Privacy Policy DPDP

₹500.00

This document is a comprehensive Privacy Policy drafted in compliance with the Digital Personal Data Protection Act, 2023 and the Draft Digital Personal Data Protection Rules, 2025 of India. It establishes the legal framework governing how the Company collects, processes, stores, uses, shares, and safeguards digital personal data of users who access its website, platform, or services. The policy defines key legal terms such as Data Fiduciary, Data Principal, Personal Data, and Processing, clarifying the Company’s responsibilities and user rights. It outlines the categories of data collected, including identity details, contact information, transactional records, technical data, usage data, and marketing preferences. It specifies that sensitive personal data is not intentionally collected and explains that limited data such as cookies may be gathered during browsing. A detailed data security section describes technical and organizational safeguards, including encryption, access controls, secure cloud infrastructure, vendor oversight, vulnerability assessments, and breach response procedures. The document explains the lawful purposes for processing data, such as service delivery, contractual performance, legal compliance, and marketing with consent. It also covers data sharing, cross border transfers, retention practices, grievance redressal mechanisms, user rights including correction and erasure, protections for children, and the use of cookies and tracking technologies.

Key Features

This Privacy Policy outlines compliance with India’s digital data protection framework and defines the Company’s role as Data Fiduciary. It specifies categories of personal data collected, including identity, contact, transactional, technical, usage, and marketing data. It establishes lawful purposes for processing such as service delivery, contractual performance, legal compliance, and consent based marketing. The policy details robust security safeguards including encryption, access controls, vendor oversight, and breach response protocols. It explains data sharing conditions, cross border transfers, and retention limits. It guarantees user rights including access, correction, erasure, grievance redressal, nomination rights, child data protections, and transparent cookie usage disclosures.

Ideal for: Startups