Draft for review

DPDP Information

Preliminary information about personal-data processing and privacy requests.

Not approved for publication. This page does not establish or certify legal compliance. Have qualified Indian privacy counsel review the final notice against the Digital Personal Data Protection Act, applicable rules and the actual production data flows.

1. Data Fiduciary details

Data Fiduciary: [insert full legal entity name]. Registered address: [insert registered address]. Privacy/grievance contact: [insert monitored email and contact details]. Do not publish until these details and the responsible grievance contact are confirmed.

2. Personal data handled by this website

The contact form may collect name, work email, company, phone, area of interest and message. The current development backend stores submissions in local JSON files and can optionally send contact messages through configured SMTP. Confirm and document all production hosting, database, email and support providers before launch.

3. Purposes and notices

Information is used to respond to a person’s request and coordinate requested sales or product communications. List each actual purpose, notice, consent or other permitted basis, and any separate marketing activity: [confirm with counsel and match the implemented flows].

4. Requests and grievances

Describe the process and response timelines for requests available under applicable law, including correction, completion, updating, erasure, withdrawal of consent where applicable, and grievance redressal. Request channel: [insert monitored channel]. Identity-verification procedure: [insert approved procedure].

5. Retention, deletion and security

The starter implementation has no automated retention or deletion schedule. Before production, define retention for active records, backups and email copies; implement deletion; and accurately describe safeguards without overstating them: [insert approved, implemented practices].

6. Children and cross-border processing

Document whether the service is intended for children and the actual locations where data may be stored or accessed: [confirm the audience and provider locations]. Any age-related or cross-border statements require review against applicable law and production configuration.

7. Updates and effective date

Policy owner: [insert legal entity]. Effective date: [insert date after legal review and implementation]. Update this page whenever data practices, providers or legal requirements change.