Arjun Roy December 19, 2024 Comments (0)

DPDP Compliance

Dr. Koya's Indian Medical Insights is committed to respecting your rights under the Digital Personal Data Protection Act, 2023 (DPDP). This page explains how we comply with India's data protection law and how you can exercise your rights as a data principal.

Scope and Applicability

The DPDP applies to the processing of digital personal data within India. While our website is informational and does not require registration or account creation, we may collect limited personal data through automated means such as cookies, web analytics, and server logs. This page outlines how we handle such data in accordance with the DPDP.

Your Rights Under DPDP

As a data principal, you have the following rights under the DPDP:

Right to access your digital personal data processed by us
Right to correction of inaccurate or incomplete data
Right to deletion of your data
Right to grievance redressal if you believe your rights have been violated
Right to nominate another individual to exercise your rights on your behalf in case of incapacity or death

How We Comply

We do not maintain a database of personal information. Any data collected (e.g., IP addresses, browser type, cookie identifiers) is used solely for website functionality, analytics, and security. We do not sell, share, or monetize personal data. We retain data only as long as necessary and implement reasonable technical and organizational measures to protect it.

Data We Process

Under DPDP, the only personal data we process includes:

IP addresses (anonymized where possible)
Browser and device information
Usage patterns via analytics tools (e.g., Google Analytics)
Cookie identifiers for site functionality

This data is not linked to any identifiable individual unless voluntarily provided through a contact form.

Legal Basis for Processing

Our processing of digital personal data is based on legitimate interest under Section 5(2) of the DPDP, as it is necessary for the proper functioning of our informational website, improving user experience, and ensuring security. We do not rely on consent for this limited processing, as it is not required under the DPDP for legitimate interests in non-commercial contexts.

How to Exercise Your Rights

To exercise your rights under the DPDP, please contact us via email at [email protected]. In your message, please:

State your request (access, correction, deletion, etc.)
Provide your name and any associated email or identifier you used to interact with our site
Include any supporting details to help us locate your data

We will respond without undue delay and within 30 days of receiving your request.

Response Timeframes

Under the DPDP, we are required to respond to your requests within 30 days. If we require additional time due to complexity, we will notify you within the initial 30-day period with an explanation and expected timeline.

No Discrimination Policy

We will not deny, charge different prices, or provide a different level of service to you because you exercised your rights under the DPDP. You are free to request access, correction, or deletion of your data without consequence.

Updates and Changes

We may update this DPDP Compliance page periodically to reflect changes in the law or our practices. Any material changes will be posted here with an updated effective date. We recommend reviewing this page regularly.