Data Principal Rights

1Your rights as a Data Principal

The Digital Personal Data Protection Act, 2023 gives you, as a “Data Principal”, rights over your personal data. Cortesys Pvt Ltd is the Data Fiduciary for personal data collected through this Website.

• Access — a summary of the personal data we process about you, the processing activities, and the other parties it has been shared with.
• Correction, completion and updating — of inaccurate or incomplete data.
• Erasure — of data no longer needed for its purpose or where you have withdrawn consent, unless law requires us to keep it.
• Withdraw consent — at any time, as easily as you gave it.
• Grievance redressal — to have a complaint heard (see Grievance Redressal).
• Nominate — another person to exercise your rights if you die or become incapacitated.

2Who can make a request

You can make a request for your own personal data. A parent or lawful guardian can make a request on behalf of a child or a person with a disability who has a lawful guardian, and a nominee can act as the Act provides. We may ask for proof of authority.

3How to make a request

Use the form below, or email hello@cortesys.com. Tell us who you are, which right you want to use and the details of your request. We may need to verify your identity before acting, so please do not send identity documents unless we ask for them.

4How we handle requests

• We will acknowledge your request and may ask for further information to verify identity or clarify scope.
• We will respond within the period prescribed by law.
• If we cannot fully act on a request — for example because law requires us to retain data, or because it would affect another person’s rights — we will explain why.

5Withdrawing cookie consent

You can withdraw or change cookie consent at any time using Cookie settings.

6If you are not satisfied

Raise a complaint through our Grievance Redressal process. After using it, you may approach the Data Protection Board of India as provided under the DPDP Act.

7Submit a request