Statutory Notice under DPDP Act 2023

Privacy Policy & Data Notice

Last Updated: October 2026 · Compliant with Digital Personal Data Protection Act, 2023

1. Identity of the Data Fiduciary

EDB Global ("we", "our", or "us") operates as a Data Fiduciary under the provisions of the Digital Personal Data Protection Act, 2023 ("DPDP Act"). Our registered address is 1st Floor, 19, A10, Meerut Rd, Meerut Road Industrial Area, Ghaziabad, Uttar Pradesh 201002, India.

2. Personal Data We Collect

We collect and process digital personal data only where you have provided prior, affirmative, and verifiable consent:

Contact & Consultation Inquiries: Full Name, Business Email Address, Contact Telephone (+91), Company Name, and specific advisory requirements.
Technical Session Data: Essential server logs, IP addresses (anonymized), and browser user-agent headers solely for system security and CERT-In compliance.
Non-Essential Cookies: Only collected if you explicitly enable Analytics or Marketing cookies via our Cookie Consent Manager.

3. Specified Purposes for Processing

In accordance with Section 6 of the DPDP Act, your personal data is processed strictly for the specified purposes for which consent was obtained:

Scheduling and delivering requested consultations, cybersecurity audits, and automation scoping.
Responding to your inquiries and providing client support.
Complying with statutory cybersecurity obligations, including log preservation under CERT-In Directions 2022.

4. Data Retention & Erasure

Personal data collected for consultations is retained only for the duration necessary to satisfy the specified business purpose, unless statutory retention (such as CERT-In mandatory log retention for 180 days) requires a defined duration. Upon satisfaction of the purpose or withdrawal of consent, data is permanently erased.

5. Rights of the Data Principal

Under Chapter III of the DPDP Act 2023, you (as the Data Principal) enjoy the following statutory rights:

Right to Access InformationRequest a summary of your personal data being processed and the identities of data fiduciaries/processors.

Right to Correction & ErasureRequest correction of inaccurate data, completion of incomplete data, or erasure of data no longer required.

Right of Grievance RedressalAvail readily accessible redressal mechanisms through our designated Grievance Officer.

Right to NominateNominate any individual to exercise your rights in the event of death or incapacity.

To exercise any of these rights, visit our dedicated Grievance Redressal & Rights Portal.

6. Withdrawal of Consent

You may withdraw your consent at any time as easily as giving it, by emailing our Data Protection Desk at edbglobalconsulting@gmail.com. Upon withdrawal, we cease processing within 7 business days, without affecting the legality of prior processing.

7. Grievance Officer Contact Details

Designated Data Protection / Grievance Officer

Name: Grievance Redressal Officer, EDB Global

Email: edbglobalconsulting@gmail.com

Direct Telephone: +91 81789 14539 / +91 92668 66486

Address: 1st Floor, 19, A10, Meerut Rd Industrial Area, Ghaziabad, UP 201002, India

If a grievance is not resolved within 30 days, Data Principals may escalate to the Data Protection Board of India.