It takes more than a privacy policy to make you DPDP ready. It starts with knowing what personal data you collect, tracking how you use it, attaining verifiable consent for the stated purpose, and following through when someone exercises a data right.
We do not stop at identifying a compliance gap. Where a requirement affects technology or operations, we determine what needs to change and how to implement it in the systems you already use.
Your customers trust you with their personal data. We help you keep that trust: ready when DPDP enforcement begins in May 2027, and set up to stay that way long after. You go on serving your customers, with their data protected and their rights respected.
We conduct three working sessions covering customer, employee, vendor, marketing, and finance data.
Data discovery, systems, vendors, purposes, and consent.
Notices, procedures, retention, vendor review, and security recommendations.
Breach response, staff training, handover, and action list.
We find out what personal data you hold, where it comes from, why you use it, where you store it, who can see it, and which vendors receive it. We map how it moves from your websites, forms, messaging channels, and staff processes into your systems and out to providers.
You receive
We record why you use each kind of personal data and whether you need consent. We write your privacy notice and consent wording, and advise on what to do with data you already hold before 13 May 2027. We also design how consent, withdrawal, and consent records should work in your application or business process, including what needs configuration or development.
You receive
We review the vendors that receive personal data, what they get and why, and what terms cover it. Large cloud and SaaS providers usually have standard terms. For smaller ones, we flag where you need a written agreement.
You receive
We advise how long to keep each kind of data and when to delete it. We design workflows to handle requests for data access, correctioin, or erasure, withdrawal of consent, and grievances. We specify who responds, how to find the data, and what to record. We work out how to actually implement deletion across multiple systems, SaaS tools, backups, exports, and processors.
You receive
We review the systems and devices that hold personal data and advise on security basics: individual accounts, admin rights, removing access when staff leave, file sharing, encryption, backups, logging, monitoring, and account recovery. We identify the specific changes needed and guide your IT team or provider on how to make them.
You receive
We provide a breach-response procedure that covers what staff should report and to whom, how to assess and contain an incident, and when to notify the Data Protection Board and affected people. We then run a practice exercise with the people responsible.
You receive
We provide an internal data-handling policy, identify who should maintain each record and process, and advise when to review them, such as when you add a new system, vendor, or marketing activity.
You receive
We train your staff, then conduct a management handover to the owner or a named person, with all records, procedures, and a prioritised action list.
You receive
You'll know what personal data you hold, where it lives, and who can reach it. When a customer asks to see, correct, or delete their data, your team will know how to respond. If something goes wrong, there's a tested playbook to follow.
Your customers get a business that respects their data. You get peace of mind.
When the readiness work shows what needs to change, we can guide you through it. We give clear instructions and advise you at each step.
A risk review session will show whether the full engagement is the right next step for your business.
