01 Introduction
Gruvora Living ("we", "our", "us") is fully committed to upholding the privacy and security of personal data in accordance with the Digital Personal Data Protection (DPDP) Act, 2023 of India. This compliance page outlines our role as a Data Fiduciary and your rights as a Data Principal when you use our platform for booking hotels or listing properties in Gujarat and across India.
02 Rights of the Data Principal
Under the DPDP Act, 2023, you (the Data Principal) possess the following rights regarding your personal data:
- Right to Information: You have the right to obtain a summary of personal data being processed by us and the processing activities undertaken.
- Right to Correction & Erasure: You can request the correction of inaccurate data, completion of incomplete data, updating of data, and the erasure of personal data that is no longer necessary for the purpose it was collected.
- Right of Grievance Redressal: You have the right to readily available means of registering a grievance with us regarding your data.
- Right to Nominate: You have the right to nominate any other individual, who shall, in the event of your death or incapacity, exercise your rights under the Act.
03 Consent & Notice
We process your personal data only upon receiving explicit, clear, and affirmative Consent, except for certain legitimate uses defined under the Act (such as compliance with judgments or legal obligations).
Before obtaining consent, we provide a Notice detailing:
- The specific personal data to be collected.
- The specific purpose for which the data will be processed.
- How you can exercise your right to withdraw consent at any time.
04 Our Obligations as a Data Fiduciary
As a Data Fiduciary under the DPDP Act, Gruvora Living adheres to the following principles:
- Purpose Limitation: Data is used solely for the exact purpose for which consent was obtained (e.g., booking management, owner onboarding).
- Data Minimization: We collect only the data strictly necessary for our services.
- Data Retention: We do not retain personal data beyond the time necessary to fulfill its purpose.
- Reasonable Security Safeguards: We employ industry-standard encryption, access controls, and security practices to prevent personal data breaches.
- Breach Notification: In the unlikely event of a personal data breach, we are legally mandated to notify the Data Protection Board of India and the affected Data Principals.
05 Data Protection Officer (DPO)
To ensure strict adherence to the DPDP Act, 2023, we have appointed a dedicated Data Protection Officer who acts as the primary point of contact for all data privacy matters.
Contact our DPO:
Email: dpo@gruvora.com
Address: Gruvora Living Corporate Office, Surat, Gujarat, India.
06 Grievance Redressal Mechanism
If you wish to exercise your rights, withdraw consent, or raise a concern regarding how your personal data is handled, you may submit a grievance to our Data Protection Officer.
We are committed to resolving all grievances within 7 working days. If you are unsatisfied with our resolution, you have the legal right to appeal to the Data Protection Board of India.