsh@thegreenhype.in or through our contact page, or to our Grievance Officer, Hari Harsh.