Grievance Redressal

01Who this page is for

Use this page if you want to ask what personal data DPDP Compliance holds about you, to correct or delete it, to withdraw consent we relied on, to delete a scanner report you cannot delete yourself, or to complain about how we have handled your personal data or this website's privacy practices. The Privacy Policy explains what we hold and why.

The Act gives every Data Principal a right to grievance redressal, and the Rules expect organisations to publish how requests can be made (see Rule 9 and Rule 14). This page is how we do that for this website.

02Where to send it

03What to include

• Your name and an email address we can reply to.
• What you are asking for: access, correction, deletion, withdrawal of consent, or a complaint.
• Enough detail for us to find the data or understand the issue, such as the email address you wrote from, the date you wrote, or the scanner report reference.
• Please do not send identity documents or other sensitive information in the first email. If we need to confirm that a request is yours we will tell you what is needed, and ask only for what is necessary.

04What happens next

1. 1Acknowledgement. We confirm that we have received your request.
2. 2Verification. Where needed, we check that the request comes from the person it concerns.
3. 3Action. We look into the matter, make any correction or deletion that is due, and note what we did.
4. 4Reply. We tell you the outcome, or explain clearly if we cannot do what you asked and why. We aim to reply promptly and in any case within 90 days of receiving your request.

05Scanner reports

You can delete a scanner report yourself from the report page. If you no longer have the access link, or you are the owner of a website that was scanned and want to raise a concern, write to us with the website address and approximate time of the scan. The scanner can be blocked with robots.txt; see how we protect your scan.

06If you are not satisfied

You may complain to the Data Protection Board of India once it is operating and its procedures are notified. The Act expects a Data Principal to use the grievance redressal route first, so we encourage you to raise the matter with us before approaching the Board.

07What this page cannot do

• Complaints about other organisations. DPDP Compliance is an information website. If your concern is about how a company, app or service handles your data, contact that organisation's own grievance officer or contact point. We cannot act on its behalf or access its records.
• Legal advice. We can explain what the Act and Rules say, but we cannot advise on your individual case.