1. Who We Are
Effective: 10 May 2026
UDHY is operated by UDHY Core (founded by Dr. Dilip Kumar Limbu), Singapore — the data controller for personal data collected through www.udhy.com.
2. What We Collect
We may collect the following personal data:
- Email address and name — when you subscribe to our newsletter or contact us via Hostinger Reach
- Purchase data — processed securely by Gumroad (we do not store payment card details)
- Usage data — pages visited, device type, browser, and IP address via Google Analytics
- Affiliate click data — aggregate only, via Amazon Associates (no personal data shared)
- Ad performance data — aggregate only, via Google AdSense
3. How We Use It
We use your data to:
- Deliver free courses, resources, and content you request
- Send newsletters and educational emails you have opted into
- Process digital product orders via Gumroad
- Analyse and improve the Website using Google Analytics
- Serve relevant advertisements via Google AdSense
- Comply with our obligations under Singapore law
4. Who We Share It With
We do not sell your personal data. We share only with trusted service providers:
- Hostinger Reach — email delivery and list management (GDPR compliant)
- Gumroad — payment processing for digital products (acts as merchant of record)
- Google LLC — Google Analytics and AdSense advertising
- Amazon.com Inc. — affiliate programme tracking (aggregate data only)
- Singapore authorities — if required by law or court order
5. Cookies
UDHY uses the following types of cookies:
- Essential — required for WordPress site functionality
- Analytics — Google Analytics (_ga, _gid) to understand visitor behaviour
- Advertising — Google AdSense to serve relevant ads
- Affiliate — Amazon Associates tracking on product link clicks
- Email performance — Hostinger Reach tracking pixel in newsletters
You can manage or disable cookies in your browser settings. Opt out of Google Analytics tracking at: tools.google.com/dlpage/gaoptout
6. Your Rights
Under the Singapore PDPA and GDPR (for EU/EEA visitors), you have the right to:
- Access the personal data we hold about you
- Correct any inaccurate or incomplete data
- Withdraw consent to marketing emails at any time via the unsubscribe link
- Request deletion of your personal data (GDPR users)
- Request data portability in a machine-readable format (GDPR users)
7. Data Retention
- Email subscriber data — retained until you unsubscribe or request deletion
- Purchase records — retained for 7 years per Singapore accounting law
- Analytics data — up to 26 months per Google Analytics default settings
8. International Transfers
Your data may be processed outside Singapore, including in the United States (Google, Amazon, Gumroad) and the European Union (Hostinger). All providers maintain appropriate safeguards including GDPR Standard Contractual Clauses.
9. Children
UDHY is not directed at children under 13. We do not knowingly collect personal data from children.
10. Security
We protect your data using SSL/TLS encryption, access controls, and reputable service providers. Hostinger Reach automatically configures SPF, DKIM, and DMARC email authentication. No online system is 100% secure.
11. Changes to This Policy
We may update this Privacy Policy at any time. The effective date at the top reflects the latest revision. We will notify email subscribers of material changes where possible.
12. Contact Us
If you have any questions or concerns regarding this Privacy Policy, please reach out to us using the contact information provided.
