Legal & Compliance

Digital Personal Data Protection (DPDP) Act, 2023

Last updated: September 2026 | Effective for all Indian Data Principals

Contents

Introduction Data Principal Rights Consent & Notice Our Obligations Privacy Contact & Grievance Officer Grievance Redressal
Effective Date: September 2026

01 Introduction

Gruvora Living ("we", "our", "us") is fully committed to upholding the privacy and security of personal data in accordance with the Digital Personal Data Protection (DPDP) Act, 2023 of India. This compliance page outlines our role as a Data Fiduciary and your rights as a Data Principal when you use our platform for booking hotels or listing properties in Gujarat and across India.

02 Rights of the Data Principal

Under the DPDP Act, 2023, you (the Data Principal) possess the following rights regarding your personal data:

  • Right to Information: You have the right to obtain a summary of personal data being processed by us and the processing activities undertaken.
  • Right to Correction & Erasure: You can request the correction of inaccurate data, completion of incomplete data, updating of data, and the erasure of personal data that is no longer necessary for the purpose it was collected.
  • Right of Grievance Redressal: You have the right to readily available means of registering a grievance with us regarding your data.
  • Right to Nominate: You have the right to nominate any other individual, who shall, in the event of your death or incapacity, exercise your rights under the Act.

How to Delete Your Account & Personal Data (DPDP Act Section 12)

In accordance with Section 12 of the DPDP Act 2023, you have the right to delete your Gruvora Living account and request permanent erasure of your personal data:

  • Method 1 (Self-Service): Go to your Account Profile > Settings > Security > click "Delete Account" and verify via OTP.
  • Method 2 (Email Request): Email our Grievance Officer at [email protected] with subject "Request for Account Deletion (DPDP Act s.12)".

Timelines: Account access is suspended within 24 hours, and personal data is permanently erased from active databases within 30 days. Completed tax invoices and police lodging registry records are retained strictly in encrypted cold storage for the statutory limitation period required by Indian law.

04 Our Obligations as a Data Fiduciary

As a Data Fiduciary under the DPDP Act, Gruvora Living adheres to the following principles:

  • Purpose Limitation: Data is used solely for the exact purpose for which consent was obtained (e.g., booking management, owner onboarding).
  • Data Minimization: We collect only the data strictly necessary for our services.
  • Data Retention: We do not retain personal data beyond the time necessary to fulfill its purpose.
  • Reasonable Security Safeguards: We employ industry-standard encryption, access controls, and security practices to prevent personal data breaches.
  • Breach Notification: In the unlikely event of a personal data breach, we are legally mandated to notify the Data Protection Board of India and the affected Data Principals.

05 Privacy Contact & Grievance Officer

Gruvora Living is committed to protecting the privacy and personal data of its users in accordance with applicable data protection laws in India, including the Digital Personal Data Protection Act, 2023 (DPDP Act).

For any questions, concerns, complaints, or requests relating to the collection, use, storage, processing, or protection of your personal data, you may contact our designated Privacy Contact Person.

Business Name: Gruvora Living
Business Type: Individual Proprietorship
Privacy Contact Person: Chandresh Rathod
Designation: Privacy Contact Person & Grievance Officer

Privacy-Related Requests

You may contact us regarding:

  • Collection and processing of your personal data.
  • Correction or updating of personal information.
  • Erasure of personal data, subject to applicable legal requirements.
  • Withdrawal of consent.
  • Privacy-related complaints and grievances.
  • Concerns regarding unauthorized access or misuse of personal data.

We will review and address privacy-related requests and grievances within the timelines prescribed under applicable laws.

06 Grievance Redressal

Users may submit their privacy-related concerns by emailing [email protected]. We will handle such requests in accordance with applicable provisions of the Digital Personal Data Protection Act, 2023 and the rules made thereunder.

Data Protection Grievance Desk

Chandresh Rathod • Grievance Officer • [email protected]

Contact Form