Digital Personal Data Protection Act (DPDP)

At Fameweb, we are committed to handling personal data responsibly, transparently, and securely. We recognise the importance of protecting individual privacy and aim to align our data handling practices with India’s Digital Personal Data Protection Act, 2023 (DPDP Act), and the applicable Digital Personal Data Protection Rules, 2025.

This page explains how Fameweb approaches personal data protection, the measures we take to safeguard information, and how individuals can exercise their privacy rights.

1. Our Commitment to Data Protection

Fameweb is committed to responsible data processing throughout our website, business operations, and service delivery.

Our approach is guided by the following principles:

• Transparency: We aim to explain what personal data we collect and why we need it.

• Purpose limitation: We use personal data for specified and legitimate purposes.

• Data minimisation: We seek to collect only the information reasonably necessary for the intended purpose.

• Security: We take reasonable technical and organisational measures to protect personal data.

• Limited retention: We retain personal data only for as long as necessary, subject to applicable legal requirements.

• Individual rights: We provide channels for individuals to submit privacy-related requests.

• Accountability: We aim to review and improve our data protection practices as our business, technology, and legal obligations evolve.

2. Personal Data We May Collect

Depending on how you interact with Fameweb, we may collect the following categories of personal data:

Information you provide directly

• Name, email address, and phone number.

• Company name, designation, and business contact details.

• Project requirements, service enquiries, and communication history.

• Information submitted through contact forms, consultation requests, or other website forms.

Technical and website usage information

• IP address and basic device or browser information.

• Pages visited, referring websites, and interaction data.

• Cookie identifiers and analytics information, where applicable.

Client and service-related information

When providing technology, AI, website development, digital transformation, or marketing services, we may process information supplied by clients or generated through service delivery. The type of information depends on the agreed scope of work and may include business contact details, lead information, customer records, or other client-provided data.

We aim to collect and process such information only for appropriate, disclosed, and lawful purposes.

3. Why We Process Personal Data

We may process personal data for the following purposes:

• Responding to enquiries and providing consultations.

• Preparing proposals, managing contracts, and delivering services.

• Communicating project updates and providing customer support.

• Maintaining and improving our website, products, and services.

• Understanding website usage and measuring performance.

• Sending relevant business updates or marketing communications where permitted.

• Maintaining business records and meeting applicable legal obligations.

• Protecting our systems, investigating security incidents, and preventing misuse.

Where required by applicable law, we will seek valid consent before processing personal data. Where another lawful basis is available under applicable law, we will process the information in accordance with that basis.

4. Notice, Consent and Individual Choice

We aim to provide clear information about the personal data we collect, the purposes for which it is processed, and the ways individuals can contact us regarding their information.

Where consent is required, we will seek consent through an appropriate process before processing personal data. Individuals may withdraw their consent, subject to applicable law and the consequences of withdrawal.

Withdrawing consent does not invalidate processing that was lawfully carried out before withdrawal. It may, however, affect our ability to provide certain services or fulfil specific requests.

We will not treat consent as a blanket authorisation to use personal data for unrelated purposes.

5. Cookies, Analytics and Marketing Technologies

Fameweb may use cookies and similar technologies to:

• Support essential website functionality.

• Remember user preferences.

• Understand website traffic and visitor behaviour.

• Measure marketing campaign performance.

• Improve website usability and performance.

Where required, we will provide appropriate information and obtain consent before using non-essential cookies or similar technologies.

You can manage cookies through your browser settings. Blocking certain cookies may affect website functionality.

If we use third-party analytics or advertising services, those providers may process certain technical or usage information in accordance with their applicable terms and privacy policies.

6. Data Sharing and Third-Party Service Providers

Fameweb does not sell or rent personal data.

We may share personal data with authorised service providers when necessary to operate our business or deliver our services. These providers may include:

• Website hosting and cloud infrastructure providers.

• Email, communication, and customer relationship management platforms.

• Analytics and website performance providers.

• AI and software service providers used for agreed business purposes.

• Professional advisers and other service providers where necessary.

We aim to limit the information shared to what is reasonably necessary for the relevant purpose and to use appropriate contractual and organisational safeguards.

We may also disclose information where required or authorised by applicable law.

7. How We Protect Personal Data

We recognise that privacy depends on both appropriate policies and practical security measures.

Depending on the nature of the information and the services involved, our data protection approach may include:

• Access restrictions based on business requirements.

• Authentication and account security controls.

• Secure configuration and maintenance of systems.

• Reasonable safeguards for data transmission and storage.

• Monitoring and investigation of suspected unauthorised access.

• Backup, recovery, and continuity measures where appropriate.

• Review of third-party services involved in processing personal data.

The specific controls applied may vary according to the service, system, and sensitivity of the information involved.

No online system or transmission method can be guaranteed to be completely secure. We therefore work to reduce risks through reasonable safeguards and ongoing improvements.

8. Data Retention and Deletion

We retain personal data only for as long as reasonably necessary to fulfil the purpose for which it was collected, provide our services, maintain relevant business records, resolve disputes, and meet applicable legal obligations.

Retention periods may differ depending on the type of information and the nature of our relationship with the individual or client.

When personal data is no longer required, we aim to securely delete or anonymise it in accordance with applicable requirements and our retention practices.

Where data is processed on behalf of a client, retention and deletion may also be governed by the relevant agreement and the client's documented instructions.

9. Data Breach and Incident Response

Fameweb recognises the importance of responding promptly to suspected personal data breaches.

Our intended approach is to assess reported incidents, take reasonable steps to contain and investigate them, mitigate potential harm, and implement corrective measures where appropriate.

Where notification is required under applicable law, we will follow the relevant reporting and communication requirements, including applicable timelines and instructions from competent authorities.

Clients who engage Fameweb to process personal data on their behalf should notify us promptly of any suspected incident involving data processed through our services.

10. Your Rights Under the DPDP Framework

Subject to the applicability and commencement of the relevant legal provisions, individuals may have rights under the DPDP Act, including:

• Access to information: Request information about personal data and its processing as provided under applicable law.

• Correction and updating: Request correction of inaccurate or misleading personal data and completion or updating where applicable.

• Erasure: Request deletion of personal data where legally applicable and where retention is not required by law.

• Withdrawal of consent: Withdraw consent previously provided for consent-based processing.

• Grievance redressal: Raise privacy concerns or complaints through our designated contact channel.

• Nomination: Exercise the right to nominate another individual in accordance with applicable legal provisions.

Individuals may also have duties under the DPDP Act, including providing accurate information and avoiding impersonation or suppression of material information where relevant to a request.

To submit a request, please contact us using the details in the section below. We may need to verify your identity before acting on a request. We will handle requests in accordance with the applicable legal requirements and timelines.

11. Processing Personal Data on Behalf of Clients

As a digital transformation company, Fameweb may develop, configure, or manage technology solutions that process personal data for clients.

Depending on the engagement, a client may determine the purposes and means of processing while Fameweb processes information on the client's behalf under contractual instructions.

In such cases, our responsibilities and the client's responsibilities will depend on the nature of the processing, applicable law, and the terms of the engagement.

Clients remain responsible for ensuring that they have the necessary authority, notices, permissions, and lawful basis to provide personal data to Fameweb for processing.

Fameweb aims to process client-provided personal data only within the agreed scope of services and applicable instructions. We do not represent that every client system or integration is automatically compliant solely because Fameweb provides or configures it.

12. AI Systems and Automated Processing

Fameweb provides AI-related and digital transformation services that may involve artificial intelligence tools, analytics platforms, or automated workflows.

Where personal data is processed through these services, we aim to consider the purpose of processing, the information shared with the relevant provider, access permissions, and appropriate safeguards.

We seek to avoid using personal data for unrelated purposes and to limit disclosure to AI or other third-party providers to what is appropriate for the agreed service.

The handling of information by third-party AI providers may also be governed by their own terms, privacy policies, and contractual arrangements. Clients should ensure that personal data submitted to AI-enabled solutions is authorised for the intended use.

13. International Data Transfers

Some technology, hosting, analytics, communication, or AI service providers may process or store information outside India.

Where personal data is transferred internationally, Fameweb aims to consider applicable Indian legal requirements, relevant government restrictions, and appropriate contractual or organisational safeguards.

The location of processing may depend on the services selected and the configuration of the relevant systems.

14. Third-Party Websites and Services

Our website may contain links to third-party websites, tools, or platforms. Those services operate under their own terms and privacy policies.

Fameweb is not responsible for the independent privacy practices of third-party websites that we do not control. We encourage users to review the relevant privacy notices before sharing personal data with those services.

15. Children's Personal Data

Fameweb's services are primarily intended for businesses and professional users. We do not knowingly seek to collect children's personal data through our website unless there is an appropriate lawful basis and the applicable legal requirements are met.

Where the DPDP Act's provisions relating to children's personal data apply, we will address the applicable requirements concerning verifiable parental consent and restrictions on processing.

16. Updates to This Policy

We may update this page to reflect changes in our services, data handling practices, technology, or applicable legal requirements.

The revised policy will be published on this page with an updated revision date. We encourage visitors and clients to review this page periodically.

17. Contact and Grievance Redressal

If you have questions about this policy, wish to exercise a privacy right, or want to raise a grievance relating to personal data processed by Fameweb, please contact us.

Website: https://fameweb.in/contact

Please include sufficient information to help us understand and respond to your request. Avoid including passwords, financial account credentials, or unnecessary sensitive information in your initial communication.

We will review and respond to privacy requests and grievances in accordance with applicable law and the relevant legal timelines.

Our commitment: Fameweb aims to build privacy and responsible data handling into the way we deliver digital transformation services. We will continue to review our practices as the applicable DPDP Act provisions and Rules take effect.

This page describes our intended data protection approach and should be read alongside any applicable client agreements, service-specific notices, and contractual data processing terms.