DPDP Compliance

The Digital Personal Data Protection Act, 2023 (DPDP) is India's comprehensive data protection law, designed to safeguard the rights of individuals regarding their personal data. This page explains how the Varanasi Diocese Community Network complies with the DPDP and outlines your rights as a data principal.

Scope and Applicability

The DPDP applies to the processing of digital personal data within India. While the Varanasi Diocese Community Network does not collect or store personal data through user registration or databases, it may process limited personal data automatically through website analytics, cookies, and server logs to improve user experience and site functionality. This processing is minimal and strictly limited to non-identifiable or aggregated data where possible.

Your Rights Under DPDP

As a data principal, you have the following rights under the DPDP:

• Right to access information about how your personal data is being processed
• Right to correction of inaccurate or incomplete personal data
• Right to erasure of your personal data, where applicable
• Right to grievance redressal if you believe your rights have been violated
• Right to nominate another individual to act on your behalf in case of incapacity or death

Please note: Since our website does not collect personal data through forms, accounts, or tracking systems, most of these rights may not apply directly. However, we honor all legitimate requests in good faith.

How We Comply

We comply with the DPDP by:

• Minimizing data collection to only what is necessary for site functionality
• Using anonymized or aggregated data for analytics where possible
• Not storing personal data in identifiable databases
• Providing clear and accessible channels for data principal requests
• Ensuring third-party services (e.g., analytics tools) adhere to DPDP standards

Data We Process

The only data we may process includes:

• IP addresses (anonymized where feasible)
• Browser type and device information
• Pages visited and time spent on site (aggregated, not individually identifiable)
• Cookie data for session management and site performance

No names, emails, phone numbers, or other personally identifiable information are collected unless voluntarily provided via our contact form.

Legal Basis for Processing

Our processing of data is based on:

• Legitimate interest in maintaining website functionality and user experience
• Consent where cookies or tracking tools require it under DPDP guidelines

We do not process sensitive personal data or data of children without explicit consent.

How to Exercise Your Rights

To exercise your rights under the DPDP, please contact us via email at [email protected]. Include:

1. Your full name
2. Your contact details
3. A clear description of your request (e.g., access, correction, deletion)
4. Any supporting information to help us identify your data

We will respond to your request within 30 days of receipt.

Response Timeframes

Under the DPDP, we are required to respond to data principal requests within 30 days. In exceptional circumstances, we may extend this period by an additional 15 days and will notify you of the delay with reasons.

No Discrimination Policy

We will not deny, charge different prices, or provide a different quality of service to you because you exercised your rights under the DPDP. You are free to request access, correction, or deletion of your data without fear of retaliation or disadvantage.

Updates and Changes

This DPDP Compliance page will be reviewed annually and updated as needed to reflect changes in the law or our data practices. Any material changes will be posted here with an updated effective date.

Contact Information

If you have questions, concerns, or wish to file a complaint regarding your data rights under the DPDP, please contact:

Lennox Fairchild
10 The Crescent, Indooroopilly QLD 4068, Australia
[email protected]

You may also lodge a complaint with the Data Protection Board of India if you are unsatisfied with our response.