Confidential Dispatch (“we”, “us”, “our”) runs this website at confidentialdispatch.com. We help organisations collect personal data the right way, so we hold ourselves to the same standard here. This policy explains what personal data we collect through this website, why, how long we keep it, who we share it with, and the rights you have over it. It is written to meet our obligations as a Data Fiduciary under India’s Digital Personal Data Protection Act, 2023 (DPDP Act) and the DPDP Rules.
1. Who we are
We are the Data Fiduciary responsible for the personal data collected through this website.
- Entity: Confidential Dispatch is a teamORQ business (Registered Name: teamORQ Tech Solutions, GST 27AKSPR2500A1ZE).
- Website: confidentialdispatch.com
- Grievance Officer / privacy contact: Punit Rajpal — [email protected]
For how to raise a concern or complaint, see Section 8 — Grievance redressal.
2. What this policy covers
This policy covers personal data we collect through this website only — the homepage, our resources articles, the DPDP Exposure Self-Check, and the waitlist. This website is intended for businesses and professionals; it is not directed at children (see Section 9).
3. What we collect, and why
We collect only what each feature needs, and nothing more.
a) Waitlist. If you join our waitlist, we collect:
- your email address (required), and
- your first name (optional — only to personalise our launch emails).
We use these solely to tell you when Confidential Dispatch launches and about introductory pricing. We will not share them, sell them, or add you to any other marketing list.
b) DPDP Exposure Self-Check. The Self-Check is anonymous. Your answers are not linked to you or your email and are not used to identify you. We may keep non-identifying statistics (e.g. how many people answered a question a certain way, and when) to improve the tool — this is not personal data and cannot be traced back to any individual. You can complete the Self-Check without giving us any contact details; the waitlist is entirely separate and optional.
c) Server and security logs. Like any website, our server automatically records basic technical information (such as IP address, browser type, and pages requested) to keep the site secure and working. The website is served through a content delivery network (CDN), which processes this connection data at its global servers to deliver and protect the site. We use this only for security and operational purposes.
d) Cookies and analytics. We use Google Analytics to understand how this website is used — which pages are read, how people arrive, and which links they follow. It sets two cookies (_ga and _ga_ET6SPGQT6K) holding a random identifier, so repeat visits can be counted as one visitor. It does not receive your name or email address, and nothing you type into a form is sent to it. It does not store your IP address; it uses it to determine an approximate location and then discards it. We use it for analytics only: we do not run advertising cookies and do not use it to build an advertising profile of you. Because Google Analytics is a Google service, this usage data is processed outside India, including in the United States.
The analytics cookies are set when the page loads. A notice appears on your first visit, and you can turn analytics off there or at any time from the Cookie settings link in the footer of every page. Turning it off stops further collection and deletes these cookies from your browser. We keep an anonymous count of how many people accept or turn it off; that record holds nothing that identifies anyone.
4. Our legal basis, and your consent
We collect your waitlist details on the basis of your consent, which you give by ticking the consent box when you sign up. That consent is specific to the purpose stated above (launch and introductory-pricing updates). If we ever want to use your details for a new purpose, we will ask you again first.
You can withdraw your consent at any time by emailing [email protected]. Withdrawing is as easy as giving consent was, and it won’t affect anything we did lawfully before you withdrew.
5. How long we keep it
- Waitlist email and name: up to 12 months from the date you sign up. We delete your details earlier once their purpose is served — for example, after we’ve told you about the launch — rather than holding them for the full period.
- Self-Check answers: not kept against you. They are anonymous and not linked to your identity.
- Server and security logs: kept for up to 90 days, then deleted, unless we need to retain a specific record longer to investigate a security incident.
- Google Analytics data: retained by Google for 14 months from your visit, then deleted. Aggregate reports that are not tied to any individual may be kept longer.
When the retention period ends, or when you ask us to delete your details, your record is permanently removed by an automated deletion process, and it is not restored from backups.
6. Who we share it with
We do not sell your personal data. We share it only with the service providers (Data Processors) we need to run the website, under contracts that require them to protect it and use it only on our instructions:
- Hosting: our web hosting provider — our website and database are hosted on servers in India.
- Content delivery & security: our CDN/security provider — the website is served through a global content delivery network, so some technical data (such as IP address) is processed outside India to deliver and protect the site.
- Analytics: Google (Google Analytics) — used only to understand website usage, as described in Section 3(d). Google processes this data outside India, including in the United States.
- Email delivery: our email delivery provider — used only to send you the launch/pricing emails you signed up for.
We can provide the identity of our current service providers on request — email [email protected].
Data residency: the personal data you give us (your waitlist details) is stored in India, as are the Self-Check’s anonymous statistics. Two categories of data are processed outside India: technical connection data handled by our CDN to deliver and protect the site, and website-usage data handled by Google Analytics. Neither carries your name or email address.
We may also disclose personal data if we are legally required to (for example, a lawful order from a court or regulator).
7. Your rights
Under the DPDP Act, you have the right to:
- Access — ask us what personal data we hold about you.
- Correction — ask us to correct or update it.
- Erasure — ask us to delete it.
- Grievance redressal — raise a concern about how we handle your data (see Section 8).
- Nominate — nominate another person to exercise these rights on your behalf if you die or become incapacitated.
To exercise any of these, email [email protected]. We will respond within 30 days (and in any case within the 90-day maximum set by the DPDP Rules). There is no charge to exercise your rights.
8. Grievance redressal
If you have a concern or complaint about how we handle your personal data, contact our grievance contact:
- Punit Rajpal, Grievance Officer
- Email: [email protected]
We will acknowledge your grievance promptly and aim to resolve it within 30 days, and in any case within the 90-day period set by the DPDP Rules. If you are not satisfied with our response, you may escalate your complaint to the Data Protection Board of India.
9. Children’s data
This website is intended for businesses and professionals and is not directed at children (anyone under 18). We do not knowingly collect personal data from children. If you believe a child has submitted personal data to us, email [email protected] and we will delete it.
10. How we protect your data
We protect the personal data we hold with reasonable security safeguards: it is transmitted over an encrypted (HTTPS) connection, stored with encryption at rest and access controls so only authorised people can reach it, and kept on servers in India. If a personal data breach occurs, we will notify the Data Protection Board of India and affected individuals as required by law.
11. Languages
You can ask us to provide this notice in English or any language listed in the Eighth Schedule to the Constitution of India. Email [email protected] to request this.
12. Changes to this policy
If we change this policy, we will update the “Last updated” date above, and — where the change is significant — tell waitlist members by email. Please check this page from time to time.