This policy covers how Mithila Mornings (mithilaexports.com) collects, uses, and protects personal data. It is written to comply with India's Digital Personal Data Protection Act 2023 (DPDP Act) and, where applicable to EU/UK residents, the General Data Protection Regulation (GDPR) and the UK GDPR.
1. Introduction & Scope
Mithila Mornings is a trade-intelligence publication operated under the domain mithilaexports.com. Our editorial correspondence address is digest@mithilaexports.com. We are a Data Fiduciary under the DPDP Act 2023 and a Data Controller under the GDPR where EU/UK residents' data is processed.
This policy applies to all personal data collected through mithilaexports.com, our newsletter subscription, contact forms, and any related communications. It does not cover third-party websites linked from our site — those are governed by their own policies.
2. Data We Collect
Analytics data (Plausible): We use Plausible Analytics, a cookieless, privacy-first analytics tool. Plausible does not set cookies, does not use device fingerprinting, and does not collect personally identifiable information. It records aggregated metrics — page views, referrer, country, device type, browser — without identifying individual visitors.
Newsletter subscription: If you subscribe to our newsletter, we collect your email address and, optionally, your name. This data is stored securely and used solely to send the Mithila Mornings trade digest and occasional trade intelligence updates. No subscription data is shared with advertisers or data brokers.
Contact form messages: If you contact us via our contact form or email, we receive your email address, name if provided, and the content of your message. This is used solely to respond to your query.
Server logs: Our hosting provider automatically records standard server logs containing IP address, user agent, timestamp, and pages requested. These are retained for approximately 30 days for security and abuse-prevention purposes and are not used for profiling.
Browser preferences (local): Category and language preferences you set on the site are stored in your browser's localStorage. This data stays on your device and is never transmitted to our servers.
3. Purpose of Processing
- Delivering trade-intelligence content to visitors
- Sending the daily or weekly newsletter digest to subscribers who have consented
- Providing access to downloadable resources (such as the India Export Calendar PDF) to subscribers
- Responding to enquiries, correction requests, and editorial tips
- Understanding aggregate traffic patterns to improve content relevance
- Preventing abuse, spam, and security threats
- Complying with applicable legal obligations
4. Legal Basis
Consent (DPDP §6 / GDPR Art. 6(1)(a)): Newsletter subscriptions, calendar download email collection, and any direct marketing communications are processed on the basis of your explicit, freely given, informed consent. You may withdraw consent at any time without detriment.
Legitimate interest (DPDP §7 / GDPR Art. 6(1)(f)): Server log retention for security and abuse prevention, and aggregated analytics via Plausible, are processed on the basis of our legitimate interest in operating a secure, functional publication. We have balanced this against your privacy interests: Plausible's cookieless architecture means analytics data carries no meaningful privacy risk to individuals.
Legal obligation (DPDP §6(7) / GDPR Art. 6(1)(c)): Where law requires retention or disclosure of data, we comply with that obligation.
5. Your Rights as a Data Principal / Data Subject
Under the DPDP Act 2023 (§§11–15) and, where applicable, the GDPR (Chapter III), you have the following rights:
- Right to access (DPDP §11 / GDPR Art. 15): Request a summary of what personal data we hold about you and how it is used.
- Right to correction (DPDP §12 / GDPR Art. 16): Request correction of inaccurate or incomplete personal data.
- Right to erasure (DPDP §13 / GDPR Art. 17): Request deletion of personal data we hold, subject to legal retention obligations.
- Right to grievance redressal (DPDP §13): Lodge a grievance about how we handle your data. See Section 6.
- Right to nominate (DPDP §14): Nominate another individual to exercise your rights on your behalf in the event of your death or incapacity.
- Right to withdraw consent: Withdraw consent to newsletter communications at any time via the unsubscribe link in any email we send, or by emailing us directly. Withdrawal does not affect the lawfulness of processing before withdrawal.
- Right to data portability (GDPR Art. 20): For EU/UK residents, where processing is based on consent, you may request your data in a structured, machine-readable format.
- Right to object (GDPR Art. 21): EU/UK residents may object to processing based on legitimate interest.
To exercise any of these rights, email digest@mithilaexports.com with the subject line "DPDP/GDPR Request — [type of request]". We will acknowledge your request within 7 business days and respond substantively within 30 days (or 1 month for GDPR requests).
6. Grievance Officer
In accordance with DPDP Act 2023 §13(2), our Grievance Officer is:
Editorial Desk, Mithila Mornings
Email: digest@mithilaexports.com
Subject line for grievances: "Grievance — DPDP"
We will acknowledge your grievance within 7 days and aim to resolve it within 30 days. If your grievance is not resolved to your satisfaction, you have the right to appeal to the Data Protection Board of India once it is constituted under the DPDP Act 2023. EU/UK residents may also lodge complaints with their national supervisory authority (e.g., CNIL for France, ICO for the UK).
7. Third-Party Processors
We do not sell, rent, or trade your personal data to any third party. The following sub-processors handle data on our behalf for the purposes described:
- Plausible Analytics (EU-based): Cookieless, privacy-first analytics. No PII transmitted. See plausible.io/privacy.
- Microsoft Bing IndexNow & Webmaster API: We submit page URLs for search indexing. No visitor personal data is shared.
- Google Search Console: We use GSC to monitor search performance via aggregated query data. No visitor PII is shared by us.
- Hosting provider: Our website is hosted on shared hosting infrastructure. Server logs (IP, UA, timestamp) are processed by the hosting provider under standard data processing terms.
- FTP deployment: Automated file deployment via FTP to our hosting server. No personal data is transmitted during deployments.
We do not use ad-tech retargeting pixels, social media tracking pixels, or third-party advertising networks that set cookies or fingerprint visitors.
8. Cookies
Mithila Mornings does not set tracking cookies. Plausible Analytics is explicitly cookieless by design. We do not use third-party advertising cookies, social media pixel cookies, or behavioural retargeting technologies.
The only browser storage we use is localStorage for your locally-set content preferences (such as preferred news category). This data remains on your device, is never transmitted to us, and can be cleared via your browser settings at any time.
If your browser sets session cookies for basic website functionality (e.g., HTTPS session continuity from your hosting provider), these are essential operational cookies and are not used for tracking.
9. Children
Mithila Mornings is a B2B trade-intelligence publication intended for adult business professionals — exporters, importers, logistics operators, trade financiers, and policy readers. We do not knowingly collect personal data from individuals under 18 years of age. If we become aware that we have inadvertently collected data from a minor, we will delete it promptly. Parents or guardians who believe their child has submitted data to us should contact digest@mithilaexports.com.
10. International Transfers
Our hosting infrastructure may be located in India or the United States. Plausible Analytics processes aggregated analytics data on EU-based servers. Where personal data is transferred outside India to a jurisdiction without an adequacy decision (under DPDP Act notification or GDPR adequacy), we rely on Standard Contractual Clauses (SCCs) or equivalent safeguards as specified in our processor agreements.
11. Retention
- Newsletter subscriptions: Retained until you unsubscribe or request erasure.
- Contact form messages: Retained for up to 2 years from the date of receipt, unless a longer period is required for legal purposes.
- Server logs: Approximately 30 days, managed by the hosting provider.
- Plausible analytics: Aggregated only — no individual-level data is retained beyond the aggregation window.
12. Security
Mithilaexports.com operates over HTTPS/TLS site-wide. Administrative access to systems is restricted to authorised personnel only. We do not collect payment card numbers, national identity numbers, or government-issued IDs. Our site does not store passwords. While we implement reasonable technical and organisational security measures, no internet transmission is unconditionally secure, and we cannot guarantee absolute security.
13. Changes to This Policy
We may update this Privacy Policy to reflect changes in law, technology, or our practices. Material changes will be highlighted at the top of this page for at least 30 days after publication. The "Last updated" date at the top of this document reflects the date of the most recent revision. Continued use of the site after a material change constitutes acceptance of the revised policy.
14. Contact
For all privacy-related requests, corrections, or enquiries, contact us at:
Mithila Mornings Editorial Desk
Email: digest@mithilaexports.com
Postal address available on written request.
Effective date: 19 May 2026 · Last updated: 19 May 2026 · Mithila Mornings