●DPDP enforcement begins May 13, 2027 — 400 days remaining

Privacy Policy

Last updated: 23 June 2025

ComplyDP ("we", "us") is committed to protecting your personal data in accordance with India's Digital Personal Data Protection Act, 2023 ("DPDP Act").

1. Data We Collect

  • Email address — provided when requesting a scan report
  • Company name — optionally provided during report request
  • Website URL — submitted for compliance scanning
  • Device/browser info — collected via essential cookies for site functionality

2. Purpose of Collection

  • Delivering your scan report — primary purpose of the service
  • Communicating compliance updates — only if you opt in to our newsletter
  • Improving our service — aggregated, anonymised analytics (if you accept non-essential cookies)
  • Legal compliance — responding to lawful requests from authorities

3. How We Use Cookies

We use the following types of cookies:

  • Essential cookies — required for site functionality (session, security). These cannot be disabled.
  • Analytics cookies — help us understand usage patterns. Only set if you click "Accept All" on the cookie banner.

You can change your preference at any time by clearing your browser cookies or using the cookie banner that reappears after clearing storage.

4. Data Sharing & Disclosure

We do not sell your personal data. We may share data with:

  • Cloud hosting providers — to run and serve our application
  • Email delivery services — to send your scan report
  • Legal authorities — only when required by applicable law

All processors are bound by data processing agreements consistent with the DPDP Act.

5. Data Retention

We retain personal data only as long as necessary:

  • Scan reports — retained for 12 months, then automatically deleted
  • Email addresses — retained until you request deletion or unsubscribe
  • Analytics data — aggregated and anonymised within 90 days

6. Your Rights Under the DPDP Act

Under the DPDP Act 2023, you have the right to:

  • Access — request a summary of your personal data we hold
  • Correction — request correction of inaccurate data
  • Erasure — request deletion of your personal data
  • Grievance redressal — raise a complaint about our data handling
  • Nominate — nominate another person to exercise rights on your behalf

To exercise any right, email privacy@complydp.com. We will respond within 72 hours.

7. Consent Withdrawal

You may withdraw consent at any time by:

  • Clicking "Unsubscribe" in any marketing email we send
  • Emailing privacy@complydp.com with subject "Withdraw Consent"
  • Rejecting non-essential cookies via the cookie banner

Withdrawal of consent does not affect the lawfulness of processing done before withdrawal. After withdrawal, we will cease processing within 7 days.

8. Grievance Redressal

If you have concerns about our data practices, contact our Grievance Officer:

If your grievance is not resolved satisfactorily, you may approach the Data Protection Board of India as per the DPDP Act.

9. Children's Data

Our services are not directed at individuals below 18 years of age. We do not knowingly collect personal data from children without verifiable parental consent.

10. Contact Us