1.Your rights as a Data Principal
The Digital Personal Data Protection Act, 2023 calls you a Data Principal. For personal data where AOZO is the Data Fiduciary, you have these rights:
| Right | What it means | DPDP Act |
|---|---|---|
| Access to information | A summary of your personal data we process and what we do with it, plus the identities of others we have shared it with and a description of the data shared | Section 11 |
| Correction and completion | We correct inaccurate or misleading data and complete incomplete data | Section 12 |
| Updating | We update your data when it changes | Section 12 |
| Erasure | We erase your data unless we need to keep it for a specified purpose or to comply with a law | Section 12 |
| Grievance redressal | A readily available way to raise a complaint, and a response | Section 13 |
| Nomination | Name a person who can exercise your rights if you die or are unable to | Section 14 |
| Withdraw consent | Withdraw a consent you gave, as easily as you gave it | Section 6(4) |
2.How to make a request
- Email privacy@aozo.in from the address linked to your account, or use the privacy options in your account settings.
- Tell us which right you want to use, and what you want us to do.
- Include enough detail to find your data: the email or phone number on your account and the workspace name, if relevant.
- We may ask a few questions to confirm that you are the person the data is about. We will only ask for what is needed for this.
Please do not send us identity documents unless we ask. There is no fee for a reasonable request.
3.What happens next
- We acknowledge your request promptly.
- We respond within the time limit set by the DPDP Rules, and we aim to do so sooner.
- If we cannot do what you ask, for example because the law requires us to keep a record, we will tell you why and what we can do.
- When we erase data, we also ask our processors to erase it. Copies in backups leave on their normal cycle.
4.Withdrawing consent
You can withdraw consent at any time from your account settings, the unsubscribe link in our emails, or by writing to us. Withdrawing is as simple as agreeing was.
After you withdraw, we stop processing the data for that purpose within a reasonable time and delete it unless a law requires us to keep it. Anything we did lawfully before you withdrew stays valid. If withdrawal means a feature can no longer work, we will tell you.
5.Nominating someone
You may nominate another individual to exercise your rights in the event of your death or incapacity. Write to privacy@aozo.in with the nominee's name and contact details. We will record your nomination and verify the nominee when they contact us.
6.Raising a grievance
If you are unhappy with how we have handled your data or your request, you can raise a grievance. We will look into it fairly and tell you the outcome.
| Contact | Details |
|---|---|
| Grievance Officer | [Name of Grievance Officer] |
| grievance@aozo.in | |
| Post | [Registered legal entity name], [Registered office address], India |
To help us, include your name, how to reach you, what happened, what you expect us to do, and any reference number from earlier messages.
7.Complaining to the Data Protection Board
If our grievance process does not resolve your concern, or we do not respond in the prescribed time, you can complain to the Data Protection Board of India. You can also complain to the Board about a personal data breach. The Board expects Data Principals to try the Data Fiduciary's grievance process first.
8.Your duties
Section 15 of the DPDP Act places a few duties on Data Principals. In short, please:
- Follow all applicable laws when you exercise your rights.
- Not impersonate anyone or hide your identity to make a request.
- Not suppress material information when giving us your data for an official identity document.
- Not file false or frivolous grievances or complaints.
- Give us only verifiably authentic information when asking for correction or erasure.