Grievance Officer

Last updated 25 August 2026

PrivacySuraksha, a product of CloudZent, is committed to protecting your personal data and to giving you an accessible, transparent way to raise a grievance about it. This policy has been designed with regard to the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Digital Personal Data Protection Rules, 2025 ("DPDP Rules").

It covers grievances about personal data we process through this website, user accounts, support, billing, and our products and services — anywhere we act as the Data Fiduciary. If you are a visitor to a website that uses PrivacySuraksha as its consent manager, the operator of that website is the Data Fiduciary for your data, not us — we will redirect or assist with your grievance accordingly.

Who to contact

• Grievance Officer: Arun Sharma
• Email: info@privacysuraksha.com
• Phone: +91 85888 11867
• Post: Unit no. 1217, SVH Metro Street, Sector-83, Gurugram, Haryana – 122012, India

For general assistance that isn't a grievance, you can also reach support@privacysuraksha.com.

What you can raise a grievance about

Any act or omission concerning the processing of your personal data or the exercise of your rights — for example: collection or use without a lawful basis, inability to withdraw consent, inaccurate data, a request for correction or erasure we haven't acted on, excessive collection, retention beyond what's needed, unauthorised disclosure, a suspected breach, or a failure to respond to an earlier request.

How to submit a grievance

Email info@privacysuraksha.com or write to the Grievance Officer at the address above. Where available, you can also raise it from your PrivacySuraksha account. We don't charge a fee for a genuine grievance or for exercising a right under the DPDP Act.

To help us investigate quickly, tell us:

• your name and registered email or mobile number;
• which website, app, or service is concerned;
• what happened and roughly when;
• any right you're exercising, and what outcome you want; and
• supporting screenshots or documents, if relevant.

Please don't send us passwords, OTPs, or full financial credentials — we won't ask for anything beyond what's needed to resolve your grievance.

Identity verification

We may ask for your registered email, mobile number, or an account/reference number to confirm it's really you before acting on a grievance — proportionate to the risk of getting it wrong. We won't collect new personal data for this if we can already confirm who you are.

How we handle it

• Receipt & acknowledgement — we acknowledge your grievance within 2 business days, with a reference number where practical.
• Classification & verification — we categorise it (access, correction, erasure, consent, breach, and so on) and confirm your identity if needed.
• Investigation — our Grievance Officer coordinates with security, legal, product, and support as needed, reviewing relevant records and logs.
• Resolution — where valid, we correct, update, delete, or restrict processing, act on a consent withdrawal, fix a security issue, or take other appropriate action.
• Closure — we tell you the outcome and any action taken.

Our targets: acknowledgement within 2 business days, an initial assessment within 7 business days, and resolution within 30 calendar days. Complex grievances needing coordination with third parties may take longer, but where the DPDP Act's grievance-response requirement applies, we will respond within the period we publish and never later than 90 days, unless the law says otherwise. We'll tell you if we need more time.

Your rights

Under the DPDP Act you may request access to your personal data, correction of inaccurate data, completion of incomplete data, or erasure subject to any legal retention requirement. Where processing relies on consent, you can withdraw it at any time — withdrawal doesn't undo processing already done lawfully before it. Where the DPDP Rules allow it, you may also nominate someone to exercise your rights if you die or become incapacitated.

If the grievance is about a site that uses us

We provide the technology organisations use to manage consent, cookies, and privacy requests — we don't decide those organisations' policies. If your grievance is about a website, app, or service run by one of our customers, name it when you write to us: that organisation is usually the Data Fiduciary responsible for the response, and we may refer your grievance to them or assist them in responding. We only call ourselves a "Consent Manager" in the sense the DPDP Act defines once we hold that statutory registration with the Data Protection Board of India — offering consent-management software doesn't by itself make us one.

Suspected data breaches

If your grievance points to a possible personal data breach, we escalate it to our security and incident-response team immediately, alongside handling it under this policy. Where the law requires it, we will notify affected individuals and the Data Protection Board of India.

Children's data

If a grievance concerns a child's data or is raised by a lawful guardian, we may take extra steps to verify the requester's identity, the child's age, and the guardian's authority — asking only for what's reasonably necessary to do that.

Confidentiality and records

We handle grievances on a need-to-know basis and use the personal data in them only to verify you, investigate, respond, keep compliance records, and meet our legal obligations. We keep records of grievances — reference number, category, actions taken, and resolution — only for as long as compliance, audit, and legal purposes require, protected with appropriate safeguards. Raising a genuine grievance or exercising a right won't be held against you; we do reserve the right to act on deliberately false or fraudulent complaints.

If you are not satisfied

If you're unhappy with how we resolved your grievance, reply to the closure email or write to our Data Protection Officer at info@privacysuraksha.com, quoting your reference number, for an internal review.

The DPDP Act expects you to give us that chance to redress your grievance first. If you remain dissatisfied after that, you may escalate to the Data Protection Board of India once its complaint mechanism is in force. We will add the Board's official portal details here as soon as they're published.

Changes

We may update this policy to reflect changes in the law, directions from the Data Protection Board of India, or our own practices. The date at the top of this page changes whenever we do. See also our Privacy Policy and Cookie Policy.