Legal
Privacy Policy
Last Updated: August 24, 2026
This policy explains what personal information Imperialpedia collects, why, who we share it with, and the rights and choices you have over it. It describes our actual practices as of the date above — not a generic template.
1. Who we are & how to reach us
Imperialpedia is operated by Baalvion Industries Private Limited, part of the Baalvion Group ("we", "us", "our"). This policy applies to imperialpedia.com and related services.
- Privacy / Data Protection contact: privacy@baalvion.com — this inbox handles privacy questions and rights requests specifically. For anything else, use Founder@baalvion.com or +91 89512 84770.
- Operating office: Yeshwant Avenue Building, NX Road, Y K Nagar, Virar West, Virar, Maharashtra 401303, India
- Registered office: Baalvion Industries Private Limited, Upper Mania, Po- Pakjhola, Semiliguda, Koraput, Odisha 764036, India (CIN: U43121OD2025PTC048479)
2. Information we collect
We collect the following categories of information:
- Name — if you submit the contact form or create an account.
- Email address — if you submit the contact form, subscribe to our newsletter, or create an account.
- IP address — logged automatically by our servers and by Google Analytics, when configured, for every visit.
- Device and browser information — browser type/version, operating system, and screen size, collected automatically via Google Analytics, when configured.
- Pages viewed — which pages you visit, how you arrived (referring URL), and when, via Google Analytics, when configured.
- Newsletter information — the email address you subscribe with, and your subscribed/unsubscribed status.
- Contact-form information — your name, email address, subject, and message content when you submit the form.
- Account information — if you create an account, your email address and, if you use the watchlist or portfolio-tracking features, the symbols, quantities, and prices you choose to save. Account creation is optional; most of the site does not require one.
We do not collect payment card numbers, government ID numbers, or biometric data.
3. How we use your information
We use the information above to:
- Operate, maintain, and improve the site and its content;
- Respond to inquiries submitted through the contact form;
- Send the newsletter to subscribers who opted in, and account-related emails to registered users;
- Understand aggregate traffic and reading patterns so we can improve our content, where you have consented to analytics cookies;
- Display advertising, including personalized advertising where you have consented;
- Detect, prevent, and investigate fraud, abuse, and security incidents;
- Comply with applicable legal obligations.
Where the GDPR applies, our legal bases are: your consent (non-essential cookies, newsletter, personalized advertising), our legitimate interests (running and securing the site, aggregate analytics), and legal obligation (responding to lawful requests).
5. Third-party services we use
We rely on the following providers. This list reflects what is actually integrated today:
- Google Analytics (GA4) — traffic and content-performance analytics, when configured for the current environment. Loads only after you accept analytics cookies.
- Google Tag Manager — a tag-management container we use to load the scripts above, when configured. It does not itself collect additional data beyond what the tags it loads collect.
- Google AdSense — serves the advertising shown on this site. See Advertising below.
- Vercel — hosts and serves the website (frontend hosting/CDN).
- Amazon Web Services (AWS) — hosts our own backend services (including the servers behind api.baalvion.com) and sends transactional/contact-form and newsletter emails via Amazon SES, under our own AWS account. This is our infrastructure, not a third-party marketing platform.
We do not use a third-party newsletter platform (e.g. Mailchimp), a third-party form service (e.g. Typeform), or a third-party cookie-consent platform — the newsletter list, contact-form handling, and cookie-consent banner are all built and operated by us, on our own infrastructure.
6. Analytics
When Google Analytics is configured for the site, it helps us understand which articles are read, how visitors navigate, and where to improve. It sets its own cookies (see the table above) and processes your IP address and on-site behavior on Google's servers. We use this in aggregate to improve content — we do not use it to identify you individually. Analytics only runs after you accept cookies, is disabled entirely if you decline, and always respects a Global Privacy Control signal (see below).
7. Advertising
This site displays advertising served by Google AdSense. When you have consented to advertising cookies, Google may collect your IP address, cookie identifiers, and browsing activity on this and other sites to show personalized ads and measure their performance. If you decline, or send a Global Privacy Control signal, ads may still show but are non-personalized — based on the page's content and your approximate location, not your browsing history.
You can opt out of personalized advertising at any time:
- Using the Do Not Sell or Share control on this page, or the cookie banner's "Decline" option;
- Through Google Ads Settings;
- Through the Digital Advertising Alliance's opt-out at aboutads.info;
- Automatically, if your browser or an extension sends a Global Privacy Control signal.
We do not control what Google does with data once it processes it as an independent controller; see How Google uses information from sites that use its services.
9. Contact form
Submitting the contact form sends your name, email address, subject, and message to our own internal notification system, which relays it as an email to our team so we can respond. It is not shared with any advertiser, analytics provider, or other third party, and is not added to the newsletter list unless you separately subscribe. We retain contact-form submissions as described in Data Retention below.
10. Embedded content
We do not currently embed third-party video players, social media posts, or other iframe-based embeds in our articles — our content sanitizer strips iframe tags from article bodies, so this isn't possible today even by mistake. If that changes, this section will be updated to name the specific providers and what they collect before any such embed ships.
12. Your privacy choices: Do Not Sell/Share & Global Privacy Control
You can opt out of the sale/sharing of your personal information for advertising purposes at any time using the control below. This has the same effect as declining the cookie banner: it revokes ad and analytics consent (Google Consent Mode v2) on this device/browser.
Global Privacy Control (GPC): if your browser or a browser extension sends a Global Privacy Control signal, we detect it automatically on your first visit and treat it as a valid opt-out request under the CCPA/CPRA — no separate action needed. Because the opt-out is stored per browser/device, you will need to opt out again on each device or browser you use, or if you clear your browser's local storage.
13. Your rights under the GDPR
If you are in the European Economic Area or the United Kingdom, you have the right to: access the personal data we hold about you; correct inaccurate data; request deletion; restrict or object to processing; receive your data in a portable format; and withdraw consent at any time without affecting the lawfulness of processing before the withdrawal. You also have the right to lodge a complaint with your local data protection authority. See How to Submit a Request below.
14. Your rights under the CCPA/CPRA
If you are a California resident, you have the right to:
- Know what personal information we collect, use, and disclose, and for what purpose;
- Request deletion of your personal information, subject to legal exceptions;
- Correct inaccurate personal information;
- Opt out of the sale or sharing of your personal information (see Your Privacy Choices);
- Not be discriminated against for exercising any of these rights.
How to submit a request: email privacy@baalvion.com with the subject "CCPA Request" — see how to submit a privacy rights request for what to include. Verification: because most of our data is tied only to an email address, we verify requests by confirming you control that email address (we will reply to the address on file, or ask you to confirm it) before acting on access or deletion requests. Response time: we aim to respond within 45 calendar days of a verifiable request, extendable once by another 45 days for complex requests, with notice to you of the extension.
15. Your rights under India's DPDP Act
Baalvion Industries Private Limited is incorporated in India, and processes personal data as a Data Fiduciary under India's Digital Personal Data Protection Act, 2023 (DPDP Act). If it applies to your data, you (as a "Data Principal") have the right to: obtain a summary of the personal data we process about you and the processing activities; request correction, completion, updating, or erasure of your personal data; withdraw consent at any time (without affecting processing already carried out); nominate another individual to exercise your rights on your behalf in the event of death or incapacity; and file a grievance with us before escalating to the Data Protection Board of India.
Grievance Officer: reachable at privacy@baalvion.com for any grievance or rights request under the DPDP Act.
16. How to submit a privacy rights request
To request access, correction, deletion, or an opt-out, email privacy@baalvion.com and include:
- The email address associated with your data (the one you used to contact us, subscribe, or register);
- Which right you are exercising (access, correction, deletion, portability, or opt-out);
- Any detail that helps us locate your data faster (e.g. approximate date you contacted us or subscribed).
We reply from the same address, which also confirms you control it. Response timelines: GDPR — within 30 days, extendable by up to 60 further days for complex requests; CCPA/CPRA — within 45 days, extendable once by 45 days; DPDP Act — without undue delay, in line with the timelines the Act and its rules prescribe.
17. Data retention
We keep different categories of data for different periods, based on why we collected them:
- Contact-form submissions: up to 24 months from submission, to maintain a support history, then deleted.
- Newsletter subscriber emails: until you unsubscribe or ask us to delete them.
- Account data (if you register): for as long as your account is active; deleted within 90 days of a verified deletion request.
- Server and analytics logs: Google Analytics retains user-and-event-level data per its own configured setting (Google's default is 14 months) before automatic deletion; our own server logs are retained for a shorter operational window for security and debugging.
We may retain information longer where required to comply with a legal obligation or resolve a dispute.
18. Data security
We use reasonable technical and organizational measures — including encrypted connections (HTTPS/TLS) and access controls on our backend systems — to protect the data we hold. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
19. International data transfers
Our backend infrastructure runs on AWS in India (Mumbai region). Our frontend is hosted on Vercel, which serves traffic through a global edge network that may process data outside India. Google Analytics and Google AdSense, when active, process data on Google's global infrastructure, primarily in the United States. Where we or our providers transfer personal data out of the EEA/UK, we and they rely on recognized safeguards such as the EU-U.S. Data Privacy Framework (Google is a certified participant) or Standard Contractual Clauses.
20. Automated decision-making & profiling
We do not use automated decision-making or profiling that produces legal or similarly significant effects on you (for example, no automated eligibility, pricing, or credit decisions). Features like the watchlist and portfolio tracker simply display data you chose to save — they do not score, rank, or make decisions about you. Personalized advertising, where you've consented, uses standard interest-based targeting from Google, not a system we operate ourselves.
21. Children's privacy
Imperialpedia is intended for a general, adult audience and is not directed at children. We do not knowingly collect personal information from anyone under 13 years old (the U.S. COPPA threshold), under 16 years old if you are in the EEA/UK (the GDPR default digital-consent age, which some member states set lower), or under 18 years old if you are in India (the DPDP Act's definition of a child, which requires verifiable parental consent for any processing). If you believe a child has provided us personal data, email privacy@baalvion.com and we will delete it.
22. Changes to this policy
We update this policy when our practices change. Minor edits (wording, formatting) are reflected by updating the "Last Updated" date at the top without separate notice. For material changes — a new category of data we collect, a new purpose for using it, a new third party we share it with, or a reduction in your rights — we will post a visible notice on this page and, where we have your email address, notify you directly, at least 15 days before the change takes effect where practicable.