Privacy policy

This is a personal site where I write about digital and AI work inside hospitals. It collects very little. This page sets out exactly what it collects, why, who else touches it, and how to make me delete it.

Last updated: 18 September 2026

Who runs this site

gauravphogat.com is written and run by me, Gaurav Phogat. It is a personal site — my own writing, published in my own name. Nothing here is sold, and there is no account to create. If anything on this page is unclear, or you want something changed or removed, email me at hello@gauravphogat.com.

What this site collects

Three things, and only three.

Analytics about pages. The site runs Google Analytics 4, loaded through Google’s Site Kit plugin. It records which pages get read, roughly where in the world a reader is, what kind of device and browser they used, and which site or search sent them. I use it to see which pieces are worth writing more of.
Your email address, if you hand it over. There is one form on the site: the box offering the Hospital Digital Growth Audit. It asks for an email address and nothing else. It posts to this site, and the address is stored here.
Whatever you put in an email to me. If you write to me, I have your address and whatever you chose to tell me.

That is the lot. The site does not publish comments and carries no comment form. There is no contact form either — the contact page gives you my email address instead. I do not ask for your name, your employer, your phone number, or anything about your health.

Cookies and similar technologies

A plain visit to this site does not set a cookie from me. What you may pick up comes from two places:

Google Analytics sets its own cookies in your browser — the _ga family — so it can tell a returning reader from a new one. Block them, or run a tracker blocker, and nothing on this site breaks.
GTranslate powers the language switcher and loads from GTranslate’s CDN. If you actually pick a language it stores that choice so pages stay translated. If you never touch it, it never does.

Pages are served through caching — LiteSpeed on the server, with Hostinger’s CDN in front of it. Caching does not identify you; it keeps a copy of the page so it loads faster.

Who else touches any of this

Hostinger hosts the site and runs the CDN in front of it. Like any web host, its servers log requests — IP address, time, page, browser — as part of serving and protecting the site. Those logs belong to the host and are kept under its own retention policy. I do not mine them.
Google runs the analytics. The measurement data lives in Google Analytics under Google’s terms.
Google also runs the mailbox behind my contact address, which is a Gmail address. Any email you send me therefore sits in Google’s mail service, the same as most email anyone sends.
GTranslate serves the translation widget, so its CDN sees your browser asking for that file.

That is the whole list. No advertising networks, no data brokers, no remarketing pixels, no third-party comment system.

What I do not do

I do not sell your data, and I do not rent or trade it.
I do not pass your email address to anyone else, and I do not add people to the list who did not ask.
I do not try to work out who an individual reader is from analytics. I could not, and I am not interested.
I do not run ads on this site.

How long things are kept

Your email address stays on the list until you unsubscribe or ask me to remove it. Then it goes.
Emails you send me stay in my mailbox as long as the conversation is worth keeping.
Analytics data sits in Google Analytics under the retention setting on that property. I do not copy it into a separate database.
Server and CDN logs are kept and rotated by the host under its policy, not mine.

Your rights, and how to use them

Wherever you are reading from, you can ask me what I hold about you, ask me to correct it, ask me to delete it, or tell me to stop using it. If you are on the list you can also just unsubscribe. There is no form and no ticket queue — email hello@gauravphogat.com, say what you want, and I will do it and tell you when it is done.

I am based in India, so India’s Digital Personal Data Protection Act, 2023 is the law that applies to me, and the rights above are broadly the ones it gives you: access, correction, erasure, grievance redressal, and withdrawal of consent you previously gave. If you are reading from the EU, the UK, California or anywhere else with its own privacy law, you may have rights under that law as well. Ask for whichever ones you want — I am not going to argue about jurisdiction over a mailing list.

If this page changes

If what the site does changes — a new form, a different analytics setup, an email tool — I will rewrite this page and move the date at the top. There is no archive of old versions. The one you are reading is the one that applies.