Last updated: 3 November 2026
1. Who we are
DPDP Bridge ("we", "us", "our") provides lawyer-led compliance services and technology for the Digital Personal Data Protection Act, 2023. For the purposes of this website, we are the Data Fiduciary responsible for the personal data described below. Our contact details are at the end of this policy.
2. What personal data we collect
- Information you give us — when you use our contact form, book a demo or message us on WhatsApp: your name, email address, mobile number, organisation name and the contents of your message.
- Information collected automatically — basic technical and usage data such as your IP address, browser type, pages viewed and referring source, collected through cookies and similar technologies (see our Cookie Policy).
- Assessment and tool data — if you choose to use our free website scan, readiness check or DPDP assessment, you provide information about your organisation. Those tools are hosted on our platform and are described at the point of collection.
We do not knowingly collect sensitive personal data through this website, and we ask that you do not send it to us via the contact form.
3. How and why we use your data
- To respond to your enquiry, provide a demo, prepare an assessment or estimate, and communicate with you about our services.
- To operate, secure, maintain and improve this website.
- To meet legal, regulatory and record-keeping obligations.
We rely on your consent, and on the legitimate uses permitted under the DPDP Act (such as responding to a request you have made), as the grounds for this processing. You may withdraw consent at any time (see your rights below).
4. Cookies
We use essential cookies to run the site and, with your consent, analytics cookies to understand how it is used. You can accept or decline non-essential cookies through our cookie banner, and change your choice at any time. See our Cookie Policy for details.
5. Who we share it with
We do not sell your personal data. We share it only with trusted service providers who help us operate this website and our communications (for example, hosting, email delivery and website analytics), under appropriate contractual safeguards, and where required by law or to protect our legal rights. Where any processing involves a Data Processor, we put a data-processing agreement in place.
6. International transfers
Some of our service providers may process data outside India. Where that happens, we take reasonable steps to ensure your data is handled consistently with this policy and applicable law, including the DPDP Act's provisions on cross-border transfers.
7. How long we keep it
We keep personal data only for as long as needed for the purposes above — typically for the duration of our correspondence with you and a reasonable period afterwards to meet legal and business requirements — and then delete or anonymise it.
8. How we protect it
We apply reasonable technical and organisational security safeguards — including access controls and encryption in transit — to protect personal data against unauthorised access, loss or misuse. No method of transmission over the internet is completely secure, but we work to protect your information and review our safeguards regularly.
9. Your rights as a Data Principal
Subject to applicable law, you have the right to:
- access a summary of the personal data we hold about you and how it is processed;
- request correction, completion, updating or erasure of your personal data;
- nominate another individual to exercise your rights in the event of death or incapacity;
- withdraw consent you have given; and
- raise a grievance about how we handle your personal data.
To exercise any of these rights, contact us using the details below. We will respond within the timelines required by law.
10. Grievances
If you have a concern about how we handle your personal data, please contact our Grievance Officer at dpo@dpdpbridge.com. If your concern is not resolved, you may escalate it to the Data Protection Board of India.
11. Children's data
This website is intended for a business audience and is not directed at children. We do not knowingly collect the personal data of children through this website.
12. Changes to this policy
We may update this policy from time to time. The "last updated" date above shows when it was last revised, and material changes will be reflected on this page.
13. Contact us
DPDP Bridge
Welldone Techpark, Badshahpur Sohna Rd, Sector 48, Gurugram, Haryana 122018, India
Email / Grievance Officer: dpo@dpdpbridge.com
WhatsApp: +91 87008 78858
This policy is provided for transparency and is not legal advice.