Privacy Policy

Scope

dpdpact.info is an educational resource about India’s Digital Personal Data Protection (DPDP) framework. We do not provide legal advice. For operational next steps, use the compliance portal, compliance checklist, and official resources to anchor decisions in primary materials.

Editorial boundaries and sourcing are described in our editorial policy. Neutral criteria for any “implementation help” listings are on Get help implementing DPDP.

What we collect

Depending on how you use the site, we may process:

• Enquiry and Starter Pack requests: what you send through the enquiry form on Contact, the Starter Pack page and other pages that carry it: your name, work email, and optionally your company, role and message, plus your consent and the page you submitted from. See Enquiry form data below.
• Technical logs: hosting providers and CDNs typically record IP address, timestamps, and user agent for security and reliability.
• Local storage: your cookie choice (Analytics on/off, Advertising on/off, and when you made it) is stored in your browser under the key dpdp_consent_v2. It is not sent to our servers.

Cookies and consent

We ask for consent separately for each purpose. There are three categories:

• Essential (always on): first-party browser storage that remembers your cookie choice and theme setting. The site cannot honour your choice without it.
• Analytics (off unless you allow it): Google Analytics 4, to count visits and see which pages are read. It runs with IP anonymisation and ad personalisation signals off, and may set cookies such as _ga.
• Advertising (off unless you allow it): Google AdSense, which shows ads on guide and hub pages and may set cookies such as __gads.

No analytics or advertising script loads until you choose “Accept all” on the banner or switch that category on. “Reject all” is offered with equal prominence. You can change or withdraw your choice at any time, as easily as you gave it, on the Cookie preferences page (linked in every page footer). Withdrawal takes effect immediately for future processing: the page reloads without those scripts and we delete the Google cookies set on dpdpact.info itself. Cookies Google stores on its own domains can be cleared through your browser or Google’s settings. Withdrawing consent does not affect the legality of processing based on consent before the withdrawal (Digital Personal Data Protection Act, 2023, sections 6(4) and 6(5)).

Advertising (AdSense / GAM)

On educational and hub pages we may display third-party ads in reserved regions below primary content. Ads are labeled, not placed inside primary legal disclaimer boxes, and not above the main H1. The AdSense loader (js/ads-loader.js) runs only when you have allowed the Advertising category; otherwise the AdSense library is never requested. Configure each ad unit’s slot ID via data-adsense-slot on <body> or data-dpdp-ad-slot on each <ins class="adsbygoogle dpdp-ad-unit">. This privacy policy page does not load the AdSense script and does not render ad units.

Enquiry form data

• What: name and work email (required); company, role and message (optional); your consent; the page you submitted from; and the time of submission.
• Purpose: to respond to your enquiry and send the material you requested (for example the DPDP readiness checklist or Starter Pack). We do not use it for unrelated marketing and do not sell it.
• Legal basis: your consent, given by ticking the consent box. Nothing is sent unless you tick it.
• Where: submitted over HTTPS and stored on our own server, which is not exposed as a public query API.
• Retention: deleted 12 months after submission, or sooner if you ask. Server backups are kept for 14 days, so a deleted record is fully purged from backups within 14 days.
• Withdrawal and rights: you can withdraw consent, or ask for access, correction or erasure, at any time by replying to any email we send you or by writing to us via Contact. Withdrawal stops further processing; it does not affect processing already done.

Affiliate and referral programs

Some links may earn us a commission or referral fee when disclosed. Editorial coverage is not pay-to-play; see editorial policy. Programs we may use (update this table when you enroll a network):

Outbound click measurement

Optional first-party scripts may record anonymous aggregate counts of clicks on labeled referral links (stored in your browser) to estimate interest. No account is required to read the site. For analytics with more detail, use your own analytics stack with a privacy assessment.

Your choices

• Use browser controls to block third-party cookies.
• Choose “Reject all” on the cookie banner, or allow only some categories, and change or withdraw that choice any time on Cookie preferences.
• Contact us via Contact for privacy questions related to this site.

Children

The site is aimed at adults and organizational readers, not at profiling children.

Changes

We will update this policy when practices or vendors change materially. Continue implementation work through the templates hub and Start here path.