This policy explains what personal data DPDP Audits collects through dpdpaudits.com, why, and what your rights are. We keep it short because we collect very little.
Who we are
DPDP Audits is operated by Ram Krishan Dudeja (CISA, CAIIB) from New Delhi, India. For the personal data described below, DPDP Audits is the Data Fiduciary under the Digital Personal Data Protection Act 2023. You can reach us at [email protected].
What we collect, and why
| Data | When | Purpose |
|---|---|---|
| Name, organisation, email address, enquiry type, and your message | When you submit the enquiry form | To respond to your enquiry and discuss a possible engagement |
| Your email address, and a one-time code | When you click "Send Code" on the enquiry form | To confirm that the email address is yours before we accept your enquiry |
| Date and time, whether the email was sent, and enquiry type (no name or email) | Each time an enquiry is submitted | To detect and fix email delivery problems |
| IP address and pages requested | Each visit, in our hosting provider's server logs | Security and keeping the site running |
You provide the form details voluntarily and only for the purpose of your enquiry. We do not ask for any other information, and we do not use it for anything else.
Cookies and tracking
We do not use advertising, analytics or tracking cookies, and we do not run third-party analytics scripts on this site. If you use the email verification on the enquiry form, our server sets a single session cookie so that it can remember that your email was verified. That cookie is essential to the form, is not used to track you, and expires when you close your browser or shortly after.
The one-time code and your verification status are held in that short-lived server session (the code is valid for 10 minutes). They are not kept in a database.
Who sees your data
- Your enquiry reaches us as an email in our business mailbox, which is provided by our hosting provider, Hostinger. The hosting provider processes it on our behalf.
- We do not sell your data or use it for marketing by third parties.
- We disclose it to others only if the law requires us to.
How long we keep it
We keep your enquiry only as long as needed to respond to you and to keep a record of any engagement that follows, and delete it after that. You can ask us to delete it sooner (see below).
Your rights
Under the DPDP Act 2023 you have the right to:
- Ask for a summary of the personal data we hold about you and how we use it
- Ask us to correct or complete inaccurate or incomplete data
- Ask us to erase your data once it is no longer needed
- Withdraw your consent at any time, as easily as you gave it
- Nominate another person to exercise these rights if you die or become incapacitated
- Make a grievance to us and, if it is not resolved, complain to the Data Protection Board of India
To use any of these rights, or to raise a grievance, email [email protected] with the subject "Privacy request". We may need to confirm your identity before acting on a request, and we will respond within the time the DPDP Rules require.
Children
This site is for organisations and professionals. It is not directed at anyone under 18, and we do not knowingly collect data from children.
Security
The site is served over HTTPS, enquiries are accepted only after email verification, and access to the mailbox that receives them is restricted. No method of transmission is completely secure, but we take reasonable safeguards and will notify affected individuals and the Data Protection Board of any personal data breach as the law requires.
Links to other sites
Our site links to services such as YouTube and LinkedIn. Those services have their own privacy policies, which apply once you leave this site.
Changes to this policy
We will update this page if our practices change and show the date at the top. The core obligations of the DPDP Rules 2025 apply from May 2027; we follow them now.