DPDP Compliance

Eternal Eats India is committed to respecting your rights under the Digital Personal Data Protection Act, 2023 (DPDP). This page explains how we comply with India's data protection law and how you can exercise your rights.

Scope and Applicability

The DPDP applies to the processing of digital personal data of individuals in India. While Eternal Eats India does not collect personal data through user registration or accounts, we may process limited data automatically through website analytics, cookies, and server logs. This page outlines how we handle such data in compliance with the DPDP.

Your Rights Under DPDP

Under the Digital Personal Data Protection Act, you have the following rights:

  • Right to access your personal data processed by us
  • Right to correction or updating of inaccurate or incomplete data
  • Right to withdrawal of consent for any processing based on your consent
  • Right to grievance redressal if you believe your data has been mishandled

Note: Since we do not collect identifiable personal data for profiling or targeted purposes, most rights apply only if you have provided identifiable information through contact forms or feedback.

How We Comply

Eternal Eats India complies with the DPDP by:

  • Collecting only essential data necessary for website functionality and analytics
  • Not storing personal data longer than required
  • Using anonymized or aggregated data wherever possible
  • Not selling, sharing, or transferring personal data to third parties without your consent
  • Ensuring all third-party services (e.g., analytics tools) comply with DPDP standards

Data We Process

We may automatically collect the following types of data:

  • IP addresses (anonymized where possible)
  • Browser type and device information
  • Pages visited and time spent on site
  • Cookies and similar tracking technologies for site functionality and analytics
  • Information voluntarily submitted via contact forms (name, email, message)

This data is processed solely for website improvement and user experience. No sensitive personal data (e.g., biometrics, religion, health) is collected.

Legal Basis for Processing

Our processing of personal data is based on:

  • Legitimate interest for website functionality and analytics
  • Consent when you voluntarily submit information via contact forms

We do not rely on contractual necessity or legal obligation as our primary basis, as we do not provide services requiring such processing.

How to Exercise Your Rights

To exercise your rights under the DPDP, please contact us via email at [email protected]. Include:

  1. Your full name
  2. Your email address or other identifier used on our site
  3. A clear description of your request (e.g., access, correction, deletion)

We will acknowledge your request within 5 business days and respond fully within 30 days.

Response Timeframes

Under the DPDP, we are required to respond to your requests within 30 days of receipt. In exceptional cases, we may extend this period by an additional 15 days and will notify you if this occurs.

No Discrimination Policy

We will not deny you access to our content, charge you different prices, or provide you a different quality of service because you exercised your rights under the DPDP.

Updates and Changes

We may update this DPDP Compliance page periodically to reflect changes in law or our practices. Any material changes will be posted here with an updated effective date.

Contact Information

If you have questions, requests, or complaints regarding your personal data under the DPDP, please contact:

Amara Thistlewood
The Reserve Bank Building, 60 St Georges Mall, Cape Town City Centre, Cape Town, 8000, South Africa
[email protected]

You may also file a complaint with the Digital Personal Data Protection Board, established under the DPDP Act, if you are not satisfied with our response.