PRIVACY NOTICE

Privacy notice

Written in plain English by a team that teaches the DPDP Act 2023 and DPDP Rules 2025 for a living. If any of this is unclear, that is on us — write to [email protected].

01Who publishes this site

Decipher Consultancy Services publishes dpdpa.dcomply.in as a neutral reference hub for India's Digital Personal Data Protection Act 2023 and DPDP Rules 2025. We are the same team behind dcomply.in and academy.dcomply.in.

02What we collect on this site

If you accept the analytics banner, Google Analytics 4 records anonymised pageviews, browser type, approximate country, and the page you came from. If you decline, nothing goes to Google at all.

When accepted, IP addresses are truncated on ingest via anonymize_ip. We do not collect your name, your email, or any identifier that would let us find you again if you closed the tab. We are trying to answer the question "which pages are useful and which are not," nothing beyond that.

We also use your browser's localStorage to remember two things: whether you prefer dark or light theme, and what you picked on the consent banner. Both stay on your device. Neither is readable by us or by any third party.

03Things this site deliberately does not do

Some of these decisions cost us capabilities. That is fine, most of them are also the right thing on a reference site aimed at people learning DPDP.

No signup and no login. There is nothing to create an account for. No newsletter form here. If you want the DPDP change alert, that lives on dcomply.in and its own notice applies. No advertising cookies, no remarketing pixels, no third-party trackers beyond GA4. No sale or sharing with any third party for any commercial purpose. No profiling and no automated decisions.

04Your rights

You can withdraw consent, ask what we have, or ask us to delete it — any time.

Under India's DPDP Act 2023 (Section 6(4) and Sections 12–14) and the EU GDPR (Articles 7, 15, 17, 21), you have the right to withdraw consent, access what we hold, correct or delete it, and object to processing. Because we hold nothing that identifies you on this site, an access or deletion request will usually come back with "we have nothing keyed to you." That is a feature, not a dodge.

Route: [email protected] with the subject line [dpdpa privacy]. We acknowledge within 3 working days.

05Change your cookie choice, right now

Click below to reopen the consent banner. Whatever you pick overwrites your previous choice.

06Data locations and retention

Site content is hosted on a Contabo server in Germany (EU). Google Analytics data is processed by Google Ireland Limited under EU Standard Contractual Clauses. Analytics retention is set to 14 months at the GA4 property level. After that, event-level rows are dropped. Aggregate reports may persist indefinitely because they cannot identify anyone.

07Complaints

Write to us first — we would rather fix it. If we cannot resolve your concern:

08Changes to this notice

If we change how we collect anything, we will update the Last updated date at the top of this page and, if the change is material, republish the consent banner so you can re-decide.

Curious how we do this in production? dcomply.in helps organisations of any size run consent, notices, rights-requests, and DPO workflows without a lawyer's help for every ticket.