Privacy Policy
In short: we collect only what you give us (an enquiry, a subscription, a WhatsApp message) plus basic visit statistics. We use it to answer you and, if you tick the box, to send occasional DPDP updates. We do not sell your data. You can withdraw consent, ask for your data, or complain to us at any time: hi@dpoindia.in.
1. Who we are
DPOIndia is an independent privacy decision platform. We help companies understand their obligations under India’s Digital Personal Data Protection Act, 2023 (the “DPDP Act”) and the DPDP Rules, 2025, compare their options, and, when they ask, connect with specialist partners. We give decision support, not legal advice.
This site is operated by DPOIndia, registered in New Delhi, India (“DPOIndia”, “we”, “us”). We are the party that decides why and how the personal data described below is used. You can reach us at hi@dpoindia.in.
The DPDP Act’s core duties for businesses start on 13 May 2027. We have written this policy to that standard.
2. What we collect, and why
| When | What we collect | Why we use it |
|---|---|---|
| You send an enquiry through the contact form | Your name, work email, company, role, timeline, and whatever you write in your message. Phone number only if you give it. | To reply and to work out the sensible next step for you. |
| You subscribe through a popup or the newsletter form | Your full name, work email, company (optional), a phone or WhatsApp number (optional, only if you choose to give it), what you are trying to decide, the page you were on, the site you came from, and the time and wording of your consent. | To open the resource you chose, send occasional DPDP updates, keep proof of your consent, and, if you gave a phone number, to call or message you about your request. |
| You click the WhatsApp button | Your WhatsApp number and the message you send, which reaches our team at +91 80763 91347. | To talk to you. WhatsApp’s own terms apply to the chat itself. |
| You use the DPDP readiness assessment or the “Do I need a DPO?” check | Your answers stay in your browser. We receive them only if you choose to send us the details form shown after the result. | To show you a result. If you send the form, we treat it as an enquiry. |
| You visit the site | Technical data such as your IP address and browser type (in server logs and in our form records, to prevent spam and abuse), and visit statistics (see section 3). | To keep the site secure and to see which pages help visitors. |
Please do not send us sensitive documents or personal data about other people. If you do, tell us and we will delete it.
3. Cookies, analytics and fonts
- Google Analytics 4 (through Google Site Kit) counts visits and shows us which pages people read. It sets cookies in your browser and receives data such as the pages you view, your approximate location and your device type. It does not give us your name or email. Google keeps this data for at most 14 months.
- Google Fonts loads our typefaces from Google’s servers, so your IP address reaches Google when a page loads.
- You can block or delete cookies in your browser settings, or install Google’s browser add-on to opt out of Google Analytics. The site works without them.
4. Why we are allowed to use your data
- Your consent, for subscribing and for occasional DPDP updates. You give it by ticking the box. It is asked for separately from everything else, and you can withdraw it at any time (section 8).
- The purpose you gave the data for. When you send an enquiry or a WhatsApp message, you give us your details so we can respond, and we use them only for that.
- Where the DPDP Act otherwise permits it, for example to meet a legal obligation.
5. Who we share it with
We do not sell your data. We share it only with the providers that help us run this site and our service, under agreements that limit what they can do with it. You can ask us which providers we use at any time at hi@dpoindia.in.
- An email platform, which sends our emails and holds our contact lists.
- An automation tool, which we run ourselves on a hosting server, and which passes your details from this site to our email platform.
- A messaging app, used for an internal alert to our team that someone has submitted a form (name, email, company, page).
- Our website hosting provider, which stores and serves this site.
- Google, for analytics and fonts (section 3).
- WhatsApp (Meta), if you message us there.
We introduce you to a delivery partner only when you ask us to, and we tell you who before we share your details with them. We may disclose data if a court or authority lawfully requires it.
6. Transfers outside India
Some of these providers (for example Google and our email and messaging providers) process data on servers outside India. We transfer personal data only where the DPDP Act and the Rules allow it.
7. How long we keep it
| Data | How long |
|---|---|
| Enquiries and WhatsApp conversations | Up to 24 months after our last contact, then deleted. |
| Newsletter subscription details | Until you withdraw consent. After you unsubscribe we keep only a minimal record (your email, the date you agreed and the date you withdrew) for up to 3 years, so we can show your consent was handled correctly. You can ask us to erase that too, unless the law requires us to keep it. |
| Copies of form submissions and server logs | 12 months, then deleted automatically. |
| Automation logs and internal team alerts | A short technical period, then deleted. Alerts stay in our private team chat until we clear it. |
| Analytics data | Up to 14 months in Google Analytics. |
8. Your rights
Under the DPDP Act you can ask us to:
- give you a summary of the personal data of yours that we hold and who we have shared it with;
- correct, complete or update it;
- erase it;
- deal with a complaint (section 12);
- nominate someone to exercise these rights for you if you die or cannot act.
To use any right, email hi@dpoindia.in from the address we hold for you, so we can check it is you. We aim to reply within 30 days, and never later than 90 days.
9. Children
This site is written for business readers. We do not knowingly collect personal data of anyone under 18. If you think a child has sent us data, write to us and we will delete it.
10. Security and data breaches
We protect your data with reasonable safeguards: encrypted connections, limited access, spam and rate limits on our forms, and agreements with our providers. If a breach affects your personal data, we will tell you and the Data Protection Board of India as the law requires.
11. Other sites
Our pages link to other sites, including dpdpactindia.in and partner or government sources. They have their own privacy policies, and this one does not cover them.
12. Questions, complaints and our grievance contact
Email: hi@dpoindia.in
Address: DPOIndia, New Delhi, India
Please raise any concern with us first, and we will respond as described in section 8. If we do not resolve it, you can complain to the Data Protection Board of India.
13. Changes to this policy
If we change how we use your data, we will update this page and the date at the top. If a change affects how we use your email, we will ask for your consent again.