DPDP Compliance

Medical Resource Center India (MDRC) is committed to protecting the digital personal data of its users in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act), India’s primary data protection law. This page explains how we comply with your rights under the DPDP Act and how you can exercise them.

Scope and Applicability

The DPDP Act applies to the processing of digital personal data within India, whether by Indian or foreign entities. While MDRC does not collect personal data through user registration or accounts, we may process limited digital personal data through automated means such as website analytics, cookies, and server logs. This page outlines how we handle such data in compliance with the DPDP Act.

Your Rights Under the DPDP Act

Under the DPDP Act, you have the following rights:

• Right to access your digital personal data processed by us
• Right to correction of inaccurate or incomplete data
• Right to withdrawal of consent for any processing based on consent
• Right to grievance redressal if you believe your data rights have been violated

Note: The DPDP Act does not grant rights to data portability or deletion unless the data was provided by you or processed with your consent.

How We Comply

MDRC complies with the DPDP Act by:

• Collecting only minimal digital personal data necessary for website functionality and analytics
• Using anonymized or aggregated data wherever possible
• Not storing personally identifiable information in databases
• Providing clear notice of data collection through our Privacy Policy
• Responding to valid requests from data principals within the legal timeframe

Data We Process

Under the DPDP Act, the types of digital personal data we may process include:

• IP addresses (automatically collected via server logs)
• Browser type and device information (via analytics tools)
• Cookies and similar technologies used for site functionality and performance

We do not collect names, phone numbers, email addresses, or any other directly identifiable information unless voluntarily provided through contact forms.

Legal Basis for Processing

Our processing of digital personal data is based on:

• Legitimate interest – to ensure website security, improve user experience, and analyze traffic for content optimization
• Consent – where cookies or tracking technologies require prior consent under applicable guidelines

We do not process sensitive personal data as defined under the DPDP Act.

How to Exercise Your Rights

To exercise your rights under the DPDP Act, please contact us via email at [email protected] with the subject line: “DPDP Request.” Include:

1. Your full name
2. Your email address (if applicable)
3. A clear description of your request (e.g., access, correction, withdrawal of consent)
4. Any supporting information to help us locate your data

We may ask for additional verification to ensure your identity before processing your request.

Response Timeframes

Under the DPDP Act, we are required to respond to your request within 30 days of receipt. If we require additional time, we will notify you with a reason for the delay.

No Discrimination Policy

We will not deny services, charge different prices, or provide a lower quality of service to you because you exercised your rights under the DPDP Act.

Updates and Changes

We may update this DPDP Compliance page periodically to reflect changes in law or our practices. Any material changes will be posted on this page with an updated effective date.

Contact Information

If you have questions, concerns, or wish to file a complaint regarding your digital personal data, please contact:

Arnav Singh
Email: [email protected]
Address: Buckingham Palace, London SW1A 1AA, United Kingdom

You also have the right to lodge a complaint with the Digital Personal Data Protection Board, established under the DPDP Act, if you are not satisfied with our response.