DPDP Act Compliance

India's Digital Personal Data Protection Act, 2023 (DPDP Act) governs how organisations process personal data of individuals in India. This page summarises how Socialtrafic operates as a Data Fiduciary and Data Processor.

1. Roles

• We act as a Data Fiduciary for personal data collected through this website (lead enquiries, newsletter sign-ups, downloads).
• When delivering services for clients, we act as a Data Processoron our client's instructions.

2. Notice & consent

We provide an itemised notice at the point of collection (forms + cookie banner) and only process personal data for the purposes described. You can withdraw consent at any time by emailing hello@socialtrafic.in.

3. Data principal rights

• Right to access summary of personal data being processed.
• Right to correction, completion, updation, and erasure.
• Right to grievance redressal.
• Right to nominate another individual to exercise rights.

4. How to make a request

Email us at hello@socialtrafic.in with the subject line “DPDP request”. We will verify your identity and respond within 30 days.

5. Children's data

We do not knowingly collect personal data of individuals under 18. If you believe a child has provided data to us, contact us and we will delete it.

6. Security & breach notification

We follow reasonable security practices appropriate to the nature of personal data we process. In the event of a personal data breach, we will notify affected Data Principals and the Data Protection Board of India in accordance with the DPDP Act.

7. Sub-processors

See the Privacy Policy for the current list of infrastructure and analytics sub-processors and the safeguards we require of them.

8. Grievance Officer

Grievance contact: hello@socialtrafic.in
Postal address: Aligarh, Uttar Pradesh, India.

If we are unable to address your concern, you can escalate to the Data Protection Board of India.