DPDP Compliance Policy

01Purpose of This Policy

This policy details:

• The categories of personal data collected through our digital interfaces
• The lawful purposes for which data is gathered and processed
• Security mechanisms employed to protect data integrity
• Data retention and safe disposal periods
• Your statutory rights as a Data Principal
• Our legal responsibilities as a Data Fiduciary under the DPDP Act, 2023

CodeBitel® is committed to lawful processing, transparency, and the highest standards of data security.

02Definitions (As Per DPDP Act, 2023)

• Data Principal: The individual to whom the personal data relates.
• Data Fiduciary: CodeBitel®, the entity determining the purpose and means of processing personal data.
• Data Processor: Any third-party authorized entity that processes digital personal data on behalf of the Data Fiduciary.
• Personal Data: Any data about an individual who is identifiable by or in relation to such data.

03Information We Collect

We collect only necessary and proportionate information required to deliver high-performance web development and hosting services:

Personal Identification Information

• Full name and business designation
• Email address and mobile/WhatsApp number
• Business/organization name and registered city

Technical & Usage Information

• IP address and ISP identification
• Device model, operating system, and browser version
• Session logs, navigation paths, and time-stamped interactions

Business & Project Data

• Project scope, wireframes, functional requirements, and text assets
• API keys and third-party account credentials provided voluntarily for integration setup

Financial Data

• Transaction reference IDs and payment receipts processed via RBI-compliant, secure payment gateways. Full card numbers are never stored by CodeBitel®.

04Purpose of Data Collection

We process personal data strictly to:

• Architect, build, test, and deploy customized web solutions and e-commerce portals
• Maintain regular communication regarding project milestones, deliverables, and client queries
• Issue compliant GST tax invoices and maintain accounting records
• Safeguard infrastructure against cyber threats, DDOS attacks, and unauthorized access
• Comply with applicable Indian statutory and tax regulations

CodeBitel® never sells, rents, leases, or trades personal data to third parties.

05Lawful Basis for Processing

All data processing activities rest on established lawful grounds:

• Free & Informed Consent: Provided explicitly by the Data Principal before data collection.
• Certain Legitimate Uses: Specified under Section 7 of the DPDP Act (contract fulfillment, statutory compliance).
• Legal Compliance: Adherence to Indian tax and corporate laws.

Consent can be withdrawn at any time through written communication to our Data Protection Officer.

06How We Store & Protect Your Data

We implement state-of-the-art security safeguards to protect digital personal data:

• 256-bit TLS encryption for all web communications
• Least-privilege and Role-Based Access Control (RBAC)
• Multi-layer server firewalls and real-time malicious traffic filtering
• Encrypted cloud backups stored in high-security data centers
• Zero-Trust architecture applied across internal development workflows

Data Retention Schedule

Data is stored only for the duration necessary to satisfy the specified purpose or comply with statutory retention requirements (such as 8 years for GST invoice records). Project files and staging instances are deleted upon project completion and account settlement.

07Data Sharing & Third-Party Processors

We share minimal data only with verified partners:

• Authorized cloud hosting infrastructure providers
• RBI-authorized payment gateway aggregators
• Indian regulatory authorities or law enforcement agencies when mandated by law

All Data Processors are contractually bound to maintain strict confidentiality and equivalent security standards.

08Your Rights as a Data Principal

Under Chapter III of the DPDP Act, 2023, you possess enforceable rights:

• Right to Access Information: Obtain a summary of personal data being processed and identities of Data Processors.
• Right to Correction & Erasure: Correct inaccurate data, complete incomplete records, or request deletion of data no longer required.
• Right to Grievance Redressal: Have your complaints addressed promptly by our designated Grievance Officer. See our Grievance Redressal process.
• Right to Nominate: Nominate an individual to exercise your data rights in case of death or incapacity.

09Protection of Children's Data

CodeBitel® does not target or knowingly collect data from individuals under 18 years of age. If any minor's data is inadvertently collected, it will be deleted immediately upon discovery.

10Cookies & Tracking Technologies

We utilize essential and performance cookies to maintain secure sessions and analyze page load speeds. Users can configure browser settings to block cookies without losing access to general content.

11Personal Data Breach Protocol

In the event of a verified personal data breach:

• CodeBitel® will promptly notify the Data Protection Board of India (DPBI) and affected Data Principals in the prescribed manner and form.
• Immediate technical containment, forensic audit, and remediation will be executed.

12Cross-Border Data Transfers

Personal data is transferred outside India only to jurisdictions not restricted by the Central Government of India and in full compliance with DPDP transfer rules.

13Grievance Redressal & Data Protection Officer

14Policy Updates

We may update this DPDP Policy periodically to reflect legislative updates or procedural enhancements. The updated policy becomes effective upon publication.