The Digital Personal Data Protection Act (DPDPA), 2023 is India's comprehensive data protection law. It establishes a framework for processing digital personal data in a manner that recognizes both the right of individuals to protect their personal data and the need to process such data for lawful purposes.
At OCXLY, we act as a "Data Fiduciary" for the information you provide. This notice describes our practices regarding the collection, storage, and processing of your personal data.
Data Principal
The individual to whom the personal data relates. In this context, you are the Data Principal.
Data Fiduciary
Any person who alone or in conjunction with other persons determines the purpose and means of processing of personal data. OCXLY is the Data Fiduciary.
Personal Data
Any data about an individual who is identifiable by or in relation to such data.
Processing
A wholly or partly automated operation or set of operations performed on digital personal data, including collection, recording, organization, storage, use, sharing, or erasure.
Under the DPDPA, you possess significant control over your digital personal data. Your rights include:
- Right to Information: You have the right to receive a summary of the personal data being processed by us and the processing activities undertaken.
- Right to Correction: You can request the correction of inaccurate or misleading personal data, the completion of incomplete data, and the updating of your personal data.
- Right to Erasure: You can request the deletion of your personal data that is no longer necessary for the purpose for which it was processed.
- Right of Grievance Redressal: You have the right to have readily available means of grievance redressal provided by OCXLY.
- Right to Nominate: You have the right to nominate any other individual, who shall, in the event of your death or incapacity, exercise your rights under the Act.
We process your personal data only on the following grounds:
1. Consent
Where you have given free, specific, informed, unconditional, and unambiguous consent with a clear affirmative action. You may withdraw your consent at any time, though this will not affect the legality of processing based on consent before its withdrawal.
2. Legitimate Use
We may process personal data for specific "legitimate uses" as defined in the Act, such as for the performance of any function under any law, for responding to a medical emergency, or for specified employment purposes.
The DPDPA also outlines certain duties for individuals to prevent the misuse of the rights provided:
- You must not impersonate another person while providing personal data.
- You must not suppress any material information while providing personal data for any document issued by the State.
- You must not register a false or frivolous grievance or complaint with the Data Protection Board.
- You must provide only such information as is material and authentic while exercising the right to correction or erasure.
To exercise any of your rights as a Data Principal under the DPDPA, please contact our Data Protection Officer / Grievance Officer:
We will acknowledge your request within 48 hours and provide a substantive response within the timelines prescribed by the DPDPA rules.
You may also manage your consent through a "Consent Manager"—an entity registered with the Data Protection Board that helps you give, manage, review, and withdraw consent through an accessible, transparent, and interoperable platform.
If you are unsatisfied with our response to your data request or have a grievance regarding our data processing, you may first contact our internal Grievance Officer. If the grievance remains unresolved, you have the right to approach the **Data Protection Board of India**.
For any queries related to this DPDPA Notice, please reach out to us:
OCXLY — Data Fiduciary
Kochi, Kerala, India — 682 028
Email: [email protected]
Phone / WhatsApp: +1 (646) 238 5077