DPDP Act Compliance Statement
Our approach to India's Digital Personal Data Protection Act, 2023 (DPDP Act) as a data fiduciary and, for customer message content, a data processor acting on our customers' behalf.
Last updated: [Effective Date]
On this page
Overview
India's Digital Personal Data Protection Act, 2023 (DPDP Act) governs how personal data of individuals in India is processed. This statement explains how PromoMarketingSolution approaches DPDP Act obligations as a business providing Bulk SMS, RCS, WhatsApp Business API, and Voice/IVR/OBD services.
Our approach to data protection
We process personal data of our own customers (account holders) as a data fiduciary, and process message/call recipient data on behalf of our customers, who determine the purpose and means of that processing for their own end users.
Personal data we handle
- Customer account details (name, company, contact information, billing details)
- Message and call metadata (delivery status, timestamps, recipient numbers)
- Message/call content sent by customers to their own recipients
Consent
Our customers are responsible for obtaining valid consent from their message/call recipients before sending communications, in line with DPDP Act requirements and TRAI's DLT framework. We support this through DLT-registered sender IDs and templates.
Rights of data principals
Under the DPDP Act, data principals (individuals) generally have the right to:
- Obtain a summary of personal data processed and the processing activities
- Request correction, completion, or erasure of their personal data
- Nominate another individual to exercise rights on their behalf
- Withdraw consent at any time
- Register grievances regarding processing of their personal data
Data security
We apply reasonable security safeguards to protect personal data against unauthorized access, disclosure, or loss — see our Security & Data Protection page for details.
Data retention
Personal data is retained only as long as necessary for the purpose it was collected, or as required by applicable law and regulatory record-keeping obligations (including TRAI/DLT rules). [Specify exact retention periods per data category]
Grievance redressal
Grievances relating to personal data processing can be raised with our Grievance Officer:
- Name: [Grievance Officer Name]
- Email: [grievance@promomarketingsolution.com]
See also our Privacy Policy.
Policy updates
We may update this statement as our practices or applicable law evolve. Material changes will be reflected by updating the "Last updated" date above.