GDPR & DPDP Compliance.
At Rdelab Technologies, we are committed to protecting your data. Learn how we comply with the European GDPR and the Indian DPDP Act.
🇪🇺 GDPR (General Data Protection Regulation)
We fully comply with the GDPR (EU) 2016/679, which sets strict guidelines for collecting, storing, and processing the personal data of individuals within the European Union.
- Right to Access: You can request a copy of all personal data we hold about you.
- Right to Rectification: You can request corrections to inaccurate or incomplete data.
- Right to Erasure (Right to be Forgotten): You can request deletion of your personal data under certain conditions.
- Data Portability: You can request your data in a structured, commonly used, and machine-readable format.
🇮🇳 DPDP Act (Digital Personal Data Protection Act)
We also comply with the DPDP Act, 2023, India's comprehensive data protection law. We act as a Data Fiduciary (or Data Processor for our B2B clients) and process data strictly for lawful purposes.
- Consent: We collect and process data only based on explicit, informed, and specific consent.
- Purpose Limitation: Data is used only for the purpose for which it was collected.
- Data Principal Rights: You have the right to access, correct, and erase your data, as well as the right to grievance redressal.
- Data Security: We implement strong technical and organizational measures to protect data.
🛡️ How We Protect Your Data
Encryption at Rest & Transit
All data is encrypted using industry-standard protocols (TLS 1.3 for transit, AES-256 for storage).
Zero Third-Party Sharing
We never sell your data. We only share it with essential sub-processors (like Supabase for secure auth).
Role-Based Access Control
Only authorized personnel can access user data, strictly on a need-to-know basis.
Data Retention Policy
We retain personal data only as long as necessary to fulfill the purposes outlined in our privacy policy.
✉️ Data Protection Officer (DPO)
If you have any questions about how we handle your data, or if you wish to exercise your rights under GDPR or DPDP, please contact our Data Protection Officer.