Privacy Notice for India (DPDP Act)

Last updated: February 2026

This notice supplements our Privacy Policy and applies to individuals in India. It provides information in line with the Digital Personal Data Protection Act, 2023 (DPDP Act) and related rules. DomainHQ is headquartered in India and takes the privacy of your personal data seriously.

Who we are

DomainHQ (“we,” “us,” or “our”) is the data fiduciary in respect of personal data we collect when you use our website, request an assessment, or use our services. Our address: DomainHQ, #612, Sector 42, Gurgaon, 122002, Haryana, India. Contact: hi@domainhq.io.

Purpose and lawful use

We collect and use personal data only for specified, clear, and lawful purposes. These include: providing and improving our domain protection and related services; processing your requests and assessments; communicating with you; securing our systems and data; and complying with applicable laws. We do not use personal data for purposes incompatible with those for which it was collected without your consent or as permitted by law.

Consent and legitimate use

Where required under the DPDP Act, we obtain your consent before or at the time of collecting your personal data. We may also process personal data where it is necessary for certain legitimate uses permitted under the Act (e.g. for the provision of services you have requested, compliance with law, or for reasonable purposes we notify you of). We will not use your data for purposes that are not reasonably expected by you in the context of our relationship.

Data principal rights

Under the DPDP Act, you (as a data principal) have the right to: (1) obtain a summary of the personal data we process and the processing activities; (2) correct or update inaccurate or incomplete personal data; (3) request erasure of personal data where it is no longer necessary or where consent is withdrawn and no other lawful basis applies; and (4) nominate another person to exercise these rights in the event of your death or incapacity. To exercise any of these rights, contact us at hi@domainhq.io. We will respond in accordance with the timelines prescribed under the DPDP Act and applicable rules.

Grievance officer

For any grievance or complaint regarding our processing of your personal data, you may contact our grievance officer at hi@domainhq.io. You may also have the right to approach the Data Protection Board of India as provided under the DPDP Act.

Retention and security

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by law. We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse, in line with our Security Practices.

Contact

For privacy requests, consent withdrawal, or questions under the DPDP Act: hi@domainhq.io. DomainHQ, #612, Sector 42, Gurgaon, 122002, Haryana, India.