Privacy Policy

We collect only what we need to run our services:

• Account details — your name, email, and password (stored in hashed form) when you register.
• Subscription & purchase records — payment history and delivery addresses for journal subscriptions and bookshop orders.
• Contributor data — literary works, translations, and author information submitted for publication.
• Usage data — pages visited and content read, collected via cookies to improve the platform.
• Communications — messages and feedback you send us directly.

We do not collect sensitive personal data and we never sell your data.

We process your data on the following legal bases (GDPR Article 6):

• Contract — to manage your account, subscriptions, and purchases.
• Legitimate interests — to improve our platform and communicate about relevant literary news and events.
• Consent — for marketing emails and non-essential cookies. You can withdraw consent at any time.
• Legal obligation — to meet applicable tax and regulatory requirements.

We use essential cookies (required for the site to work) and, with your consent, analytics cookies (to understand how people use the platform). You can manage your cookie preferences at any time via the Cookie Preferences link in the footer. We do not use advertising cookies.

We share your data only where necessary:

• Service providers — payment processors, email delivery, and cloud hosting partners, all bound by data agreements.
• Editorial team — when you submit a work, relevant editors and translators will access your submission and contributor profile.
• Legal authorities — when required by law or court order.

• Account data — for the duration of your account, plus 2 years after closure.
• Transaction records — 7 years, as required by Indian financial regulations.
• Newsletter subscriptions — until you unsubscribe.
• Literary submissions — 3 years after an editorial decision, or for the life of the publication if the work is accepted.
• Analytics data — anonymised after 13 months.

If you are in the EEA, UK, or any jurisdiction with data protection law, you have the right to:

To exercise any right, write to us at support@the-hyphen.in. We will respond within 30 days. You can also complain to your national data protection authority.

We use TLS encryption in transit, encrypted storage at rest, and hashed passwords. In the event of a data breach affecting your rights, we will notify you and the relevant authority within 72 hours as required by GDPR Article 33.

Our services are for users aged 16 and over. We do not knowingly collect data from children under 16. If you believe a child has provided us data without consent, please contact us and we will delete it promptly.

We may update this policy periodically. For material changes, we will notify registered users by email at least 30 days in advance and display a notice on the platform. The date at the top of this page always reflects the latest version.