This policy explains what personal data Divine Sukoon collects, why, who it is shared with, how long it is kept, and the rights you have over it. It is published under the Digital Personal Data Protection Act, 2023, Rule 4 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and Rule 3(1) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021. It covers everyone who uses the site: the clients who book consultations and buy products, and the astrologers who consult on it (section 12).
1. Who we are
divinesukoon.co.in is owned and operated by Divine Sukoon (“Divine Sukoon”, “we”, “us”). We are the Data Fiduciary for the personal data described in this policy, and you are the Data Principal. Our registered entity details and address are available on request from the Grievance Officer named at the end of this policy.
2. The personal data we collect
- Account — your name, email address, mobile number, password (stored only as a salted hash) and how you signed in. It comes from you, or from Google if you use “Sign in with Google”.
- Orders and delivery — shipping and billing address, order history and invoices.
- Payments — the transaction reference, amount and status returned by our payment gateway, Razorpay. We never see or store your card number, CVV or UPI PIN.
- Macliys Coin wallet — your coin balance and every coin movement (top-ups, spends, refunds, bonuses and expiry), with any coupon and referral rewards.
- Consultations — your date, time and place of birth, gender, the questions you ask, and the astrologer’s notes, charts and reports.
- Chat — the messages exchanged with your astrologer in a consultation, and any photos or documents either of you attaches.
- Calls — who called whom, when, for how long, and whether it was audio or video. Calls are not recorded: the audio and video travel directly between the two devices, or through our own relay server when a direct path is not possible, and are never stored.
- Reviews — the ratings and reviews you publish, with any photos.
- Referrals — the invite code you followed and the friend who invited you.
- Notifications — if you allow browser notifications, an address issued by your browser’s push service so that we can alert you to calls and chat requests.
- Technical — IP address, device and browser type, pages visited, and security logs, from cookies and server logs.
Birth details, health-related questions and financial information are treated as sensitive personal data under the 2011 Rules and are handled with corresponding care.
3. Why we use it
- To create and secure your account and verify your email and mobile number — account and technical data; with your consent, and to provide the service you asked for.
- To take, deliver and invoice orders — account, order and payment data; to provide the service and to meet tax and accounting law.
- To schedule and deliver consultations, chats, calls and reports — account, consultation, chat and call data; to provide the service you asked for.
- To run the coin wallet (top-ups, spending, refunds into the wallet, bonuses and expiry) — wallet and payment data; to provide the service and to meet accounting law.
- To send you messages about your orders, bookings, wallet and account — account data; to provide the service.
- To alert you to incoming calls and chat requests when the site is not open — notification data; only with your consent, which you can withdraw in your browser or in Settings.
- To answer your questions and handle complaints — account data and whatever the request concerns; to provide the service and to honour your rights in section 8.
- To prevent fraud, abuse and security incidents — technical, wallet and payment data; a legitimate use under section 7 of the Digital Personal Data Protection Act, 2023.
- To understand how the site is used, in aggregate — technical data, through Google Analytics; only with your consent (section 9).
- To meet tax, accounting and other legal obligations — order, payment and wallet data; required by law.
We collect only what each purpose needs. We do not sell your personal data, and we do not use it for targeted advertising.
4. Consent, and withdrawing it
Where we rely on your consent, it is asked for at the point of collection, for the purposes stated, and is free, specific, informed, unconditional and unambiguous. You may withdraw it at any time — through Cookie settings in the footer for analytics, in your browser or in Settings for notifications, or by writing to the Grievance Officer (section 11) for anything else. Withdrawal applies from then on; it does not affect what was done before, and some services cannot continue without the data they need — a consultation cannot be delivered without the birth details it is based on, for example.
5. Who we share it with
Only with those who need it to run the service, under contract and limited to what each one requires:
- The astrologer you consult — your name, birth details, questions, chat and any attachments for that consultation. Your email address and account mobile number stay masked; a mobile number you give for a consultation is shown to that astrologer only while the sitting is open. In India.
- Razorpay — the order amount and the details you enter on their payment page, to process the payment. In India.
- Courier and shipping partners — your name, delivery address and mobile number, to deliver your order. In India.
- Google LLC — if you use “Sign in with Google”, your Google account email and name; if you allow analytics, usage data from Google Analytics. Outside India (United States).
- Your browser’s push service (Google, Apple or Mozilla) — an encrypted notification it cannot read, to deliver the call and chat alerts you allowed. Outside India.
- Jitsi (8x8 Inc.) — only for a few older video bookings made before our own calling launched. Outside India.
- Our hosting provider, Hostinger — all site data, which is stored on our server in Hostinger’s Mumbai data centre. In India.
- Government and law-enforcement agencies — what a lawful order requires. In India.
Where data is processed outside India, it is transferred in accordance with section 16 of the Digital Personal Data Protection Act, 2023, and never to a country the Government of India has restricted. Email is sent from our own mail server; we do not use a third-party email provider.
6. How long we keep it
- Account — while your account is open. If you ask us to close it, we delete or anonymise your account data within 90 days, except what the items below require us to keep.
- Orders, invoices, payments and the coin wallet’s ledger — 8 years from the end of the financial year they belong to, to meet tax and accounting law.
- Consultation details, reports, chat messages and attachments — while your account is open, so that you can come back to them. They are deleted with your account, or earlier on request where the law allows.
- Call records (times and durations, never content) — as for consultations.
- Notification addresses — until you turn notifications off or your browser invalidates them.
- Security and server logs — up to 6 months.
- Analytics, only if you allowed it — no more than 14 months, as set in Google Analytics.
Coins in your wallet expire as shown on your wallet page and in our Refund Policy; the record of past coin movements is kept as stated above.
7. How we protect it
Data is encrypted in transit (HTTPS everywhere, enforced by HSTS), passwords are stored only as salted hashes, the coin ledger cannot be edited after the fact, and access to personal data is limited to staff who need it, with actions on wallets and refunds recorded in an audit log. We follow reasonable security practices and procedures as required by section 43A of the Information Technology Act, 2000. In the event of a personal data breach, we will notify the Data Protection Board of India and every affected Data Principal, as the Digital Personal Data Protection Act, 2023 requires.
8. Your rights
Under the Digital Personal Data Protection Act, 2023 you have the right to:
- Information — a summary of the personal data we hold about you, how it is used, and who it has been shared with;
- Correction and erasure — to correct inaccurate or incomplete data, update it, and have it erased once it is no longer needed for its purpose (subject to the legal retention in section 6);
- Grievance redressal — a readily available way to complain to us (section 11);
- Nomination — to nominate someone to exercise these rights if you die or become unable to; and
- Withdraw consent — at any time (section 4).
To exercise any of these rights, write to the Grievance Officer from the email address registered on your account. We respond within one month of receipt.
9. Cookies
We use a few cookies that the site needs to work and, only if you allow it, Google Analytics cookies. On your first visit a banner asks for your choice; analytics stays off unless you choose Allow analytics. You can change your choice at any time from Cookie settings in the footer.
- dsukoon_sess (Divine Sukoon) — keeps you signed in and protects forms against cross-site request forgery. Lasts until you sign out, and at most 30 days. Strictly necessary.
- sk_cart_token (Divine Sukoon) — remembers the cart of a visitor who has not signed in. 12 months. Strictly necessary.
- sk_oauth_state, sk_oauth_next, sk_oauth_cart (Divine Sukoon) — complete “Sign in with Google” safely and return you to the page you came from. A few minutes. Strictly necessary.
- sk_ref (Divine Sukoon) — credits the friend who invited you, if you arrived through an invite link. 30 days. Needed for the invite you followed.
- sk_consent (Divine Sukoon) — remembers your cookie choice. 12 months. Records the choice itself.
- _ga, _ga_<id> (Google Analytics, Google LLC) — count visits and how pages are used, in aggregate. Up to 2 years. Set only after you choose “Allow analytics”, and removed if you later choose “Only necessary”.
Also stored in your browser, not as cookies and never sent to us: your cart token, how you last signed in, whether call sounds are muted, and your dashboard colour theme.
10. Children
Our services are intended for people aged 18 and over. We do not knowingly process the personal data of a child under 18 without the verifiable consent of a parent or lawful guardian, and we do not carry out tracking, behavioural monitoring or targeted advertising directed at children. If you believe a child has given us personal data, write to us and we will erase it.
11. Grievance Officer and escalation
In accordance with Rule 5(9) of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, Rule 3(2) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and section 13 of the Digital Personal Data Protection Act, 2023, any complaint about the handling of your personal data may be addressed to:
Grievance Officer, Divine Sukoon
Email: contact@divinesukoon.co.in
Phone: +91 90981 51610
We acknowledge every complaint within 24 hours and dispose of it within 15 days of receipt; requests about your personal data are resolved within one month. If you are not satisfied with our response, you may escalate the matter to the Data Protection Board of India under the Digital Personal Data Protection Act, 2023.
12. If you consult on Divine Sukoon as an astrologer
This section applies to the astrologers, tarot readers, healers and other experts who offer consultations on divinesukoon.co.in. Everything above applies to you as well; this section adds what is particular to working with us.
- What we hold about you — your name, email address and mobile number; your public profile (display name, photograph and gallery, headline, biography, years of experience, languages, disciplines and rates); your availability and whether you are online; the bank account you give us for payouts (account holder, account number, IFSC, bank, branch and account type); your earnings, our commission, your payout requests and the transfer reference of each payout; the consultations you take, with their chat messages, attachments, call records (never their content), notes and reports; the payment requests and recommendations you send; and the ratings and reviews clients leave about you.
- Why we use it — to list you so that clients can find and book you; to connect you with the clients who book you and to bill their sessions; to work out and pay your earnings; to alert you to calls and chat requests; and to keep the platform safe and settle disputes. We use it to provide the service you signed up for and, for tax and accounting records, because the law requires it.
- What is public — your public profile, rates, rating and reviews, and whether you are online, are shown to everyone who visits the site. Your email address, mobile number and bank details are never shown to clients; clients reach you only through the consultation room, its chat and in-app calls.
- Who else sees it — Divine Sukoon staff who look after listings, support and payouts; our bank, to make each payout to your account; and government and tax authorities where the law requires. Beyond that, the providers in section 5 handle your data as they handle everyone’s.
- How long we keep it — your listing and profile while you consult with us; earnings, commission and payout records, and the bank details a payout was made to, for 8 years from the end of the financial year they belong to, as for the other financial records in section 6; consultation records as section 6 sets out.
- Your clients’ data — you receive your clients’ personal data, including their birth details and whatever they share in a consultation, only so that you can deliver that consultation. Use it for nothing else, keep it confidential, do not copy it out of the platform or contact a client outside it, and do not keep copies once the consultation is complete.
Your rights in section 8 apply to you in full. To correct your listing or your bank details, contact the Sukoon team or the Grievance Officer (section 11).
13. Changes to this policy
We may update this policy from time to time. The date shown at the top of this page always reflects the current version, and material changes are notified to registered users by email before they take effect.