Legal Basis for Processing
DigiBoxx processes personal data collected via cookies on the following legal grounds:
Consent
GDPR Art. 6(1)(a) · DPDP Act §7For non-essential cookies (functional, analytics, marketing), we rely on your freely given, specific, informed, and unambiguous consent obtained via our cookie consent banner.
Legitimate Interests
GDPR Art. 6(1)(f)For analytics cookies that help us improve platform security and performance, where our interests are not overridden by your rights.
Contractual Necessity
GDPR Art. 6(1)(b) · DPDP Act §7Strictly necessary cookies are required to provide the DigiBoxx service you have requested. No consent is required for these.
Legal Obligation
GDPR Art. 6(1)(c) · IT Act 2000Certain cookies may be required to comply with applicable Indian laws, including the Information Technology Act, 2000 and its rules.
Third-Party Cookies
Some cookies on DigiBoxx are placed by third-party service providers. We have data processing agreements in place with each provider. Their use of your data is governed by their own privacy policies.
| Provider | Category | Purpose | Privacy Policy |
|---|---|---|---|
| Google Analytics | Analytics | Usage statistics, page views, session data | View Policy ↗ |
| Google Ads | Marketing | Conversion tracking, remarketing | View Policy ↗ |
| Meta (Facebook) | Marketing | Pixel tracking, ad attribution | View Policy ↗ |
| Hotjar | Analytics | Heatmaps, session recordings | View Policy ↗ |
| Razorpay | Necessary | Payment processing, fraud prevention | View Policy ↗ |
Your Rights
Under the DPDP Act, 2023 and GDPR, you have the following rights with respect to cookies and the personal data they collect:
Right to Withdraw Consent
You may withdraw consent for non-essential cookies at any time via our consent banner or browser settings. Withdrawal does not affect prior processing.
DPDP §6 · GDPR Art.7(3)Right to Access
You may request details of personal data collected about you through cookies and how it is used.
DPDP §11 · GDPR Art.15Right to Erasure
You may request deletion of personal data collected via cookies, subject to legal retention obligations.
DPDP §12 · GDPR Art.17Right to Data Portability
You may request your personal data in a structured, machine-readable format where technically feasible.
GDPR Art.20Right to Object
You may object to processing of your data for marketing or profiling purposes at any time.
DPDP §13 · GDPR Art.21Right to Grievance Redressal
You may raise a complaint with our Grievance Officer or the Data Protection Board of India.
DPDP §13 · GDPR Art.77DPDP & GDPR Compliance
Digital Personal Data Protection (DPDP) Act, 2023. India
DigiBoxx is incorporated in India and processes personal data of Indian citizens. We comply with the DPDP Act, 2023 by: (a) obtaining free, specific, informed, and unambiguous consent before processing non-essential cookie data; (b) providing clear notice of data processing purposes; (c) honouring all data principal rights including access, correction, erasure, and grievance redressal; (d) appointing a Grievance Officer accessible to Indian users; and (e) not transferring personal data to countries not notified by the Central Government.
General Data Protection Regulation (GDPR), European Union
For users in the European Economic Area (EEA), DigiBoxx complies with GDPR by: (a) relying on a valid legal basis for each cookie category; (b) providing granular consent controls; (c) maintaining records of processing activities; (d) honouring all data subject rights within statutory timeframes; (e) implementing appropriate technical and organisational security measures; and (f) ensuring any international data transfers are protected by Standard Contractual Clauses (SCCs) or equivalent safeguards.
DigiBoxx does not sell personal data collected via cookies to third parties. We do not use cookies to make automated decisions that produce legal or similarly significant effects on individuals without human review.
Policy Updates
We may update this Cookie Policy periodically to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will:
- Update the "Effective Date" at the top of this page
- Display a prominent notice on the DigiBoxx platform for at least 30 days
- Send an email notification to registered users for significant changes
- Re-request consent where required by applicable law
Continued use of DigiBoxx after the effective date of a revised policy constitutes acceptance of the updated terms, to the extent permitted by applicable law.
Contact & Grievance Redressal
If you have questions about this Cookie Policy, wish to exercise your rights, or want to raise a grievance, please contact us through any of the following channels:
Data Protection Officer
DigiBoxx Technologies Pvt. Ltd.
Response within 72 hours for GDPR requests · 30 days for DPDP requests
Grievance Officer (India)
As required under DPDP Act, 2023 & IT Act, 2000
Complaints acknowledged within 48 hours · Resolved within 30 days
Regulatory Escalation
If you are not satisfied with our response, you may escalate your complaint to the Data Protection Board of India (once operational under DPDP Act, 2023) or, for EEA residents, to your local Data Protection Authority (DPA).