Privacy Policy

ConsentArc is operated by DPDPA Shield Technologies Private Limited (Delhi NCR, India), referred to here as “we” or “us”. For the personal data described in this policy, we are the Data Fiduciary under the Digital Personal Data Protection Act, 2023.

This policy does not cover personal data that our customers collect and manage using the ConsentArc product. For that data we act as a Data Processor on our customer's behalf, and their own privacy notice applies. See our Data Processing Agreement.

• Details you give us when you contact us or request a demo: your name, work email, phone number, company, website and your message.
• Your email address, if you subscribe to our DPDPA updates.
• Your cookie choices on this website, stored in your own browser so we can respect them.
• Usage information, only if you allow analytics cookies.

• To reply to your enquiry, arrange a demo and prepare a proposal.
• To send DPDPA updates, if you asked for them. You can unsubscribe at any time.
• To run and secure this website.
• With your consent, to understand how the site is used and improve it.

Where we ask for your consent, we rely on it under Section 6 of the Act, and you can withdraw it at any time. Where you voluntarily give us your details for a specific purpose, such as asking for a demo, we use them for that purpose as a legitimate use permitted under Section 7.

We share personal data only with service providers who help us run our website and email, and only so far as they need it to do that work for us. We do not sell personal data.

We may also disclose information where the law requires us to.

Records held in the ConsentArc product are stored in India, in AWS Mumbai (ap-south-1). Enquiries you email to us are handled through our business email provider.

We keep your details only as long as we need them for the purpose you gave them for, then delete them, unless the law requires us to keep them longer.

Under the Act you can:

• Ask for a summary of the personal data we hold about you (Section 11).
• Ask us to correct, complete, update or erase it (Section 12).
• Raise a grievance with us (Section 13).
• Nominate someone to exercise these rights for you in the event of death or incapacity (Section 14).
• Withdraw your consent at any time, as easily as you gave it (Section 6).

To use any of these rights, write to support@consentarc.com. To change your cookie choices, use Cookie settings in the footer of any page.

This website is meant for businesses and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has sent us their details, contact us and we will delete them.

We use reasonable security safeguards to protect personal data against unauthorised access, loss or misuse, and limit access to the people who need it.

Our Grievance Officer can be reached at support@consentarc.com. We will respond within the time the law requires. If you are not satisfied with our response, you may approach the Data Protection Board of India.

We will update this page if our practices change, and show the date of the latest version at the top. If a change is significant, we will make it clear on the website.