DPDP Compliance
India Book Bazaar is committed to respecting your rights under the Digital Personal Data Protection Act, 2023 (DPDP Act). This page explains how we comply with the DPDP Act and how you can exercise your rights as a data principal.
Scope and Applicability
The DPDP Act applies to the processing of digital personal data within India. While India Book Bazaar does not require user registration or maintain a database of personal information, we may collect limited digital data through website analytics, cookies, and server logs for operational purposes. This page outlines how such data is handled in compliance with the DPDP Act.
Your Rights Under the DPDP Act
As a data principal, you have the following rights under the DPDP Act:
- Right to access your digital personal data processed by us
- Right to correction of inaccurate or incomplete data
- Right to deletion of your data
- Right to grievance redressal if you believe your rights have been violated
- Right to nominate another individual to exercise your rights in case of death or incapacity
How We Comply
India Book Bazaar complies with the DPDP Act by:
- Collecting only essential data necessary for website functionality
- Not storing personal data in identifiable databases
- Using cookies and analytics tools that anonymize user data where possible
- Providing clear mechanisms to exercise your rights
Data We Process
We may process the following types of digital personal data:
- IP addresses (anonymized)
- Browser type and device information
- Pages visited and time spent on site (aggregated analytics)
- Cookie identifiers (for session and preference management)
No names, email addresses, phone numbers, or payment details are collected or stored unless explicitly provided via contact forms.
Legal Basis for Processing
Our processing of digital personal data is based on legitimate interest under the DPDP Act, specifically for:
- Ensuring website security and functionality
- Improving user experience through analytics
- Complying with legal obligations
How to Exercise Your Rights
To exercise your rights under the DPDP Act, please contact us via email at [email protected]. Include:
- Your full name
- A description of the data you wish to access, correct, or delete
- Any supporting information to help us identify your data
We will respond to your request within 30 days.
Response Timeframes
Under the DPDP Act, we are required to respond to your requests within 30 days of receipt. In complex cases, we may extend this period by an additional 15 days and will notify you accordingly.
No Discrimination Policy
We will not deny you goods or services, charge different prices, or provide a different quality of service because you exercised your rights under the DPDP Act.
Updates and Changes
We may update this DPDP Compliance page periodically to reflect changes in the law or our practices. The most recent version will always be posted here with an updated effective date.
Contact Information
If you have any questions, requests, or complaints regarding your data rights under the DPDP Act, please contact:
Rohan Greenwood
1 Martin Place, Sydney NSW 2000, Australia
Email: [email protected]
You may also file a complaint with the Digital Data Protection Board established under the DPDP Act if you are unsatisfied with our response.