Data Protection (DPDP Act)
Last updated: 4 October 2026
Dharam Digital Private Limited (“Dharam Digital”, “we”) is a company incorporated in India. This notice explains how we act as a Data Fiduciary under the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the rules made under it, for personal data we process through this website (dharam.net) and in our business dealings with partners. Each of our consumer products (for example RTST.ai, DocxBuddy or SecuremeVPN) publishes its own privacy policy, which applies to that product.
1. Who is responsible
Data Fiduciary: Dharam Digital Private Limited
710-711, Tower B, Emaar Digital Greens, Sector 61, Gurgaon 122001, Haryana, India
Grievance Officer: Jalaj Gupta, support@dharam.net (subject: “Data protection request”)
2. What personal data we process and why
| Data | Purpose | Basis |
|---|---|---|
| Name, email, company, phone and the content of your message, when you write to us | To reply, and to discuss and manage a partnership, enquiry or job application | Your consent, given when you contact us; or a legitimate use where you voluntarily provide data for that purpose |
| Business contact details of partners (operators, aggregators, media partners, vendors) | To perform and administer our contracts | Your voluntary provision of the data for this purpose (DPDP Act, s. 7(a)), where you have not objected to its use |
| Technical data our hosting provider records (IP address, browser, pages requested, time) | To deliver and secure the website | Legal basis being confirmed with counsel. These logs are kept only to deliver and secure the site, for a short period. |
| CVs and application details | To assess your application | Your consent |
This website does not use advertising or analytics cookies, and it does not track you across other sites. See our Cookie Policy.
3. Consent
Where we rely on consent, it must be free, specific, informed, unconditional and unambiguous, given by a clear affirmative action, and limited to the data needed for the stated purpose. You can withdraw consent at any time, as easily as you gave it, by writing to the Grievance Officer. Withdrawal does not affect processing already carried out, and once you withdraw we stop processing for that purpose (and ask any processor acting for us to stop) within a reasonable time, unless the law requires us to keep the data.
You may also give, manage or withdraw consent through a Consent Manager registered with the Data Protection Board of India, where that is available for our services.
4. Your rights as a Data Principal
- Right to information: a summary of the personal data we process about you, the processing activities, and the identities of the other Data Fiduciaries and Data Processors we have shared it with.
- Right to correction and erasure: to correct inaccurate or misleading data, complete incomplete data, update data, and erase data that is no longer needed for the purpose, unless we must keep it by law.
- Right to grievance redressal: to have a complaint about our handling of your data addressed by us.
- Right to nominate: to nominate another person to exercise your rights if you die or become incapable.
To exercise a right, email the Grievance Officer with your request and enough detail for us to find your data. We may ask you to confirm your identity. We will respond within the period set by the DPDP Act and its rules.
5. Your duties
The DPDP Act also asks Data Principals not to impersonate another person, not to suppress material information, not to register false or frivolous complaints, and to provide only verifiably authentic information when asking for correction or erasure.
6. Children
This website is meant for businesses and adults. We do not knowingly process personal data of anyone under 18 through it. Where any of our services processes a child’s data, we obtain verifiable consent from a parent or lawful guardian, and we do not undertake tracking, behavioural monitoring or targeted advertising directed at children.
7. Retention
We keep personal data only as long as needed for the purpose it was collected for, or as required by law (for example tax and accounting records). When the purpose is no longer served, or you withdraw consent, we erase the data and ask our processors to erase it too, unless retention is required by law.
8. Security and breaches
We use reasonable security safeguards, including access controls, encryption in transit and limited access on a need-to-know basis, to prevent personal data breaches. If a personal data breach occurs, we will notify the Data Protection Board of India and each affected Data Principal in the form and within the time required by the DPDP Act and its rules.
9. Sharing and transfers
We share personal data only with service providers who process it on our behalf (such as hosting and email providers) under contract, with our group companies DDT FZCO (Dubai) and Visatech S.R.L. (Milan) where needed to handle your enquiry, and where the law requires. Personal data may be processed outside India, except to any country the Government of India restricts.
10. Grievances and the Data Protection Board
Please contact the Grievance Officer first; we will try to resolve your grievance within the period set by the DPDP Act and its rules. If you are not satisfied with our response, you may complain to the Data Protection Board of India.
11. Language
You can ask for this notice in English or in any language listed in the Eighth Schedule to the Constitution of India by writing to the Grievance Officer.
12. Changes
We will update this notice when our practices or the law change, and show the date of the latest version at the top.