Where the law stands
The Government notified the DPDP Rules on 13 November 2025. Most duties for businesses, including this kind of notice, consent and your rights, apply from 13 May 2027. We follow this notice now.
This notice adds to our Privacy Policy. It is written for people in India whose personal data we process.
Who is responsible for your data
Under the Act, the "Data Fiduciary" decides why and how your data is processed. For this website and our services, that is Digital Mansoor, the SEO consulting practice of Mansoor Bhanpurawala, Ahmedabad, Gujarat, India.
Contact for data questions: Mansoor Bhanpurawala, [email@digitalmansoor.com], WhatsApp +91 90331 72192.
What we process and why
| Personal data | Purpose | Basis |
|---|---|---|
| Name, phone number, WhatsApp messages | Reply to your enquiry and arrange a call | Your consent |
| Name, email, booking answers (via Calendly) | Schedule and hold your call | Your consent |
| Website URL, business details, account access you share | Prepare your audit, proposal or project work | Your consent |
| Comment name, email, website, IP address | Publish your comment and block spam | Your consent |
| Billing name, address, GSTIN, payment records | Invoice you and meet tax and accounting law | Legal obligation (a legitimate use under Section 7) |
| IP address, browser details in server logs | Keep the site secure | Legitimate use, as the law allows |
We use your data only for the purpose we collected it for. We do not sell it or use it for advertising.
Giving and withdrawing consent
You give consent by a clear action, such as sending us a message, booking a call or submitting a comment. You can withdraw consent at any time by emailing or messaging us. Withdrawing is as easy as giving consent.
Once you withdraw, we stop processing that data and delete it, unless a law requires us to keep it. Processing that happened before you withdrew stays lawful. If you withdraw while a project is running, we may not be able to finish the work that depends on that data.
Your rights as a Data Principal
- Access: ask for a summary of your personal data we hold, how we process it, and who we have shared it with.
- Correction and erasure: ask us to correct, complete, update or delete your data.
- Grievance redressal: raise a complaint with us and get a response.
- Nomination: name someone to exercise your rights if you die or cannot act yourself.
To use any right, contact us using the details above. We may ask you to confirm your identity first.
Grievances and complaints
Send any grievance to [email@digitalmansoor.com]. We aim to respond within [30 days].
If you are not satisfied after using our grievance process, you can complain to the Data Protection Board of India. The Act asks you to raise the matter with us first.
Your duties
The Act also asks Data Principals not to give false information, impersonate others, or file frivolous complaints.
Children
The Act treats anyone under 18 as a child. Our services are for businesses and we do not knowingly process children's data. If a child has sent us personal data, we will delete it once we know.
Data breaches
If a breach affects your personal data, we will inform you and the Data Protection Board as the Rules require, including what happened, the likely impact and what we are doing about it.
Retention and transfers
We keep data only as long as its purpose needs, or longer where a law requires it. See the Privacy Policy for specific periods. Some tools we use, such as Calendly and WhatsApp, may process data outside India.