Data Principal Statutory Rights
Exercise your statutory privacy rights under Chapter III of the Digital Personal Data Protection Act, 2023. Guaranteed 48-hour acknowledgment and 30-day resolution SLA.
Statutory Framework: Chapter III of the DPDP Act, 2023
The Digital Personal Data Protection Act, 2023 (Act No. 22 of 2023) establishes a comprehensive charter of statutory rights for every citizen whose digital personal data is processed by a Data Fiduciary. At Gizcalc, we have embedded these rights into our technical architecture. Below is an exhaustive explanation of your legally enforceable rights under Sections 11 through 14 of the Act, along with instructions on how to exercise each right:
1. Right to Access Information About Personal Data (Section 11)
Upon submitting an access request, you have the statutory right to receive from Gizcalc:
- A clear, concise summary of the digital personal data concerning you that is actively being processed by Gizcalc.
- A detailed description of the processing operations undertaken with respect to that personal data.
- The exact identities of all Data Processors (e.g., Cloudflare, cloud hosting providers, transactional email relays) with whom your personal data has been shared, along with a description of the data shared.
2. Right to Correction & Updating of Personal Data (Section 12(1)(a))
If any personal data maintained by Gizcalc is inaccurate, misleading, or outdated, you possess the right to demand its prompt rectification. Registered account holders can update their name and profile information instantly via their Account Dashboard, or submit a formal correction request using the intake form above.
3. Right to Completion of Incomplete Data (Section 12(1)(b))
Where your account records or statutory profile contains incomplete data fields necessary for lawful platform services, you have the right to furnish supplementary information to ensure completeness.
4. Right to Permanent Erasure / Account Deletion (Section 12(1)(c))
You have the absolute right to demand the irreversible deletion of your registered account, personal identifiers, calculation history, and telemetry records when:
- The personal data is no longer necessary for the purpose for which it was originally collected.
- You withdraw the consent upon which processing was based, and no other statutory ground applies.
Two Ways to Delete Your Data:
- Instant Self-Service: Log in to your Account Dashboard, scroll to the "Danger Zone" section, and click "Delete My Account". Your account and saved calculation records will be expunged instantly.
- Formal Verification Intake: If you cannot access your account, select "Right to Erasure" in the intake form above. Our Grievance Office will verify your identity and finalize deletion across all databases within 30 days.
5. Right of Grievance Redressal (Section 13)
If you experience any deficiency in service, delayed rights fulfillment, or suspected security breach by Gizcalc, you have the statutory right to have your complaint investigated and redressed by our appointed Grievance Officer within a maximum period of 30 calendar days. We guarantee an automated reference token and acknowledgment within 48 hours.
6. Right to Nominate (Section 14)
Section 14 of the DPDP Act 2023 grants you the novel right to nominate any individual who shall, in the unfortunate event of your demise or legal incapacity, exercise all statutory Data Principal rights on your behalf. To register a nominee for your Gizcalc account, select "Right to Nominate" in the form above and provide the nominee's full name, email, phone number, and relationship.
7. Right to Withdraw Consent (Section 6(4))
You may revoke any previously granted consent at any time without negative consequence. Revocation halts all ongoing non-essential processing immediately, while maintaining the lawfulness of past operations conducted prior to withdrawal.
8. Statutory Duties of Data Principals (Section 15)
The DPDP Act 2023 balances rights with statutory duties. While exercising your rights on Gizcalc, you are obligated under Section 15 to: (a) not impersonate another person, (b) not suppress material facts or provide false information, and (c) not register frivolous, malicious, or false grievances. Violations are punishable under the Act with regulatory penalties.
