DDPDPA CMS
The deadline DPDPA vs GDPR What you need The product Compare
Preview it today

Privacy Policy

Last updated: 5 October 2026

1. Who We Are

DPDPA CMS (dpdpacms.com) is a self-hosted compliance software product operated by DPDPA CMS [Entity Name]. We exist to help organisations comply with India's Digital Personal Data Protection Act, 2023 ("DPDPA 2023") and we take privacy seriously in our own operations.

For any privacy matter, contact us at hello@dpdpacms.com.

2. What Personal Data We Collect

We collect only what we need.

From our contact form:

  • Your name
  • Your work email address
  • Your organisation name
  • A message describing your compliance situation (optional)

From website analytics (Cloudflare Web Analytics):

  • Pages visited
  • Browser type and device category
  • Country
  • Referring website

These statistics are aggregated. They are not linked to you, and no cookies or other identifiers are stored on your device to collect them.

We do not collect financial information, sensitive personal data, or any data beyond what is described above.

3. Why We Collect It

Contact form data is collected solely to respond to your preview or trial request and to communicate with you about setting up DPDPA CMS in your environment.

Aggregated analytics are used to understand which pages are read and to improve the site. They cannot be used to identify or profile individual visitors.

4. Legal Basis for Processing

Under the DPDPA 2023, we process personal data on the following bases:

  • Consent: Contact form submissions are processed on the basis of your consent given when you submit the form.

Website analytics are aggregated and do not identify you, so they do not involve processing your personal data.

You may withdraw consent at any time by emailing hello@dpdpacms.com. Withdrawal does not affect the lawfulness of processing before withdrawal.

5. Third-Party Processors

We share data with the following processors. We do not sell, rent, or trade personal data.

ProcessorPurposePrivacy policy
Web3Forms Receives and forwards contact form submissions to our inbox web3forms.com/privacy
Cloudflare Pages Website hosting, content delivery and cookieless analytics (Cloudflare Web Analytics) cloudflare.com/privacypolicy

6. Cookies

This website does not use cookies. Our analytics (Cloudflare Web Analytics) work without cookies or any other identifier stored on your device, and we set no advertising, tracking or session cookies. There is nothing to opt out of, so there is no cookie banner.

7. How Long We Keep Your Data

  • Contact form submissions are retained for up to 24 months from the date of submission, or until you request deletion, whichever comes first.
  • Aggregated analytics are kept by Cloudflare under its own retention settings and contain no personal data.

8. Your Rights Under the DPDPA 2023

As a Data Principal under the DPDPA 2023, you have the following rights:

  • Right to access: Request a summary of the personal data we hold about you and the purposes for which it is processed.
  • Right to correction: Ask us to correct inaccurate or incomplete personal data.
  • Right to erasure: Ask us to erase your personal data, subject to any legal obligation that requires us to retain it.
  • Right to withdraw consent: Withdraw consent at any time without affecting prior processing.
  • Right to grievance redressal: Raise a complaint about how we handle your data (see Section 12 below).
  • Right of nomination: Nominate another individual to exercise your rights in the event of your death or incapacity.

To exercise any of these rights, email hello@dpdpacms.com with the subject line "DPDPA Data Request". We will acknowledge your request promptly and respond within the timeframes required by the DPDPA 2023 and associated rules.

9. Cross-Border Data Transfers

Contact form data is processed by Web3Forms, which may store or process data outside India. Website hosting and analytics are provided by Cloudflare on its global network. We take reasonable steps to ensure these processors maintain appropriate security and privacy standards. Where the DPDPA 2023 rules on cross-border transfers apply, we will comply with them.

10. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. Our website is served over HTTPS via Cloudflare Pages. Contact form data is transmitted securely to Web3Forms. We review our security practices periodically.

11. Minors

Our website and services are directed at business professionals and organisations. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

12. Grievance Officer

For privacy complaints or grievance escalation under the DPDPA 2023, contact our Grievance Officer:

Email: hello@dpdpacms.com
Subject: "DPDPA Privacy Grievance"

We will acknowledge your grievance within a reasonable time and aim to resolve it promptly. If you are not satisfied with our response, you may approach the Data Protection Board of India once it is constituted and operational.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. For material changes, we will notify active users and customers by email. Continued use of the site after the effective date constitutes acceptance of the revised Policy.

DDPDPA CMS

Self-hosted compliance for India's Digital Personal Data Protection Act.

The deadline DPDPA vs GDPR Deadlines What you need The product Compare Preview
© 2026 DPDPA CMS Core operational obligations take full effect 13 May 2027. Terms · Privacy