DPDP Compliance

Car Craft Studio is committed to respecting your rights under the Digital Personal Data Protection Act, 2023 (DPDP Act), India’s landmark legislation governing the processing of digital personal data. This page explains how we comply with the DPDP Act and how you can exercise your rights as a data principal.

Scope and Applicability

The DPDP Act applies to the processing of digital personal data within India. Car Craft Studio, as a data fiduciary, collects limited personal data only through voluntary interactions such as contact form submissions or newsletter sign-ups. We do not maintain user accounts, store personal data in databases, or engage in automated profiling. Our data processing is strictly limited to what is necessary for communication and service delivery.

Your Rights Under the DPDP Act

As a data principal, you have the following rights under the DPDP Act:

• Right to access your digital personal data held by us
• Right to correction of inaccurate or incomplete data
• Right to deletion of your data
• Right to grievance redressal if you believe your rights have been violated
• Right to nominate another individual to exercise your rights in case of death or incapacity

How We Comply

Car Craft Studio complies with the DPDP Act by:

• Collecting personal data only with clear consent via opt-in forms
• Limiting data collection to name and email address for communication purposes
• Not retaining data longer than necessary (typically 12 months after last interaction)
• Ensuring all data is stored securely and accessed only by authorized personnel
• Providing transparent mechanisms for exercising your rights

Data We Process

We process the following types of digital personal data:

• Name
• Email address

This data is collected solely through our contact form or newsletter subscription form. We do not collect phone numbers, location data, or any sensitive personal data as defined under the DPDP Act.

Legal Basis for Processing

Our processing of your data is based on your explicit consent given at the time of form submission. We do not rely on legitimate interest or other legal bases under the DPDP Act. You may withdraw your consent at any time.

How to Exercise Your Rights

To exercise any of your rights under the DPDP Act, please send a request to our Data Protection Officer at:

[email protected]

Your request must include:

1. Your full name
2. Your email address associated with us
3. Specific right you wish to exercise (e.g., access, deletion)
4. Any supporting information to help us locate your data

We will acknowledge your request within 5 business days and respond fully within 30 days.

Response Timeframes

Under the DPDP Act, we are required to respond to your requests within 30 days of receipt. In exceptional circumstances, we may extend this period by an additional 15 days and will notify you of the delay with reasons.

No Discrimination Policy

Car Craft Studio does not and will not discriminate against you for exercising your rights under the DPDP Act. Withdrawing consent or requesting deletion of your data will not affect your ability to access public content on our website.

Updates and Changes

We may update this DPDP Compliance page periodically to reflect changes in law or our practices. Any material changes will be posted here with an updated effective date. We recommend reviewing this page regularly.

Contact Information

For any questions, requests, or complaints regarding your data under the DPDP Act, please contact:

Arthur Reynolds
Data Protection Officer
Car Craft Studio
HDFC Bank Ltd., Mathias Plaza, 18th June Road
Panaji, Goa 403001, India
Email: [email protected]

You also have the right to lodge a complaint with the Digital Personal Data Protection Board, established under the DPDP Act, if you are not satisfied with our response.