1. Our Commitment
MAGDOX Private Limited provides this notice for the FDIE website and platform. The DPDPA and its rules have a phased commencement. Under the November 2025 notifications, the principal processing obligations and rights in sections 3 to 17 take effect eighteen months after publication, in May 2027. As of 16 September 2026, this page must not be read as saying those provisions are already in force. We accept privacy requests now under the commitments below and any law already applicable.
Sources: official commencement notification and notified DPDP Rules. Later effective amendments govern if the timetable changes.
2. Key Terms Under the DPDPA
- Data Fiduciary: the party determining the purpose and means of processing. Magdox has this role for its own account/business processing; the customer may have it for personal data in a workspace, with Magdox acting as processor.
- Data Principal: the individual to whom the personal data relates (you).
- Personal data: any data about an individual who is identifiable by or in relation to such data.
3. Your Rights as a Data Principal
When the relevant provisions apply and are in force, they provide the following rights, subject to their statutory conditions. You may contact us about these requests now:
- Access information: obtain a summary of the personal data we hold about you and the processing activities carried out on it
- Correction and erasure: ask us to correct inaccurate or incomplete personal data, update it, or erase data that is no longer necessary for the purpose it was collected, subject to legal retention requirements
- Grievance redressal: have a readily available means to register a complaint about how we process your personal data
- Nominate: nominate another individual to exercise these rights on your behalf in the event of your death or incapacity
- Withdraw consent: withdraw consent at any time where processing is based on consent, as easily as it was given. To withdraw consent for marketing communications, use the unsubscribe link in any email we send you, or contact [email protected]; withdrawal does not affect the lawfulness of processing carried out before withdrawal
4. How to Exercise Your Rights
To submit a request, contact us at [email protected] or use our Contact page with “Data Principal Request” as the subject of your message. Include:
- Your name and the email address associated with your account (if any)
- A description of the right you wish to exercise
- Any information that helps us verify your identity
5. Grievance Officer and Escalation to the Data Protection Board
If you are not satisfied with our response to your request, contact our designated grievance contact below. A statutory complaint to the Data Protection Board depends on the relevant provisions being in force, the Board’s applicable procedure and exhaustion of the available grievance process. This page does not promise an already-operative complaint route for provisions that have not commenced.
- Grievance Officer: Manish Sharma
- Designation: Founder and CEO
- Email: [email protected]
- Response time: within 30 days of receipt of complaint
Personal data breaches. If a personal data breach affects your personal data, we will notify you and the Data Protection Board of India when those obligations apply, in the form and within the time required by the provisions then in force. Independently of that, we notify affected individuals within 72 hours of becoming aware of a breach (Privacy Policy, Section 12).
6. Response Timeframe
We aim to respond within 30 days of receipt, with proportionate identity verification where necessary. Any longer period must be permitted by applicable law; we explain the reason and revised timing. Do not send passwords or authentication codes with a request.
7. Related Pages
- Privacy Policy: full details on data collection and use
- Cookie Policy: cookies and tracking technologies
- Data Processing Agreement: available before covered processing begins, including trials and proofs of concept