Privacy Policy

01Who this policy covers

This policy applies to the website dpdp-compliance.in (“DPDP Compliance”, “we”, “us”) and to the free tool published on it, the DPDP Website Risk Scanner. DPDP Compliance is an independent information platform about India's Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025. It is published and maintained by the editorial team behind the site. For anything about personal data, write to dpdpcompliances@gmail.com.

02What we collect, and why

We keep this short on purpose. The table lists every situation in which personal data reaches us.

We use personal data only for the purpose for which it was given. Where we rely on your consent we will ask for it clearly, and you can withdraw it at any time by writing to dpdpcompliances@gmail.com.

03What we do not do

• We do not sell personal data.
• We do not use your details for advertising, and we do not build profiles of visitors.
• We do not send marketing emails unless you have asked to receive them.
• We do not run user accounts, so we hold no passwords or payment details for visitors.

04Who may receive data

Running even a simple website involves service providers. In practice this means:

• Hosting and network providers that deliver the site and keep standard server logs.
• Email services. Mail sent to dpdpcompliances@gmail.com is handled by Google's email service, and your own email provider handles your copy.
• Google Fonts. The pages load their typefaces from Google's servers, so Google receives your IP address and browser details when a page loads. Google's own policies govern what it does with that data.
• An optional AI provider for the scanner. If AI-assisted wording is switched on for the scanner, a small set of labels about the checks (not your submitted address and not any text from the scanned website) may be sent to the AI provider.

We may also disclose personal data where the law requires it. Some providers, such as Google, may process data outside India.

05How long we keep it

Emails and requests are kept for as long as needed to deal with your message, to follow up, and to keep a record of how a privacy or grievance request was handled. You can ask us to delete correspondence that is no longer needed. Scanner reports are deleted automatically after a fixed period (7 days by default) and you can delete a report yourself at any time. Server logs are kept according to the hosting provider's own settings.

06Your rights and how to use them

Under the Act, a person whose data is processed (a Data Principal) has the right to access information about their personal data, to correction and erasure, to a grievance redressal route, and to nominate another person to exercise their rights. Most obligations on organisations under the Act and Rules are scheduled to start on 13 May 2027; we nevertheless handle requests under this policy now.

To exercise any of these rights regarding data we hold, email dpdpcompliances@gmail.com or follow the steps on the Grievance Redressal page. We may ask for limited information to confirm the request is yours. We aim to respond promptly and, in any case, within 90 days.

07Children

This website is written for professionals and the general reader and is not directed at children. We do not knowingly collect personal data from children. If you believe a child has sent us personal data, write to dpdpcompliances@gmail.com and we will deal with it.

08Security

We take reasonable steps, appropriate to a static information website, to protect the data we hold: not collecting more than we need, keeping the number of services involved small, and automatically deleting scanner reports. No online service can be guaranteed to be completely secure. If a personal data breach affecting data we hold occurs, we will notify the people affected and the authorities to the extent the law requires.

09Changes to this policy

If we change how we handle personal data, for example by adding analytics or another tool, we will update this policy and the Cookie Notice before the change takes effect, and ask for consent where it is required. The review date at the top of this page shows when the policy was last checked.

10Contact

Privacy questions and requests: dpdpcompliances@gmail.com. Complaints about how we have handled your data: Grievance Redressal. The rules for using the site are in the Terms of Use.