Legal

Privacy Policy

Last Updated: June 25, 2026

Krishen Iyer ("we," "us," or "our") operates krisheniyer.com (the "Site"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Site or interact with our services. Please read this policy carefully. If you disagree with its terms, please discontinue use of the Site.

We reserve the right to make changes to this Privacy Policy at any time and for any reason. We will alert you about any changes by updating the "Last Updated" date. You are encouraged to periodically review this Privacy Policy to stay informed of updates.

1. Information We Collect

Personal Data You Provide:

• Name and email address (via contact forms)
• Phone number (if voluntarily provided)
• Message content and file attachments you submit
• Business information you share when inquiring about services

Automatically Collected Data:

• IP address and approximate geographic location
• Browser type, version, and operating system
• Pages visited, time spent, and referring URLs
• Device identifiers and cookie data
• Clickstream data and interaction logs

Data from Third Parties:

• Social media profile data if you interact with our social links
• Analytics data from Google Analytics (anonymized where possible)
• Affiliate referral data from partner platforms

2. How We Use Your Information

We use the information we collect to:

• Respond to your inquiries and provide requested services
• Connect you with appropriate affiliate partner companies
• Send administrative communications (service updates, policy changes)
• Send marketing communications only with your explicit consent
• Analyze Site usage to improve user experience
• Comply with legal obligations and enforce our terms
• Prevent fraudulent or unauthorized activity

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

3. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data under the following legal bases:

• Consent — for marketing communications and optional data collection
• Contractual necessity — to fulfill service requests you initiate
• Legitimate interests — for analytics, security, and fraud prevention
• Legal obligation — to comply with applicable laws

4. HIPAA Notice & Health Information

Krishen Iyer operates in the insurance consulting sector. To the extent that any services involve the handling of Protected Health Information (PHI) as defined under the Health Insurance Portability and Accountability Act of 1996 (HIPAA), we are committed to maintaining the privacy and security of such information in accordance with applicable federal and state law.

This website does not collect, store, or transmit Protected Health Information (PHI). If you are an insurance client or prospective client and need to share health-related information, please do so only through secure, designated channels provided by your insurance carrier or licensed agent — not through this website's contact form.

Any business associates who handle PHI on our behalf are required to enter into a Business Associate Agreement (BAA) and comply with all applicable HIPAA Privacy and Security Rules.

5. Cookies & Tracking Technologies

We use cookies, web beacons, and similar tracking technologies to enhance your experience on our Site. You may control cookie preferences through our cookie consent banner or your browser settings. Disabling cookies may affect certain Site functionality.

Types of cookies we use:

• Essential cookies — required for basic Site operation
• Analytics cookies — help us understand how visitors use the Site (requires consent)
• Marketing cookies — used to deliver relevant content (requires consent)

6. Data Sharing & Disclosure

We may share your information with:

• Service providers — hosting, email, analytics, and CRM vendors under data processing agreements
• Affiliate partners — only when you expressly request a connection or referral
• Legal authorities — when required by law, court order, or to protect our rights
• Business transfers — in connection with a merger, acquisition, or sale of assets

7. Data Retention

We retain personal data only as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce agreements. Contact form submissions are retained for up to 24 months unless you request earlier deletion.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your personal data ("right to be forgotten")
• Restriction — request we limit processing of your data
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interests
• Withdraw consent — at any time, without affecting prior lawful processing

California residents have additional rights under the California Consumer Privacy Act (CCPA / CPRA), including the right to know, delete, and opt out of the sale of personal information. We do not sell personal information.

To exercise any of these rights, contact us at [email protected].

9. Data Security

We implement administrative, technical, and physical security measures designed to protect your personal information from unauthorized access, disclosure, alteration, and destruction. These include SSL/TLS encryption for data in transit, access controls, and regular security reviews. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

10. Children's Privacy

Our Site is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately and we will take steps to delete it.

11. Third-Party Links

Our Site contains links to third-party websites including affiliate partners (MAIS Consulting, insagentjob.com, KIV Capital) and social media platforms. We are not responsible for the privacy practices of these sites and encourage you to review their respective privacy policies before providing any personal information.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact: