The Council for Data Privacy & Digital Trust (CDPDT) is a multidisciplinary professional platform operating under the aegis of the Emerging Businesses Chamber of Commerce (EBCC). This Privacy Notice explains how personal data is collected, used, shared, retained and protected when you visit cdpdt.org , register your interest, seek membership, participate in programmes or events, communicate with us, or otherwise engage with CDPDT.
For the personal data described in this Notice, the relevant Data Fiduciary is CDPDT. CDPDT is not a separate regulator or statutory authority.
Personal Data We May Collect
- Identity and profile data: name, designation, organisation, professional role, membership category, photograph/profile information where voluntarily provided.
- Contact data: email address, mobile/telephone number, postal address and preferred communication channel.
- Membership and programme data: membership application details, areas of interest, qualifications/experience, event registrations, attendance, workshop or programme participation, mentorship or volunteering preferences.
- Communications data: enquiries, feedback, helpdesk requests, correspondence and information you choose to provide.
- Transaction data: payment status, invoice/receipt details and limited payment-related information where a paid event, programme or membership is offered. Payment-card credentials should ordinarily be handled by the relevant payment service provider, not stored by CDPDT.
- Technical and usage data: IP address, browser/device information, pages visited, timestamps, referral information, security logs and cookie/analytics identifiers, subject to the technologies actually deployed on the website.
- Event/media data: photographs, audio/video recordings, speaker biographies and session content where events are recorded or publicised, subject to appropriate notice/permission.
Why We Process Personal Data
- To respond to enquiries and register expressions of interest.
- To process and administer membership and participation in CDPDT communities, working groups and programmes.
- To organise seminars, workshops, masterclasses, roundtables, clinics, campus programmes and the Annual CDPDT Summit.
- To provide requested resources, updates, newsletters, regulatory briefings and community communications.
- To facilitate helpdesk, expert-network, mentorship, research, collaboration and professional-development activities.
- To administer payments, invoices, records and operational requirements where applicable.
- To maintain website functionality, security, fraud prevention, troubleshooting and service improvement.
- To publish event photographs, speaker/member profiles, research contributions or other material where appropriate permission or another applicable legal basis exists.
- To meet applicable legal, regulatory, accounting, dispute-resolution and governance requirements.
Basis for Processing and Consent
Where processing is based on consent, we will seek consent that is free, specific, informed, unconditional and unambiguous and limited to the personal data necessary for the specified purpose. You may withdraw consent using the method provided at collection or by contacting us. Withdrawal will not affect processing already undertaken before withdrawal where permitted by law.
Where the Digital Personal Data Protection Act, 2023 (DPDPA) permits processing for certain legitimate uses or where another applicable law requires processing, we may process personal data without consent to the extent permitted by that law. We will not use a consent obtained for one specified purpose as a blanket permission for unrelated purposes.
How We Share Personal Data
We may share personal data only where reasonably necessary with authorised CDPDT personnel and committees, event/technology/hosting/email/payment providers, professional advisers, empanelled experts academic or institutional collaborators for a specific programme as per your area of interest, and government or lawful authorities where required. Service providers should process personal data under appropriate contractual, confidentiality and security obligations.
International / Cross-border Processing
Some service providers may host or process data outside India. Where this occurs, CDPDT will manage such transfers in accordance with applicable Indian law and any restrictions or requirements notified by the Central Government.
Retention
We retain personal data only for as long as necessary for the stated purpose, membership or programme administration, legal/compliance obligations, dispute handling and legitimate record-keeping needs. Retention periods should be documented by data category. When retention is no longer necessary, data will be deleted, anonymised or securely disposed of, subject to applicable law and technical backup cycles.
Security
Reasonable security safeguards are used to protect personal data against unauthorised access, disclosure, alteration, loss or destruction. These may include access controls, authentication, encryption where appropriate, logging, backups, vulnerability management, vendor controls and incident-response procedures. No internet-based system can be guaranteed to be completely secure.
Your Rights and Choices
Subject to the DPDPA becoming applicable to the relevant processing and any lawful limitations, you may have rights to access information about your personal data and its processing, seek correction / completion / updating, seek erasure, withdraw consent, use grievance-redressal mechanisms, and nominate another individual to exercise rights in specified circumstances. You may also unsubscribe from non-essential communications using the mechanism provided.
Children
The general CDPDT website and professional membership are not intended to solicit personal data from children. If a specific student or campus programme involves a person who is a child under applicable law, CDPDT/EBCC will implement the required age/guardian and consent controls before processing, as applicable.
Cookies and Similar Technologies
The website may use cookies and similar technologies for essential operation and, if enabled, preferences, analytics or other purposes. Non-essential cookies should not be placed until the required choice/consent has been obtained. Please see the separate Cookie Policy and the website cookie-preference tool, if deployed.
Third-party Links
The website may link to third-party websites or services. Their privacy practices are governed by their own notices, and CDPDT/EBCC is not responsible for those external practices merely because a link is provided.
Grievance and Privacy Contact
For privacy questions, rights requests, consent withdrawal or grievances, contact:
Privacy / Grievance Contact: Sanidhya
Email: info@cdpdt.org
We may take reasonable steps to verify your identity before acting on a request. If you are dissatisfied with the grievance response, you may have recourse available under applicable law, including to the Data Protection Board of India when the relevant statutory provisions apply.
Changes to this Notice
We may update this Notice to reflect changes in law, website functionality or our programmes. The updated version will be posted on this page with the revised effective date. Where a material change affects the purpose for which personal data is processed, additional notice or consent will be obtained where required.