DPDP Compliance
Big Fat Indian Recipes is committed to respecting your rights under the Digital Personal Data Protection Act, 2023 (DPDP Act), India’s landmark legislation governing the processing of digital personal data. This page explains how the DPDP Act applies to our website and how you can exercise your rights.
Scope and Applicability
Although Big Fat Indian Recipes does not require users to register or store personal data in a database, we may collect limited digital personal data through automated means such as web analytics, cookies, and server logs. This includes IP addresses, browser type, and usage patterns. Under the DPDP Act, such data is considered digital personal data when it can identify an individual directly or indirectly.
Your Rights Under DPDP
As a data principal under the DPDP Act, you have the following rights:
- Right to access your digital personal data processed by us
- Right to correction of inaccurate or incomplete data
- Right to deletion of your data
- Right to withdraw consent for any processing based on your consent
- Right to grievance redressal if you believe your rights have been violated
How We Comply
We do not collect personal data for marketing, profiling, or sale. Any data collected is used solely for analytical purposes to improve website experience and is retained only as long as necessary. We do not share data with third parties except for essential service providers like Google Analytics, who are contractually bound to comply with Indian data protection standards. We have implemented technical safeguards to ensure data minimization and security.
Data We Process
The only digital personal data we process includes:
- IP addresses (anonymized where possible)
- Browser and device information
- Pages visited and time spent
- Cookie identifiers (session and preference cookies)
This data is not linked to names, emails, phone numbers, or other identifiers unless voluntarily provided via our contact form.
Legal Basis for Processing
Our processing of digital personal data is based on legitimate interest under Section 5(2) of the DPDP Act, as it is necessary for the functioning of our informational website and to provide improved content and user experience. We do not rely on consent for this processing, as it is not required for legitimate interests under the Act.
How to Exercise Your Rights
To exercise any of your rights under the DPDP Act, please send a request to our Data Protection Officer via email at [email protected]. Include:
- Your full name
- Your email address or any identifier you used on the site
- A clear description of the right you wish to exercise
- Any supporting details to help us locate your data
We will respond without undue delay and within 30 days of receiving your request.
Response Timeframes
Under the DPDP Act, we are required to respond to your requests within 30 days. If we need additional time, we will notify you with reasons for the delay.
No Discrimination Policy
We will not deny you access to our content, charge you fees, or provide inferior service because you have exercised your rights under the DPDP Act.
Updates and Changes
We may update this DPDP Compliance page periodically to reflect changes in law or our practices. The most recent version will always be posted here with an updated effective date.
Contact Information
If you have questions, concerns, or wish to file a complaint regarding your digital personal data, please contact:
Archer Thorncroft
49 Manners Street, Te Aro, Wellington 6011, New Zealand
Email: [email protected]
You also have the right to lodge a complaint with the Digital Personal Data Protection Board established under the DPDP Act.
