India DPDPA Disclosures & Grievance Officer

1. Who this page is for

This notice applies to Data Principals located in India whose personal data is processed by Gurdwaras.com. It is published to comply with the Digital Personal Data Protection Act, 2023 (“DPDPA”) and the rules notified thereunder.

For users outside India, our global Privacy Policy applies. EU/UK users additionally have the GDPR rights set out in that policy.

2. Data Fiduciary

For the purposes of the DPDPA, the Data Fiduciary is Gurdwaras.com, operating the website at gurdwaras.com. You may contact us via /contact or by writing to the Grievance Officer below.

3. Categories of personal data we process

• Account identifiers: name, email, profile photo (if uploaded)
• Location: city/country of residence (self-supplied), and browser-derived approximate region for the “Nearby Gurdwaras” feature
• Religious affiliation: implied by use of the platform; you may use the platform without disclosing it explicitly
• Matrimonial profile data (only if you create a matrimonial profile): age, marital status, gotra, education, photos, free-text bio
• Payment metadata: amount, currency, donation/booking purpose. Card details are processed by Stripe and never touch our systems.
• Behavioural: pages viewed, gurdwaras saved, sangat memberships joined. Subject to the cookie consent banner.

4. Purpose & legal basis of processing

We process the data above to provide the directory, donations, prayer bookings, matrimonials, marketplace, and community features you request. Sensitive personal data (religious affiliation, matrimonial profile) is processed only on the basis of your explicit consent given when you create the relevant profile or perform the relevant action.

You may withdraw consent at any time via /settings. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

5. Your rights as a Data Principal

The DPDPA gives you the right to:

• Access a summary of the personal data being processed and the processing activities undertaken. Use Download my data (JSON) in /settings.
• Correct, complete, update, and eraseyour personal data. Inline editing in /settings handles corrections; the “Delete account” button there erases user-owned content and anonymises retained records (see our retention policy below).
• Grievance redressal — the readily available means is the Grievance Officer in section 7 below.
• Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity. Contact the Grievance Officer to file a nomination.

6. Retention

We retain personal data only as long as necessary for the purpose it was collected, or as required by Indian law:

• Donation & payment records: retained for 8 years for tax-record reconciliation, in line with the Income Tax Act and Section 36 of the Companies Act.
• Matrimonial profile & messages: deleted on account closure.
• Server logs: 30 days, then aggregated.
• Audit log of admin actions:7 years, for trust & safety review.

7. Grievance Officer

In compliance with Section 8(9) of the DPDPA, the Grievance Officer for Gurdwaras.com is:

We respond to all DPDPA grievances within 30 days of receipt, as required by the Act. If you are not satisfied with our response, you may file a complaint with the Data Protection Board of India under Section 27.

8. Cross-border transfer

Our infrastructure is hosted on Vercel (United States) and Supabase (United States, Singapore). Personal data may be transferred to and processed in those jurisdictions in accordance with our contractual safeguards with each processor. We do not transfer data to any country to which transfers are restricted by the Government of India under Section 16(1) of the DPDPA.

9. Updates to this notice

We will notify you of material changes via the email address on your account. The version date at the top of this page reflects the most recent revision.