Privacy Policy

1. Introduction

Consent Era ("we", "us", or "our") is a consent management platform operated in accordance with India's Digital Personal Data Protection (DPDP) Act, 2023 and applicable global privacy regulations. This Privacy Policy explains how we collect, use, store, and protect personal data when you use our platform, website, or services.

By accessing or using Consent Era, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of our services.

2. Data We Collect

2.1 Information You Provide

• Account registration details (name, email address, phone number, company name)
• Billing and payment information (processed through secure third-party payment gateways)
• Communications you send us (support tickets, demo requests, contact forms)
• Career applications (name, resume, qualifications, contact details)

2.2 Information Collected Automatically

• Log data: IP address, browser type, pages visited, timestamps
• Device information: operating system, device identifiers
• Usage analytics: feature interactions, session duration, error logs
• Cookies and similar tracking technologies (see Section 7)

2.3 Data Processed on Behalf of Customers

When you use Consent Era to manage consent for your end-users, we process that data as a Data Processor on your behalf. You, as the Data Fiduciary, are responsible for ensuring lawful basis for that processing under applicable regulations.

3. How We Use Your Data

• To provide, operate, and improve the Consent Era platform and services
• To authenticate users and maintain account security
• To process payments and manage billing
• To communicate service updates, security alerts, and support responses
• To send promotional communications (only with your explicit consent)
• To comply with legal obligations and enforce our Terms of Service
• To analyse platform usage and improve product features

4. Legal Basis for Processing

We process personal data under the following legal bases in accordance with the DPDP Act, 2023:

• Consent:Where you have provided explicit, informed consent for a specific purpose
• Contractual necessity:Where processing is necessary to deliver services you have requested
• Legal obligation:Where we are required by law to process your data
• Legitimate interests:Where we have a legitimate interest that does not override your rights

5. Data Sharing & Disclosure

We do not sell your personal data to third parties. We may share data with:

• Service providers:Cloud infrastructure, payment processors, and analytics tools operating under data processing agreements
• Legal authorities:When required by law, court order, or regulatory requirement
• Business transfers:In the event of a merger, acquisition, or asset sale, with prior notice to affected users

6. Data Retention

We retain personal data for as long as necessary to fulfil the purposes described in this policy, comply with legal obligations, and resolve disputes. Consent records are retained for a minimum of 7 years as required for regulatory compliance. You may request deletion of your personal data subject to legal retention requirements.

7. Cookies & Tracking

We use essential cookies for platform functionality and session management. We use analytics cookies to understand how our platform is used. You can manage your cookie preferences through your browser settings or our cookie consent banner. We do not use advertising or third-party tracking cookies without your consent.

8. Your Rights Under DPDP Act & GDPR

• Right to Access:Request a copy of personal data we hold about you
• Right to Correction:Request correction of inaccurate data
• Right to Erasure:Request deletion of your personal data (subject to legal obligations)
• Right to Withdraw Consent:Withdraw consent for any purpose-specific processing at any time
• Right to Grievance Redressal:Lodge a complaint with our Data Protection Officer
• Right to Nominate:Nominate another person to exercise your rights in case of incapacity

To exercise these rights, please contact us at support@consentera.in.

9. Data Security

We implement industry-leading security measures including AES-256-GCM encryption at rest, TLS 1.3 in transit, field-level encryption for PII, multi-factor authentication, and regular third-party security audits. However, no system is 100% secure and we cannot guarantee absolute security.

10. Cross-Border Data Transfers

Your data is primarily stored on servers located in India. Any cross-border transfers are conducted in accordance with the DPDP Act, 2023, applicable government notifications, and standard contractual clauses where required.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on our platform at least 30 days before they take effect. Continued use of our services after changes constitutes acceptance.

12. Language Accessibility

In accordance with Rule 3(1) of the DPDP Rules, 2025, this Privacy Notice is available in English. Upon request, we will provide this Notice in any of the 22 scheduled languages listed in the Eighth Schedule of the Constitution of India. To request a translated copy, contact us at support@consentera.in.

13. Processing of Children's Personal Data

In accordance with Section 9 of the DPDPA and Rule 10 of the DPDP Rules, 2025, we do not knowingly process the personal data of any person under the age of 18 without obtaining verifiable parental consent. If we become aware that a minor's data has been collected without appropriate parental consent, we will take immediate steps to delete such data.

14. Data Retention & Erasure

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. In accordance with Section 8(7) of the DPDPA and Rule 8 / Third Schedule of the DPDP Rules, data is erased upon:

• Withdrawal of consent by the Data Principal;
• Fulfilment of the specified purpose for which it was collected; or
• A period of inactivity as specified in our data retention schedule.

Upon erasure, we also take reasonable steps to ensure that third-party processors who have received the data are informed and delete it accordingly.

15. Contact Us

For privacy-related queries, data principal rights requests, or to reach our Data Protection Officer:

• support@consentera.in
• Gurgaon, Haryana, India
• +91 (80) 4567 8900 — Mon–Fri, 9am–6pm IST