India DPDP & Data Rights Notice.

1. Purpose of this India notice

This notice supplements the Privacy Policy for people whose digital personal data is processed in India or otherwise falls within the Digital Personal Data Protection Act, 2023 (the DPDP Act). It explains the operator, data purposes, choices and rights-request process for this personal publication.

Vamsi’s Corner has not represented itself as a registered Consent Manager, a Significant Data Fiduciary or a government-certified privacy service. The published contact for data inquiries is connect@vamsimarripudi.me.

2. Legislative status on 27 October 2026

The Central Government notified staged commencement through Gazette G.S.R. 843(E), dated 13 November 2025. The DPDP Rules, 2025 were notified in G.S.R. 846(E) on the same date. Certain definitions, institutional and administrative provisions are already in force.

Under those notifications, consent-manager-related provisions identified for one year are scheduled for November 2026, and most substantive processing duties, notices, data-principal rights and associated Rules are scheduled to commence eighteen months after publication—approximately May 2027. These dates are subject to the actual Gazette and any lawful amendment or clarification.

The Digital Personal Data Protection (Removal of Difficulties) Order, 2026, S.O. 5458(E), published in October 2026, made editorial clarifications to section 9(1) on children and persons with a lawful guardian, and to section 10(2)(c)(ii) on periodic data audit. It did not bring sections 9 or 10 into early force or change the substantive May 2027 commencement tranche. Official source: https://www.meity.gov.in/static/uploads/2026/10/daf495a7b5798a3dfa72a944b51fc176.pdf. ↗

This Corner notice describes a planned and voluntary privacy practice today and how statutory requests will be addressed when the applicable provisions are in force. It does not falsely assert that every substantive DPDP requirement is already legally enforceable.

• Official commencement notification: Gazette G.S.R. 843(E), 13 November 2025.
• Official DPDP Rules, 2025: Gazette G.S.R. 846(E), 13 November 2025.
• Always check an updated government notification for a change in effective dates.

3. Responsible person and data purposes

Vamsi Marripudi operates Corner as a personal publication and determines the purposes of its account, reaction and community features. If an activity is covered by the DPDP Act, the responsible operator will evaluate the corresponding Data Fiduciary duties and the lawful grounds relevant to that activity.

Member account processing includes identity/contact details, verification, secure sessions and the member’s chosen private profile settings. Published-content and reaction activities use submissions and pseudonymous functional identifiers. Optional analytics and email subscriptions have separate, specific permission flows.

The full data-category inventory, providers, cross-border possibilities and retention practices are set out in the Privacy Policy. Corner does not require an account for ordinary public reading.

4. Notice and meaningful choice

Where consent is the appropriate legal ground, notices will identify which data is requested, what the service will do with it, and how consent can be withdrawn. Detailed reading analytics is off unless affirmatively allowed; a distinct basic event collector currently operates with an explicit refusal option. Declining measurement does not block reading the website. Before applicable consent requirements commence, the operator must assess whether that basic event flow also requires additional opt-in.

Account registration, public-comment submission and optional email subscriptions are different purposes. Agreeing to member account creation does not automatically subscribe a person to publication emails or permit optional reading analytics.

Any new data collection that materially changes these purposes will require its own product review and clear notice before activation.

5. Access, correction, withdrawal and deletion

The DPDP Act provides rights and duties that will apply according to its legally effective dates. Subject to applicability, an individual may request a summary of their personal data and its processing, correction or updating of inaccurate data, erasure when appropriate, withdrawal of consent and grievance redressal.

Existing Corner member controls support changing a display name and bio, updating account preferences, removing an avatar, reviewing saved stories and sessions, requesting an export, and asking for deletion review. Requests requiring identity verification may be paused while we confirm control of the relevant account.

A right to erasure is not always an absolute demand for instantaneous destruction of all backups, security evidence or lawful records. A reasoned response should distinguish between information deleted from the live service and information retained for an overriding lawful purpose.

6. Nomination and authorized representatives

As the relevant statutory framework comes into force, eligible individuals may have nomination rights allowing another person to exercise specified rights in prescribed circumstances. Until an authorized verification process exists, a request on someone else’s behalf may require identity, authority and lawful documentation.

Do not send identification scans, full passwords or one-time codes in a first email. The operator will explain if a secure verification step is necessary.

7. Children and parental permission

The DPDP Act generally defines a child as a person under 18. Its child-related obligations, including verifiable parental consent where applicable, are subject to commencement, exemptions and the precise processing context.

Corner does not currently operate an independent verifiable parental-consent service. For that reason, registered member features are intended for adults 18 and above unless a separate lawful arrangement is implemented and verified. Public reading does not require an account.

If you believe the service holds improperly submitted information about a child, email connect@vamsimarripudi.me for review and reasonable safeguarding steps.

8. Security incidents and breach response

The operator uses access restrictions, hashed credentials, private image processing, short-lived authentication sessions and backup checks. Security issues should be reported confidentially to the contact email.

When the relevant statutory breach rules apply, their notification and incident-response requirements will take precedence. The site does not promise that every incident is preventable or claim a government security certification.

9. Grievances, escalation and the Data Protection Board

Send a request or complaint to connect@vamsimarripudi.me with the relevant page or account, the nature of the concern, and a contact method. We may ask for proportionate proof of identity or authority. We aim to acknowledge substantive messages within seven calendar days where feasible, but that is an operational target rather than a guarantee or substitute for any applicable statutory deadline.

The DPDP framework provides a process for complaints to the Data Protection Board of India after using the appropriate grievance process, once the relevant rights and procedures are in force. We will not state that a particular government complaint portal or escalation time is currently available unless verified.

10. Official legal sources and changes

The binding text is the official Gazette and laws as amended—not an explanatory summary on this site. The operator should re-review this notice before the next scheduled DPDP commencement milestone and whenever government notifications alter the requirements.

Official 2025 Gazette references: https://egazette.gov.in/WriteReadData/2025/267647.pdf ↗ (DPDP Act commencement) and https://egazette.gov.in/WriteReadData/2025/267650.pdf ↗ (DPDP Rules).

The Privacy Policy and Cookie & Tracking Policy provide the more detailed descriptions of actual current Corner processing.