Privacy notice
Last updated 24 October 2026
This notice explains what personal data the AuditDPDP website collects, why, and how you can exercise your rights under the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the DPDP Rules, 2025.
1. Who we are
AuditDPDP is a service of Xcodefix Global, Coimbatore, Tamil Nadu, India (“we”, “us”). For personal data collected through this website, we are the Data Fiduciary.
2. What we collect and why
| When | Personal data | Purpose |
|---|---|---|
| You request a consultation | Name, work email, phone number, company, industry, team size and your message | To contact you about your request and prepare a training proposal |
| You subscribe to updates | Email address | To send a monthly DPDP briefing |
| You call, email or WhatsApp us | Your number or address and what you tell us | To answer you |
| Any form submission | Date and time, the page you used, your IP address and the version of this notice | To keep a record of your consent and to prevent abuse of our forms |
| Any visit | IP address, browser type and pages requested, in our web server logs | To keep the website secure and investigate misuse |
We do not use advertising or analytics cookies, and this website does not load third-party trackers. Fonts and images are served from our own server.
3. Your consent
We process the data above on the basis of your consent, which you give by ticking the consent box on our consultation form or by subscribing. Server logs are kept to meet our duty to protect personal data with reasonable security safeguards.
You can withdraw consent at any time, as easily as you gave it: email info@auditdpdp.com, or use the unsubscribe link in any newsletter. We will then stop processing and erase your data unless a law requires us to keep it. Withdrawal does not affect processing that took place before it.
4. Who we share it with
We do not sell personal data. We share it only with:
- our web hosting and email providers, who process it on our behalf as Data Processors under contract; and
- authorities, when a law requires us to.
If you choose to contact us on WhatsApp, WhatsApp’s own terms and privacy policy also apply to that conversation.
5. How long we keep it
- Consultation requests: up to 24 months after our last contact with you, unless you become a client, when your contract sets the period.
- Newsletter: until you unsubscribe.
- Consent records: for as long as we need to show that you consented.
- Server logs: up to one year, for security investigations.
When these periods end, we erase the data unless a law requires us to keep it longer.
6. How we protect it
The website uses encrypted HTTPS connections. Form submissions are stored outside the public web folder, and only staff who handle your request can access them.
7. Your rights
Under the DPDP Act you can:
- ask for a summary of the personal data we hold about you and how we use it, and who we have shared it with;
- ask us to correct, complete, update or erase your personal data;
- withdraw consent, as described above;
- raise a grievance with us; and
- nominate another person to exercise your rights if you die or become unable to.
To exercise any right, contact our grievance officer at info@auditdpdp.com or +91 95003 00734. We may ask you to confirm your identity. We will respond as soon as we can, and in any case within 90 days.
8. Complaints to the Data Protection Board
If you are not satisfied with our response to a grievance, you can complain to the Data Protection Board of India after using our grievance process.
9. Children
This website is meant for organisations and is not directed at anyone under 18. We do not knowingly collect children’s personal data. If you believe a child has sent us their details, contact us and we will erase them.
10. Changes to this notice
If we change this notice, we will update the date at the top of this page. We record the version of the notice in force when you gave consent.