Privacy Policy

Overview

This Privacy Policy governs all services offered by Reforge Me, accessible at www.reforgeme.in and any associated subdomains. It describes the types of personal information we collect, how we use it, how we protect it, and the rights available to you as a user of our platform.

Reforge Me is a sole proprietorship owned and operated by Sudhanshu Shekhar, based in Gurugram, Haryana, India. For the purposes of applicable data protection law, including India's Digital Personal Data Protection Act, 2023, Reforge Me is the entity responsible for your personal data (the Data Fiduciary / data controller).

Reforge Me provides end-to-end career guidance services including career evaluation, professional resume writing, LinkedIn profile optimization, cover letter writing, interview preparation, mock interview coaching, MBA profile evaluation, MBA application consulting, and MBA interview preparation. By using our website or engaging our services, you agree to the collection and use of information in accordance with this policy.

This Privacy Policy applies solely to information collected through our online activities. It does not apply to information collected offline, through third-party platforms, or through any channels not expressly covered by this document.

Consent

Browsing this website does not require your consent. We do not collect personal data simply because you visited a page, no cookies, no behavioural tracking, no advertising identifiers.

When you choose to submit our contact form, engage our services, or otherwise share information with us, that information will be handled in accordance with this Policy. By taking such an action, you consent to that processing. If you disagree with any part of this Policy, please do not submit our forms or engage our services.

Where we rely on your consent as the legal basis for processing your personal data, you have the right to withdraw that consent at any time by contacting us at hello@reforgeme.in. Withdrawal of consent will not affect the lawfulness of any processing carried out prior to withdrawal.

Information We Collect

We collect personal information only when it is necessary to provide our services to you. The reasons for collecting your information will be made clear at the point of collection. We collect information in the following ways:

Information you provide directly: When you contact us, book a session, fill out a form, or engage our services, we may collect:

• Full name, email address, and phone number
• Professional background, your current role, industry, years of experience, and career history
• Career goals, target roles, industries, and companies you are pursuing
• Your existing resume, CV, LinkedIn profile URL, or other professional documents you choose to share
• Contents of messages, emails, or attachments you send us
• Payment and billing information processed through our secure payment partners
• Feedback, testimonials, or survey responses you provide

Information collected at the time you submit a form: When you submit our contact form, we include the following technical context alongside the details you provide: your device type (mobile, tablet, or desktop), the page you submitted the form from, the referring URL, and the UTM campaign parameters (if any) of the link that brought you to our site. We do not collect this information passively as you browse; it is recorded only at the moment you submit a form.

Our hosting provider (Cloudflare) may process your IP address transiently as part of standard request routing, security filtering, and bot mitigation. We do not store IP addresses in our own systems.

How We Use Your Information

We use the information we collect solely for legitimate business purposes related to the delivery of our career services. Specifically, we use your information to:

• Deliver and manage the career evaluation, resume writing, LinkedIn optimization, cover letter writing, and interview coaching services you have engaged
• Personalize your experience, understanding your career background, goals, and constraints to provide tailored guidance
• Communicate with you regarding your active engagements, service updates, session scheduling, and deliverable reviews
• Send relevant career guidance content, service updates, and promotional communications where you have opted in
• Improve and develop our services, website, and coaching methodologies based on aggregate usage patterns
• Process payments securely through our authorized payment partners
• Comply with applicable laws and regulations, and prevent fraudulent or unauthorized activity
• Respond to legal requests and protect the rights, property, and safety of Reforge Me and our clients

We will never sell, rent, or trade your personal information to third parties for their own marketing purposes.

Data Sharing & Third Parties

Reforge Me does not sell, trade, or otherwise transfer your personal information to outside parties, except in the following limited circumstances:

• Service providers: We may share data with trusted third-party vendors who assist us in operating our website and delivering our services, such as payment processors, scheduling tools, and email delivery platforms. These parties are contractually obligated to keep your information confidential and may not use it for any other purpose.
• Legal compliance: We may disclose your information where required by law, court order, or governmental authority.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and the choices available to you.

International data transfers: Some of our service providers, including our website host (Cloudflare) and our form, spreadsheet, and email infrastructure (Google), may store or process data on servers located outside India. Where your personal data is transferred across borders, we take reasonable steps to ensure it remains protected in accordance with this Policy and applicable law.

Third-party websites linked from our site operate under their own privacy policies. We are not responsible for the privacy practices of those external sites and encourage you to review their policies independently.

Website Analytics

We do not use behavioural analytics products such as Google Analytics or Mixpanel on this website. We do not load any third-party tracking scripts and we do not build profiles of individual visitors.

We may use Cloudflare's privacy-friendly aggregate analytics, which is provided by our hosting platform. This produces anonymous, aggregate page-view counts and traffic source summaries. It does not use cookies, does not track you across sites, and does not collect any directly identifying information.

When you submit our contact form, the form payload includes the UTM parameters from the URL that brought you to our site (if any) and the referring page. This lets us understand which marketing channels lead to enquiries. This information is sent only at the moment you submit the form, we do not record your browsing prior to submission.

Cookies & Local Storage

Our website does not set any tracking cookies. Instead, we use a small amount of browser sessionStorage, tab-scoped storage that is cleared automatically when you close the tab, for two limited purposes connected to your enquiry:

• Campaign attribution: We remember the UTM parameters (utm_source, utm_medium, utm_campaign, utm_term, and utm_content) present in the URL you arrived on, so that if you navigate within the site before submitting the contact form, the correct campaign attribution is included in the form payload.
• Confirmation page personalization: When you submit the contact form, your first name and the plan you selected are briefly stored so that our confirmation ("thank you") page can greet you personally. This entry is created only at the moment you submit the form.

Both entries live only in your current browser tab, are never used for advertising or cross-site tracking, and are automatically discarded when you close the tab. No persistent cookies, no advertising identifiers, and no cross-session trackers are set by this site.

Data Retention

We retain your personal information only for as long as is necessary to fulfill the purposes for which it was collected, including to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements.

For active clients, we retain your career documents and session records for the duration of your engagement plus a period of 24 months thereafter, to support any follow-up service or revision requests. After this period, data is securely deleted or anonymized unless you request earlier deletion or applicable law requires a different retention period.

GDPR Data Protection Rights

If you are located in the European Economic Area (EEA) or the United Kingdom, you are entitled to the following rights under the General Data Protection Regulation (GDPR):

To exercise any of these rights, please contact us at hello@reforgeme.in. We will respond to all verified requests within 30 days. If you believe your rights have not been upheld, you have the right to lodge a complaint with your local data protection authority.

CCPA Privacy Rights

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you additional rights regarding your personal information:

• Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you, the sources from which it was collected, and the purposes for which it was used.
• Right to Delete: You may request deletion of personal information we have collected, subject to certain legal exceptions.
• Right to Opt-Out: You have the right to opt out of the sale of your personal information. Reforge Me does not sell personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

To submit a CCPA request, contact us at hello@reforgeme.in. We will respond within 30 days of receiving your verified request.

Your Rights Under India's DPDP Act

Reforge Me operates from India and processes your personal data in accordance with the Digital Personal Data Protection Act, 2023 (the "DPDP Act"). For the purposes of the DPDP Act, Reforge Me acts as the Data Fiduciary that determines the purpose and means of processing your personal data, and you are the Data Principal.

If you are located in India, you have the following rights in respect of your personal data:

• Right to access information: Obtain a summary of the personal data we process about you and the processing activities we have undertaken.
• Right to correction and erasure: Request the correction, completion, updating, or erasure of your personal data, subject to applicable legal retention requirements.
• Right to grievance redressal: Raise any grievance regarding the handling of your personal data with our Grievance Officer (see below).
• Right to nominate: Nominate another individual to exercise your rights on your behalf in the event of your death or incapacity.
• Right to withdraw consent: Where processing is based on your consent, withdraw that consent at any time, as easily as it was given.

To exercise any of these rights, please contact our Grievance Officer at hello@reforgeme.in. We will respond within the timelines prescribed under applicable law.

Children's Information

Reforge Me's services are designed for working professionals and are not directed at children under the age of 18. We do not knowingly collect personal information from anyone under the age of 18.

If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at hello@reforgeme.in. Upon verification, we will take prompt steps to remove such information from our records.

Data Security

We take the security of your personal information seriously. We implement industry-standard technical and organizational measures to protect your data against unauthorized access, disclosure, alteration, and destruction. These measures include encrypted data transmission (SSL/TLS), secure storage, and access controls limiting who within our team can view your information.

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. In the event of a data breach that affects your rights, we will notify you in accordance with applicable law.

Policy Changes

Reforge Me reserves the right to update or modify this Privacy Policy at any time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email or through a prominent notice on our website.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website and services following the posting of any changes constitutes your acceptance of the updated policy.

Grievance Officer

In accordance with the Digital Personal Data Protection Act, 2023 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, the following individual serves as the Grievance Officer for any questions, concerns, or complaints regarding the handling of your personal data:

We aim to acknowledge every grievance promptly and to resolve it within the timelines prescribed under applicable law.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please do not hesitate to reach out to us:

• Proprietor: Sudhanshu Shekhar (sole proprietor)
• Email: hello@reforgeme.in
• Website: www.reforgeme.in
• Address: Gurugram, Haryana, India

We are committed to resolving any privacy concerns promptly and transparently. All requests will receive a response within 30 days.