DPDP Compliance

Under the Digital Personal Data Protection Act, 2023 (DPDP), individuals in India have specific rights regarding their personal data. This page explains how Prem Bhatia's Medicine Insights complies with the DPDP and how you can exercise your rights.

Scope and Applicability

Prem Bhatia's Medicine Insights is an informational blog that provides articles on medicine and healthcare in India. We do not collect personal data through user registration, forms, or accounts. However, we may automatically collect limited data such as IP addresses, browser type, and usage patterns through third-party analytics tools like Google Analytics, which operate under their own privacy policies. This data is processed solely for website functionality and audience insights, and we act as a Data Fiduciary under the DPDP.

Your Rights Under DPDP

As a Data Principal under the Digital Personal Data Protection Act, you have the following rights:

Right to access your personal data held by us
Right to correction or updating of inaccurate or incomplete data
Right to withdrawal of consent for data processing
Right to grievance redressal if you believe your rights have been violated
Right to nominate another person to exercise your rights in case of death or incapacity

How We Comply

We comply with the DPDP by:

Limiting data collection to only what is necessary for website analytics
Using only service providers that comply with Indian data protection standards
Not storing personal data longer than required for analytical purposes
Ensuring all third-party tools (e.g., analytics) are configured to respect user privacy
Providing clear pathways for you to exercise your rights

Data We Process

Under the DPDP, the personal data we may process includes:

IP addresses (anonymized where possible)
Device type and browser information
Pages visited and time spent on site
Geolocation data (country-level only, not precise)

We do not collect names, emails, phone numbers, or any other identifiers unless voluntarily provided through contact forms.

Legal Basis for Processing

Our processing of personal data is based on legitimate interest under Section 4(2) of the DPDP, specifically to:

Improve website performance and user experience
Understand audience interests to deliver relevant health content
Ensure website security and functionality

We do not process sensitive personal data, nor do we engage in profiling or automated decision-making.

How to Exercise Your Rights

To exercise your rights under the DPDP, please send a request to our Data Protection Officer via email:

Write a clear request specifying the right you wish to exercise (e.g., access, correction, deletion)
Include your name and any identifying information you provided (e.g., email used in a contact form)
Send your request to: [email protected]

We will verify your identity before responding. If you submit a request through a contact form, we may reply using the same email address provided.

Response Timeframes

We will respond to your request within 30 days of receipt, as required under Section 10 of the DPDP. In complex cases, we may extend this period by an additional 15 days and will notify you of the delay and reason.

No Discrimination Policy

We do not and will not discriminate against you for exercising any of your rights under the DPDP. You will not be denied access to content, services, or features of our website because you have chosen to withdraw consent, request deletion, or make a complaint.

Updates and Changes

We may update this DPDP Compliance page periodically to reflect changes in law or our practices. Any material changes will be posted here with an updated effective date. We recommend reviewing this page occasionally.