DPDP Compliance

Overview

The Digital Personal Data Protection Act 2023 (the DPDP Act) governs how organisations in India collect, store, and process the personal data of individuals. This page explains what personal data Exeed Ventures, LLP, which operates Expertie, holds and how we handle it under the Act.

Expertie is free to use. It has no user accounts and no login. The only personal data we hold is what you choose to send us through a contact or enquiry form (your name, email, and phone number) and the usage data that Google Analytics collects while you browse the site. We do not run advertising or ad-retargeting cookies, and we do not sell personal data.

Lawful basis for processing

Under the DPDP Act, we process personal data only where we have a lawful basis to do so:

• Consent: when you send an enquiry or contact us, we collect only the data needed for that purpose (your name, email, and phone number) with your consent. • Legitimate use and analytics: our website runs Google Analytics 4 to understand how pages are used. It sets first-party analytics cookies (such as _ga and _ga_<id>) and collects usage data, including the pages you view, the site that referred you, your approximate city-level location, and your device and browser type. This data is processed by Google LLC, which uses your IP address only briefly to derive coarse location and does not store it. • Legal obligation: we may process data to comply with a court order or a request from a lawful authority.

Your rights as a data principal

Under the DPDP Act 2023, you have the following rights over the personal data we hold about you:

• Right to access: request a summary of the personal data we hold about you and how it is used. • Right to correction and erasure: ask us to correct inaccurate data or erase data that is no longer needed. • Right to grievance redressal: raise a complaint with our data-protection contact. We acknowledge a grievance within 48 hours and aim to resolve it within 15 working days. • Right to nominate: nominate another person to exercise your rights on your behalf in the event of your death or incapacity.

To exercise any of these rights, email dpdp@expertie.com. We respond to data-principal requests within 30 days, as the Act requires.

Consent management

We collect only the data needed for the specific purpose you consent to. Our approach to consent is:

• Specific: we tell you what data is collected and why before you give consent. • Informed: we use plain language, not legal jargon. • Revocable: you can withdraw consent at any time by emailing dpdp@expertie.com. Withdrawing consent does not affect processing that was lawful before you withdrew.

We do not use pre-ticked boxes or dark patterns. Any optional data collection is opt-in.

Significant Data Fiduciary

Expertie is not currently designated as a Significant Data Fiduciary (SDF) under the DPDP Act. If the platform later crosses the thresholds the Government of India sets for SDF designation, we will take on the additional obligations that apply, including appointing an independent Data Auditor, carrying out a Data Protection Impact Assessment, and designating a formal Data Protection Officer as the Act requires.

Cross-border data transfers

The contact-form data you send us is held on our own systems. Where a third-party service processes data outside India, that transfer is governed by Section 16 of the DPDP Act and any framework the Government of India notifies.

Our use of Google Analytics is one such service. Google LLC processes the usage data described above and may transfer it outside India, including to the United States, under its own cross-border safeguards. We do not transfer personal data to any country the Government of India places on a notified restricted list.

Children's data

Many of Expertie's readers are students under 18, so we want to be plain about how this works today.

Expertie has no user accounts and does not track behaviour or serve targeted advertising to anyone, whatever their age. The only personal data we hold is the contact-form data you choose to send us and the usage data Google Analytics collects, and we do not verify anyone's age. We therefore do not operate an age gate or a parental-consent check.

If you are under 18, we ask that a parent or guardian is involved before you send us your details. If you believe we hold a child's data, email dpdp@expertie.com and we will erase it promptly.

Data-protection contact

As we are not currently a Significant Data Fiduciary, the DPDP Act does not require us to appoint a formal Data Protection Officer. For any privacy question, data-principal request, or regulator enquiry, you can reach our data-protection contact:

Email: dpdp@expertie.com Address: Exeed Ventures, LLP, M-11, Shekhar Central, Palasia Square, Indore, Madhya Pradesh 452001, IN

This is a role-based contact monitored by our team. A named officer is being designated.