Digital Personal Data Protection (DPDP) Compliance
This Digital Personal Data Protection (DPDP) Compliance statement outlines how Zollak — a brand owned and operated by Bahadur Contech Services Pvt. Ltd. — complies with the Digital Personal Data Protection Act, 2023 (DPDP Act 2023) of India. We act as a Data Fiduciary for the personal data of our users (Data Principals).
1. Lawful Basis and Consent
We process your personal data solely on the basis of your explicit, specific, unconditional, and revocable consent, or for legitimate uses as defined under the DPDP Act 2023.
- Consent is obtained during account registration through affirmative actions.
- You may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
- We only collect personal data that is strictly necessary for providing the Zollak social media scheduling and automation services.
2. Rights of the Data Principal
Under the DPDP Act 2023, you hold key rights which you can exercise at any time:
- Right to Access: View all account profiles, credentials, and published history in your settings panel.
- Right to Correction & Erasure: Edit database values in real-time. You can trigger absolute account deletion, which initiates an irreversible deletion process from our primary storage disks.
- Right to Withdraw Consent: Revoke API access authorizations at any time. When you disconnect a channel, the associated security token is instantly cleared from our system.
- Right of Grievance Redressal: Register grievances regarding any processing of personal data with our Grievance Officer.
3. Data Isolation and Enterprise Security
To ensure robust multi-tenant data management, Zollak employs dedicated database isolation via database Row Level Security (RLS). No tenant settings or credentials can be read or modified by other accounts. All API payloads transit via TLS 1.3 encryption, and internal scheduling servers are secured behind localized reverse proxies.
4. Contact our Data Protection Officer / Grievance Officer
If you have questions regarding your data principal rights, or to submit a formal data privacy query, please write to our designated Grievance / Data Protection Officer (DPO) at privacy@zollak.com.