PRIVACY POLICY

Website: The420.in
Effective Date: 1 November 2026
Last Updated: 1 November 2026

1. Introduction

Welcome to The420.in (“The420.in,” “we,” “our,” or “us”).

The420.in is a digital news and information platform covering cybercrime, financial fraud, corruption, technology, public affairs, legal developments, and other matters of public interest.

We respect the privacy of our readers, visitors, newsletter subscribers, news contributors, and individuals who communicate with us. This Privacy Policy explains how we collect, use, store, share, and protect digital personal data when you visit our website or use its services.

This policy is intended to align with India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”), the Digital Personal Data Protection Rules, 2025 (“DPDP Rules”), and other applicable laws, as and when their respective provisions apply.

Important: Publishing this policy alone does not establish legal compliance. Our actual data collection, consent mechanisms, security practices, retention procedures, and grievance-handling processes must also meet applicable requirements.

2. Who Is Responsible for Your Personal Data?

For the purposes of applicable data protection law, the organisation or person determining why and how personal data is processed through The420.in acts as the Data Fiduciary, where the DPDP Act applies.

Data Fiduciary / Website Operator: [Insert the legal name of the website owner or operating entity]

Website: https://the420.in/

Privacy and Grievance Contact: [Insert your official privacy contact email]

Postal Address: [Insert the official business or correspondence address]

You may contact us using the details above regarding personal data, privacy concerns, or requests relating to your information.

3. Personal Data We Collect

We collect only the information reasonably necessary for the relevant purpose, subject to applicable law.

3.1 Information You Provide Directly

When you contact us, submit a news tip, provide feedback, or make an enquiry, we may collect:

Name.
Email address.
Telephone number, if requested.
Subject and category of your enquiry.
Message or other information you submit.
Documents or supporting information you voluntarily provide.

The exact information collected depends on the form or communication channel you use.

3.2 Newsletter Subscriptions

If newsletter subscriptions are available, we may collect your email address and any additional details requested during registration.

We use this information to deliver the newsletter, manage subscriptions, process unsubscribe requests, and maintain appropriate subscription records.

3.3 Technical and Usage Information

When you visit our website, our hosting provider and enabled website technologies may process certain technical information, such as:

IP address.
Browser type and version.
Device and operating system information.
Pages visited and referring sources.
Date and time of access.
Technical logs and website interaction information.

We use such information where necessary for website operation, security, troubleshooting, analytics, and performance measurement, subject to applicable legal requirements.

3.4 News Tips and Editorial Submissions

You may provide information relating to cybercrime, online fraud, corruption, legal matters, public affairs, or other potential news stories.

Depending on your submission, the information may include your contact details, descriptions of incidents, statements, photographs, documents, or other supporting material.

Please share only information relevant to your submission and ensure you are legally entitled to provide it.

Do not submit passwords, OTPs, banking PINs, payment credentials, or unrelated sensitive personal information.

Submitting a news tip does not automatically establish a confidential journalist-source relationship or guarantee anonymity. Please contact us before submitting highly sensitive material if you need to discuss a safer communication method.

4. Purposes for Processing Personal Data

Depending on the service you use, we may process personal data for the following purposes:

Purpose	Examples of relevant information
Responding to enquiries	Name, email address, message
Reviewing news tips	Submission details and relevant supporting information
Newsletter delivery	Email address and subscription preferences
Website operation	Technical logs and device information
Website security	Relevant logs, IP addresses, and suspicious activity information
Analytics and improvement	Website usage and interaction data
Spam prevention	Form submissions and technical signals
Legal compliance	Information required to meet applicable legal obligations
Privacy requests	Information necessary to verify and respond to a request

We will not intentionally collect more personal data than is reasonably necessary for the applicable purpose.

Where consent is the applicable legal basis, we will seek consent in the manner required by law. Where another lawful basis applies, processing will be limited to the purposes permitted by that basis.

5. Consent and Privacy Notices

Where required under the DPDP Act and DPDP Rules, we will provide a clear notice before or alongside a request for consent.

The notice will explain, as applicable:

The categories of personal data being collected.
The specific purposes for which the data will be processed.
How you can withdraw consent.
How you can exercise your applicable data protection rights.
How you can contact us and raise a grievance.

Consent will be requested through an appropriate affirmative action where required by law.

We will not treat silence or inactivity as consent where affirmative consent is required.

Where processing depends on consent, you may withdraw that consent through the available mechanism. Withdrawal will not affect the lawfulness of processing carried out before withdrawal.

Following withdrawal, we will cease the relevant processing and take appropriate steps regarding data handled by our processors, subject to any other lawful basis for continued processing and applicable legal obligations.

6. Cookies and Similar Technologies

The420.in may use cookies and similar technologies to operate and improve the website.

These technologies may be used for:

Essential functionality: Supporting website operations, security, and core features.

Analytics: Understanding traffic, readership patterns, and website performance.

Preferences: Remembering settings where applicable.

Advertising: Measuring advertising performance or supporting advertising services if such services are enabled.

The specific cookies used depend on the technologies and third-party services active on our website.

Where required by law, we will obtain consent before using non-essential cookies or similar technologies. Our consent mechanism, where implemented, will explain the relevant categories and allow visitors to make appropriate choices.

You can also manage cookies through your browser settings. Disabling certain cookies may affect website functionality.

7. Sharing and Disclosure of Personal Data

We do not sell personal data collected through our website as a standalone commercial database.

We may share relevant information in the following circumstances:

7.1 Service Providers

We may share information with hosting providers, website maintenance providers, analytics services, email delivery platforms, form-processing services, and security providers where necessary to operate our website.

Such providers should process personal data only as permitted by the applicable arrangement and law.

7.2 Legal Requirements

We may disclose information where required or authorised by applicable law, a valid court order, or a lawful request from a competent authority.

7.3 Website Security and Fraud Prevention

We may process or disclose relevant information where reasonably necessary to investigate security incidents, prevent spam, detect misuse, or protect the website and its users, subject to applicable law.

7.4 Editorial Activities

Information provided to our editorial team may be reviewed to assess credibility, verify facts, investigate a potential story, and communicate with relevant sources.

We will exercise appropriate editorial judgment and handle personal information responsibly. However, we cannot guarantee that every submission will remain confidential or will never be disclosed.

7.5 Business Transfers

If ownership or operation of the website changes through a merger, restructuring, or transfer of assets, personal data may be transferred where lawful and subject to applicable safeguards.

8. Data Retention and Deletion

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, subject to applicable law.

Retention periods may differ depending on the type of information:

Contact enquiries: For the period reasonably necessary to respond and maintain relevant records.
Newsletter information: Until you unsubscribe or the information is no longer needed, subject to applicable legal requirements.
Technical logs: For the period required for security, troubleshooting, and operational purposes.
Editorial submissions: For as long as reasonably necessary for editorial assessment, verification, publication-related records, or applicable legal obligations.
Privacy requests: For the period necessary to process the request and maintain appropriate records.

We will establish appropriate retention periods for each category of information.

When personal data is no longer required, we will take appropriate steps to erase it or otherwise dispose of it in accordance with applicable law, subject to lawful retention requirements.

9. Security Safeguards and Personal Data Breaches

We take reasonable steps to protect personal data against unauthorised access, disclosure, alteration, loss, destruction, and misuse.

Depending on our systems and operational requirements, these measures may include:

Access controls and restricted administrative permissions.
Website and server security measures.
Appropriate software updates and security monitoring.
Secure handling of submitted information.
Appropriate safeguards when working with service providers.
Backup and recovery procedures where applicable.

No method of electronic transmission or storage can be guaranteed to be completely secure.

If a personal data breach occurs, we will assess and respond to it in accordance with applicable legal requirements, including any applicable notification obligations and prescribed timelines.

Where required, affected individuals and the relevant authority will be notified in the prescribed manner.

10. Your Data Protection Rights

Subject to the DPDP Act, its commencement provisions, applicable rules, and any relevant legal exceptions, individuals may have rights including:

10.1 Right to Access Information

You may request information about personal data processed by us and other information available to you under applicable law.

10.2 Right to Correction and Updating

You may request correction of inaccurate or incomplete personal data and updating of information where applicable.

10.3 Right to Erasure

You may request erasure of personal data where the applicable legal conditions are satisfied.

We may retain information where continued retention or processing is required or permitted by law.

10.4 Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent through the available mechanism.

Withdrawal does not invalidate processing that lawfully took place before withdrawal.

10.5 Right to Grievance Redressal

You may raise a concern about how your personal data is handled through the contact details provided in this policy.

10.6 Right to Nominate

Where the relevant provisions apply, you may nominate another individual to exercise your rights in accordance with applicable law.

10.7 How to Submit a Request

Please contact us at:

Privacy Contact: [Insert official privacy email]

Use the subject line “Personal Data Request — The420.in” and explain the nature of your request.

We may request reasonable information to verify your identity and locate the relevant records. Please do not send passwords, OTPs, banking PINs, or unnecessary identity documents.

We will process valid requests within the applicable statutory period and communicate any limitations where permitted by law.

11. Grievance Redressal

If you have a complaint regarding the collection, use, storage, disclosure, or handling of your personal data, you may contact our designated privacy or grievance contact.

Grievance Contact: [Insert the name or designation of the responsible person]

Email: [Insert official privacy or grievance email]

Postal Address: [Insert official correspondence address]

Please include:

Your name and preferred contact method.
A description of your concern.
Relevant details that will help us identify the information or activity involved.
The resolution you are seeking, if applicable.

We will review the grievance and respond within the period required by applicable law or our published grievance procedure, as relevant.

Where a statutory complaint mechanism is available and applicable, you may also use the mechanism prescribed under Indian data protection law.

12. Children’s Personal Data

The420.in is a general-audience news website and is not specifically designed for children.

We do not knowingly seek personal data from children in circumstances that violate applicable law.

Where the DPDP Act’s provisions concerning children’s personal data apply, we will implement the legally required safeguards, including applicable requirements relating to verifiable parental or guardian consent and restrictions on prohibited processing.

If you believe that a child has provided personal data to us inappropriately, please contact us so that we can review the matter and take appropriate action.

13. Editorial Content and Public Information

The420.in publishes news, commentary, reports, and other content concerning matters of public interest.

Our editorial activities may involve receiving, verifying, analysing, and publishing information from sources, public records, official statements, and other material.

The publication of personal information in an article is distinct from the processing of information submitted through our contact forms. Requests relating to published articles may require a separate editorial and legal assessment.

Nothing in this policy is intended to remove rights available under applicable law or to create a blanket exemption for journalistic activities.

We will assess requests concerning published personal information in accordance with applicable legal requirements and relevant editorial considerations.

14. Third-Party Websites and Embedded Content

Our website may contain links to external websites, government portals, social media platforms, videos, or other embedded content.

When you visit or interact with these third-party services, they may collect information under their own privacy policies and terms.

We do not control the independent privacy practices of external websites. We encourage you to review their policies before providing them with personal information.

15. International Processing

Some service providers may store or process information on systems located outside India.

Where personal data is transferred outside India, we will follow applicable Indian law and any relevant restrictions or requirements notified by the competent authorities.

We will take appropriate steps to ensure that service providers handle information in accordance with applicable contractual and legal requirements.

16. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our services, data practices, technology, or legal requirements.

The revised policy will be published on this page with an updated “Last Updated” date.

Where required by law, we will provide additional notice or seek consent for material changes affecting the processing of personal data.

We encourage visitors to review this policy periodically.

17. Contact The420.in

For questions regarding this Privacy Policy, personal data requests, or privacy grievances, please contact us using the official details below.