Our DPDP approach and phased commencement

Our India-focused privacy practices support clear notices, purpose-specific processing, consent withdrawal, security, rights requests, and grievance handling under the applicable DPDP framework.

The Digital Personal Data Protection Act, 2023 and Digital Personal Data Protection Rules, 2025 have phased commencement. The Rules specify immediate, one-year, and eighteen-month groups. Applicable requirements are read together with the relevant commencement notifications and corrections; this page does not treat every provision as already in force.

Notice, purpose, and consent

The privacy notice describes known data categories and purposes. Each collection flow must give a clear, specific notice and obtain consent where required, with an equally accessible withdrawal path. Merely agreeing to general terms does not authorize every processing purpose.

Where applicable, consent and notices must support the language choices required by law. This English information page is not a claim that all required Indian-language consent interfaces have been implemented. Publicly accessible information is not automatically exempt; the statutory conditions must be checked.

Access, correction, erasure, withdrawal, and nomination

When the relevant provisions apply, Data Principals have rights to information about processing, correction / completion / updating, erasure subject to lawful retention, grievance redressal, and nomination in the circumstances specified by the Act. You may prepare a consent-withdrawal request or ask about a nomination now.

A nomination enquiry does not itself register a legal nomination. Verification, the prescribed procedure, and implementation must be completed separately. Requests involving children or an authorized representative require appropriate safeguards.

Privacy grievances

Our privacy team receives grievances at privacy@daanveda.com. Use the subject “Privacy grievance” or prepare a grievance. Include the concern, the relevant record or feature, and any prior correspondence reference. Identity documents are not needed initially.

Grievances are addressed under the applicable procedure and legal response period. Where the relevant DPDP Rules apply, the grievance response period will not exceed 90 days; any shorter applicable legal requirement takes priority.

Where applicable, the Act provides for approaching the Data Protection Board after exhausting the available grievance opportunity. Other rights and remedies under applicable law remain available.

Security, processing arrangements, and residency

Our privacy program covers security safeguards, incident handling, processor arrangements, retention / deletion, and the protections relevant to the data involved. Customers can request the information needed for their own due diligence through privacy@daanveda.com.

DPDP is not a blanket requirement that every processing activity must remain in India. Applicable transfer restrictions and sector-specific requirements are addressed for the service concerned. Country-specific hosting requires a separate written scope and separate billing.

Official reference

MeitY: Digital Personal Data Protection Rules, 2025, including commencement provisions. Read together with the Act’s commencement notifications and subsequent corrections.