Data rights and grievances
Ask to see, correct or erase your data, withdraw consent, or raise a complaint.
1. Your rights
Under India's Digital Personal Data Protection Act, 2023 you have the right to:
| Right | What it means |
|---|---|
| Access | A summary of your personal data we process, the processing activities, and the other organisations we shared it with. |
| Correction and completion | Fix inaccurate or misleading data and complete or update it. |
| Erasure | Have your data erased when it is no longer needed for the purpose, unless a law requires us to keep it. |
| Withdraw consent | At any time, as easily as you gave it. Processing before withdrawal remains lawful. |
| Grievance redressal | A readily available way to complain and get a response. |
| Nominate | Name someone to exercise these rights if you die or become incapacitated. |
2. How to make a request
- Email hello@ivirth.in with the subject "Data request".
- Say which right you want to use, which organisation or project the data relates to, and the email address you used with us.
- We may ask for details to confirm it is you. We will not ask for more than we need, and we do not need identity documents to answer a website enquiry.
- We acknowledge your request promptly and aim to respond within 30 days, and always within the timeline set by law.
- If we cannot do what you ask (for example because a law requires us to keep a record), we tell you why.
3. If your data is held inside a school, campus or pilot
Where an institution, city or company is the Data Fiduciary for a deployment, you should make requests to them first. They are responsible for the decision, and we, as processor, will help them respond. If you are not sure who holds your data, write to us and we will tell you or route your request.
4. Grievance Officer
| Detail | Information |
|---|---|
| Name | To be confirmed |
| Designation | Grievance Officer, iViRTH |
| hello@ivirth.in, subject "Grievance" | |
| Registered office | To be confirmed |
| Response | Acknowledgement within 3 working days; resolution within 30 days where possible and always within legal timelines. |
5. If you are not satisfied
Please use our grievance process first. After that, you may make a complaint to the Data Protection Board of India once it is operational. For a cyber-security concern you may also contact CERT-In. These bodies are independent of iViRTH.
6. Marketing and unsubscribes
We send no marketing email unless you asked to hear from us. Every such message has a one-click opt-out, or write "Unsubscribe" to hello@ivirth.in.