Home / DPDP notice to Data Principals
DPDP notice to Data Principals
The notice required under India's Digital Personal Data Protection Act, in the language you chose.
1. Notice at a glance
This notice is given before any personal data is processed, in English, हिंदी or ಕನ್ನಡ, and is restated at the point of consent. Processing begins only after you have given free, specific, informed and unambiguous consent.
Arcshifts does not process the personal data of children. Every participant is verified as 18 or over before the consent gate opens.
2. Categories, purpose and retention
| Category | Purpose | Retained for |
|---|---|---|
| Identity & contact | Identify you, schedule the session, deliver the report | While active + statutory period |
| Consent record | Prove lawful basis | As long as any data taken under it is held |
| Assessment responses | Generate the interventions report | While active + statutory period |
| Voice input | Transcribe your spoken answers | Discarded after transcription |
| Interventions report | Your deliverable; immutable once issued | Until erasure is requested |
| Exploratory signals (DMIT) | Additional input, never sole basis | Until withdrawn or erased |
3. Legal basis
Consent. There is no legitimate-use fallback for the assessment: if you do not consent, or you withdraw consent, we stop processing. Withdrawal is as easy as giving consent — one action, same language, no phone call required.
4. Your rights under the Act
- Access — a summary of what we process and who we have shared it with.
- Correction — fix data that is inaccurate, incomplete or out of date.
- Erasure — deletion of data we no longer need a lawful reason to hold.
- Withdraw consent — at any time, with future processing stopping.
- Nominate — name someone to exercise these rights if you cannot.
- Grievance redressal — a named officer and a defined response window.
5. Grievance redressal
Raise a grievance with our Grievance Officer first. We acknowledge within 72 hours and respond substantively within 30 days.
6. Consent Manager
You may route your consent and rights requests through a registered Consent Manager. We honour requests received that way exactly as we honour requests made directly.
7. Complaint to the Board
If our response does not resolve your grievance, you may complain to the Data Protection Board of India. Doing so does not limit any other remedy available to you.