Last updated: March 28, 2026 | Version 1.0
DPDP Act 2023 Notice
This notice is issued pursuant to the Digital Personal Data Protection Act, 2023 ("DPDP Act") by ORIS Intelligence Pvt. Ltd. ("Data Fiduciary").
1. Purpose Limitation
We process your personal data for the following specific purposes:
- Operating the Evaaluate statutory valuation platform
- Processing valuation engagements and generating reports
- Account management and authentication
- Billing and payment processing
- Sending service notifications and engagement status updates
- Platform improvement through anonymized aggregate analytics
2. Consent Management
Consent is obtained at the time of account registration. You may withdraw consent at any time by contacting our Grievance Officer. Withdrawal of consent will result in termination of your account and deletion of personal data (subject to statutory retention obligations).
3. Data Principal Rights
Under the DPDP Act, you have the right to:
- Access: Obtain a summary of your personal data being processed
- Correction: Request correction of inaccurate or incomplete personal data
- Erasure: Request deletion of personal data (subject to statutory retention periods of 7 years for valuation records)
- Grievance Redressal: Submit complaints to our Grievance Officer
- Nomination: Nominate another individual to exercise your rights in case of death or incapacity
4. Grievance Redressal
Grievance Officer: Data Protection Officer, ORIS Intelligence Pvt. Ltd.
Email: dpo@evaaluate.com
Response timeline: Within 15 days of receipt of complaint
If unsatisfied with our response, you may approach the Data Protection Board of India.
5. Breach Notification
In the event of a personal data breach that is likely to cause harm to Data Principals, we will notify the Data Protection Board of India and affected Data Principals within 72 hours of becoming aware of the breach.
6. Data Fiduciary Obligations
- We process personal data only for the purposes stated in this notice
- We implement reasonable security safeguards (AES-256 encryption, TLS 1.3, tenant isolation)
- We do not retain personal data beyond the period necessary for the stated purpose
- We ensure accuracy of personal data and provide mechanisms for correction
- All data is stored within India (AWS Mumbai region)
7. Contact
Data Protection Officer: dpo@evaaluate.com | ORIS Intelligence Pvt. Ltd., Bengaluru, Karnataka, India