Data Protection & DPDP Notice
How ZIVOX applies data-protection principles to everything we build, and how to submit a formal request about your personal data.
Last reviewed: 2026
Our commitment in one paragraph
We collect only what a feature genuinely needs, we tell you why, we keep it no longer than justified, we secure it, and we give you a working way to access, correct or delete it. We do not sell your data. Our systems are designed to support compliance with applicable Indian data-protection requirements.
1. Principles we apply
| Principle | How we apply it |
|---|---|
| Lawful purpose | Every form states its purpose; we do not reuse the data for another purpose. |
| Purpose limitation | Submissions are stored under the specific form they came from, not pooled for unspecified use. |
| Data minimisation | Forms ask for the minimum; optional fields are marked optional and can be left blank. |
| Accuracy | You can request correction at any time through the request form below. |
| Storage limitation | Retention periods are documented in our Privacy Policy. |
| Security | Authentication, role-based access, database rules and input sanitisation. |
| Accountability | Consent and requests are logged with timestamps so we can demonstrate compliance. |
2. Consent
Every submission form on this website includes a separate consent checkbox. Consent is:
- specific — tied to the stated purpose of that particular form;
- informed — accompanied by a link to this notice and the Privacy Policy;
- unbundled — not a condition of using unrelated parts of the website;
- recorded — stored with the submission, including a timestamp;
- withdrawable — you can withdraw at any time using the request form below.
Where we rely on a legal obligation or the performance of a contract instead of consent for part of a processing activity, we say so.
3. Your rights
Subject to applicable law and reasonable identity verification, you may request:
| Right | What it means |
|---|---|
| Access | Find out what personal data we hold about you and how it is processed. |
| Correction | Have inaccurate or incomplete data corrected. |
| Erasure | Have data deleted where retention is no longer justified. |
| Restriction | Limit how we process your data while a concern is investigated. |
| Portability | Receive a copy in a structured, commonly usable format. |
| Withdraw consent | Stop consent-based processing at any time. |
| Grievance | Complain about how we handled your data or your request. |
| Nominate | Nominate another person to exercise your rights in the event of death or incapacity. |
To exercise any right, use the request form below. We will acknowledge your request and respond within the period required by applicable Indian data-protection law. Requests are free of charge; we may decline a request we reasonably consider manifestly unfounded or excessive, and we will explain our reasoning if we do.
4. How we secure data
- Access to administrative systems requires authentication and is limited to authorised company accounts.
- Database access rules restrict what unauthenticated visitors can read or write — enforcement is server-side, not only in the browser.
- Form input is validated on the client and treated as untrusted on display.
- Displayed user content is sanitised to reduce cross-site scripting risk.
- Data in transit is encrypted using standard protocols.
- Access is reviewed when people change roles or leave.
5. If something goes wrong
If a personal data breach occurs that is likely to affect your rights, we will notify affected individuals and the relevant authority as required by applicable law, describing what happened, what data was involved, the likely consequences, and the steps we have taken.
6. Children's data
Our services are intended for users aged 18 and above. We do not knowingly process the data of children. If you believe a child has provided data to us, contact us and we will delete it.
7. Records and accountability
We maintain records of consent, data requests and grievances with timestamps and status, so we can demonstrate how requests were handled. These records are kept for as long as needed to evidence compliance.
8. Contact and grievance route
Data questions: info@zivox.co.in. Formal complaints: our Grievance Redressal page sets out the process and timelines.
This notice describes our practices and is provided for transparency. It does not constitute legal advice, and we do not claim external certification or an unsupported assertion of absolute compliance. We review and improve these practices as our services develop.
Submit a data request
Use this form to exercise any right described above. We respond formally and keep a record of how your request was handled.
Concern about how your data was handled?
You can raise a formal complaint through our grievance process.