DPDP Act 2023 Compliance

1. About DPDP Act 2023

The Digital Personal Data Protection Act 2023 (DPDP Act) is India's comprehensive data protection law that governs the processing of digital personal data. As an Indian company, Kloudboy is committed to full compliance with this legislation.

This page outlines our compliance measures and your rights under the DPDP Act.

2. Your Rights Under DPDP Act

The DPDP Act grants you the following rights regarding your personal data:

3. Lawful Basis for Processing

We process your personal data based on the following lawful grounds under the DPDP Act:

Consent

• Marketing communications and promotional offers
• Optional features and services
• Cookies and tracking technologies (non-essential)

Contract Performance

• Providing hosting services as per our agreement
• Processing payments and billing
• Customer support and service delivery

Compliance with Law

• Tax reporting and regulatory compliance
• Legal obligations under Indian law
• Court orders and legal processes

Legitimate Interest

• Fraud prevention and security
• Service improvement and optimization
• Business operations and administration

4. Data Protection Measures

Technical Safeguards

• Encryption of data in transit and at rest
• Access controls and authentication systems
• Regular security audits and vulnerability assessments
• Secure data centers with physical security
• Automated backup and disaster recovery systems

Organizational Measures

• Data protection policies and procedures
• Employee training on data protection
• Privacy by design and by default
• Regular compliance reviews and updates
• Incident response and breach notification procedures

5. Data Retention

We retain your personal data only for as long as necessary to:

• Fulfill the purposes for which it was collected
• Comply with legal and regulatory requirements
• Resolve disputes and enforce our agreements
• Protect against fraud and security threats

Specific retention periods are outlined in our Privacy Policy and vary based on the type of data and purpose of processing.

6. Cross-Border Data Transfers

When we transfer your personal data outside India, we ensure adequate protection through:

• Transfers to countries with adequate data protection laws
• Standard contractual clauses approved by the Data Protection Board
• Binding corporate rules and certification schemes
• Explicit consent for specific transfers when required

7. Children's Data Protection

We take special care to protect children's personal data:

• We do not knowingly collect data from children under 18 without verifiable parental consent
• Parents can review, modify, or delete their child's personal data
• We implement additional safeguards for processing children's data
• We provide clear and age-appropriate privacy notices

8. Data Breach Response

In case of a personal data breach, we will:

• Notify the Data Protection Board within 72 hours
• Inform affected individuals without undue delay
• Take immediate steps to contain and remedy the breach
• Conduct a thorough investigation and implement preventive measures
• Maintain detailed records of all data breaches

9. Exercising Your Rights

How to Submit a Request

You can exercise your rights under the DPDP Act by:

• Emailing our Data Protection Officer at dpo@kloudboy.com
• Using our online privacy request form
• Contacting our customer support team
• Writing to our registered office address

Response Timeline

We will respond to your request within the timeframes specified in the DPDP Act, typically within 30 days of receiving a complete request.

10. Grievance Redressal

If you have any grievances regarding the processing of your personal data:

Internal Grievance Officer

Contact our Grievance Officer who will address your concerns promptly and fairly.

Data Protection Board

If you're not satisfied with our response, you can approach the Data Protection Board of India for further redressal.

11. Contact Information

For DPDP Act related queries or to exercise your rights: