India's DPDP Rules are notified, time to gap-assess your India programmeSee how we help →EU AI Act obligations are phasing in: the privacy groundwork comes firstAI privacy advisory →Transfer documentation is a top enforcement target: SCCs, IDTA, TIAsTransfer services →India's DPDP Rules are notified, time to gap-assess your India programmeSee how we help →EU AI Act obligations are phasing in: the privacy groundwork comes firstAI privacy advisory →Transfer documentation is a top enforcement target: SCCs, IDTA, TIAsTransfer services →
Abhishek Bansiwal

Legal

Consent Notice

Last updated: July 2026

1. The short version

Consent is only one of the legal bases the GDPR provides, and it is the right one only in specific situations. This website asks for your consent in exactly one place: subscribing to the newsletter. Everything else the site does either relies on a different legal basis or involves no personal data at all. This notice explains each case, because a privacy practice should be able to show its own consent thinking, not just talk about yours.

2. Where we ask for consent

The newsletter. Subscribing to Where Is My Privacy? is entirely optional and works on consent (Article 6(1)(a) GDPR). You give it by entering your email address and confirming through Substack, which delivers the newsletter on our behalf. You can withdraw it at any moment by clicking unsubscribe in any issue or managing your Substack account; withdrawal stops future emails and does not affect anything else you do with us or with this site.

3. Where we deliberately do not ask for consent

A consent banner is not a legal requirement in itself; it is required only when a site does things that need consent. This site is built so that it does not:

  • Analytics. We use a cookie-free, aggregate-only analytics tool. No identifier is stored on your device and no individual is tracked, so no consent is needed, which is why you see no cookie-consent pop-up here.
  • Contact form and call booking. When you send an enquiry or book a call, we process your details because you asked us to respond, which is a pre-contract step under Article 6(1)(b) GDPR, not consent. We do not add you to any mailing list and there is no follow-up sequence.
  • The readiness check. Your answers never leave your browser. No personal data reaches us, so no legal basis, and no consent, is involved at all.
  • Cookies. The site sets no cookies of its own. The one embedded third-party widget (the Substack signup on the insights page) is described in the Cookie Policy.

4. How to withdraw consent

For the newsletter: unsubscribe via the link in any issue, or through your Substack account settings. Withdrawal takes effect immediately for future sends. If anything does not work as expected, email abhishek.adv@yahoo.com and we will resolve it.

5. Consent in our client work

Where we act for clients, consent flows aimed at their users are designed under the client's own notices and agreements; this notice covers only this website. If you interacted with a consent banner or preference centre we helped a client build, the client's privacy notice is the document that governs it.

6. Related documents

The full picture of what this site processes and why is in the Privacy Notice. Storage on your device is inventoried in the Cookie Policy. Use of the website itself is governed by the Terms of Use.