Privacy Policy

1. Introduction

DPDP Consulting ("we", "our", or "us"), a project by Meridian Bridge Strategy, is committed to transparency. This Privacy Policy explains how we handle your data in compliance with the Digital Personal Data Protection Act, 2023 ("DPDP Act").

2. Data Collection & Usage

We believe in data minimization. Our website is primarily a static informational resource.

A. Data We Do NOT Collect

• Interactive Tools: Our on-site tools (Risk Calculator, Compliance Checklist) operate entirely within your browser (Client-Side). We do not transmit, store, or see the data you enter into these tools.
• No User Accounts: We do not ask you to create an account or password.
• No Contact Forms: We do not have direct data entry forms on this site.

B. Data We Collect via Third Parties

We use trusted third-party service providers who act as Data Processors:

• Calendly (Consultation Booking): If you book a call, you provide your Name, Email, and Phone directly to Calendly. Calendly Privacy Policy.
• Refix AI (Analytics): We use Refix to understand website usage patterns (pages visited, session duration) to improve our content. This data is aggregated and anonymized where possible.
• Vercel (Hosting): Our hosting provider may log your IP address and User-Agent for security and access logging purposes (Legitimate Use).

3. Purpose of Processing

We process the limited data mentioned above for:

• Service Delivery: To schedule and conduct the consultation calls you request.
• Security: To protect our website from cyber threats (DDoS, bots).
• Improvement: To analyze which content is most valuable to our visitors.

4. Legal Basis

• Consent: You provide clear, affirmative consent when you choose to book a call via Calendly or accept our analytics cookies.
• Legitimate Uses: For network security and preventing fraud, as permitted under Section 7 of the DPDP Act.

5. Data Sharing

We do not sell your data. Data is only shared with the specific Data Processors listed above (Calendly, Vercel, Refix, Google Fonts) to facilitate website function.

6. Your Rights

Under the DPDP Act, you have the right to:

• Access: Request a summary of personal data we handle (e.g., your booking details).
• Correction: Correct your contact details.
• Erasure: Request deletion of your booking data.
• Grievance Redressal: File a complaint regarding our data practices.

View Detailed Rights →

7. Data Retention

Booking data is retained as long as necessary to provide the consultation and for a reasonable period thereafter for business record-keeping (typically 3 years). Analytics data is retained according to Refix AI's retention policies.

8. Contact Our DPO

If unsatisfied with our response, you have the right to approach the Data Protection Board of India.