DPDP Compliance
Central BioTech Gardening is committed to complying with the Digital Personal Data Protection Act, 2023 (DPDP Act), India’s landmark legislation governing the processing of digital personal data. This page explains how we uphold your rights under this law, even though we do not collect or store personal data through user registration or databases.
Scope and Applicability
The DPDP Act applies to the processing of digital personal data within India, regardless of where the data controller is located. While Central BioTech Gardening does not require users to register, create accounts, or submit personal information, we may inadvertently collect limited digital personal data through automated means such as website analytics, server logs, and cookies. This page outlines how we handle such data in compliance with the DPDP Act.
Your Rights Under the DPDP Act
Under the DPDP Act, you have the following rights:
- Right to access information about your digital personal data we hold
- Right to correction of inaccurate or incomplete data
- Right to erasure of your digital personal data
- Right to grievance redressal if you believe your rights have been violated
- Right to nominate another individual to exercise your rights in case of death or incapacity
How We Comply
Although Central BioTech Gardening does not maintain a user database or collect personal data for marketing or profiling purposes, we ensure compliance by:
- Minimizing data collection to only what is necessary for website functionality
- Using anonymized analytics tools that do not identify individuals
- Providing clear notice about cookie usage through our cookie banner
- Not selling, sharing, or transferring personal data to third parties
- Implementing reasonable security measures to protect any incidental data collected
Data We Process
Any digital personal data we may process is limited to:
- IP addresses (anonymized through our analytics platform)
- Browser type and device information (for site optimization only)
- Cookie identifiers (for functional purposes, not tracking)
- Server logs containing access timestamps and pages visited
This data is not linked to names, email addresses, phone numbers, or other identifiers that could directly or indirectly identify you.
Legal Basis for Processing
Our processing of incidental data is based on legitimate interest under Section 5 of the DPDP Act, specifically to:
- Ensure the website functions properly
- Improve user experience and site performance
- Maintain security and prevent fraud
We do not rely on consent for this processing, as it is not required under the DPDP Act for legitimate interest purposes.
How to Exercise Your Rights
If you wish to exercise any of your rights under the DPDP Act, please contact us at the email address below. You may:
- Send an email requesting access, correction, or deletion of your data
- Specify the nature of your request and any relevant details (e.g., IP address, date of visit)
- Provide proof of identity if requested for verification
We will respond without undue delay and within the timeframe mandated by law.
Response Timeframes
Under the DPDP Act, we are required to respond to your requests within 30 days of receipt. In complex cases, we may extend this period by an additional 15 days and will notify you if this occurs.
No Discrimination Policy
Central BioTech Gardening does not and will not discriminate against you for exercising your rights under the DPDP Act. You may request access, correction, or deletion of your data without fear of reduced service, higher prices, or any other penalty.
Updates and Changes
We may update this DPDP Compliance page periodically to reflect changes in the law or our practices. Any material changes will be posted on this page with an updated effective date.
Contact Information
For any inquiries, requests, or grievances regarding your digital personal data under the DPDP Act, please contact:
Dorian Foxley
Email: [email protected]
Address: 1 St Peter's Square, Manchester M2 3DE, United Kingdom
You may also file a complaint with the Digital Personal Data Protection Board if you are unsatisfied with our response.