DPDP Compliance

StoryBooks India is committed to respecting your rights under the Digital Personal Data Protection Act, 2023 (DPDP Act), India’s landmark legislation governing the processing of personal data. This page explains how we comply with the DPDP Act and how you can exercise your rights as a data principal.

Scope and Applicability

The DPDP Act applies to the processing of digital personal data within India, and to processing outside India if it relates to Indian data principals. StoryBooks India collects minimal personal data solely for the purpose of fulfilling book orders and improving customer experience. We do not maintain user accounts, databases of personal information, or conduct profiling. Our data processing is limited to order-related information provided at checkout and automatically collected data such as IP addresses and browser details through analytics tools.

Your Rights Under DPDP

Under the DPDP Act, you have the following rights as a data principal:

• Right to access your personal data processed by us
• Right to correction or update of inaccurate or incomplete data
• Right to withdraw consent for processing, where applicable
• Right to grievance redressal if you believe your rights have been violated
• Right to nominate another individual to act on your behalf in case of death or incapacity

How We Comply

StoryBooks India complies with the DPDP Act by:

• Collecting only the minimum personal data necessary for order processing
• Not storing personal data longer than required for legal or operational purposes
• Using secure payment gateways and encrypted connections
• Not sharing personal data with third parties except for essential service providers (e.g., shipping partners) under strict data handling agreements
• Providing clear notice at the point of data collection

Data We Process

The personal data we process includes:

• Name
• Shipping address
• Email address
• Phone number (optional)
• Payment details (processed via secure third-party gateways, not stored by us)
• Device and browsing data (via analytics tools for site improvement)

Legal Basis for Processing

We process your data based on:

• Performance of a contract (to deliver your book order)
• Legitimate interest in improving our website and customer service

We do not rely on consent for essential processing related to order fulfillment. For non-essential processing (e.g., analytics), we provide clear notice and allow you to opt out.

How to Exercise Your Rights

To exercise your rights under the DPDP Act, please contact us via email at [email protected]. Include:

1. Your full name
2. Your email address or order number (if applicable)
3. Specify the right you wish to exercise (access, correction, withdrawal, etc.)

We will respond without undue delay and within 30 days of receiving your request.

Response Timeframes

Under the DPDP Act, we are required to respond to your requests within 30 days. In exceptional circumstances, we may extend this period by an additional 15 days and will notify you if this occurs.

No Discrimination Policy

We do not and will not discriminate against you for exercising your rights under the DPDP Act. You will not be denied services, charged different prices, or receive a lower quality of service because you have requested access, correction, or withdrawal of your data.

Updates and Changes

We may update this DPDP Compliance page periodically to reflect changes in the law or our practices. Any material changes will be posted here with an updated effective date. We recommend reviewing this page occasionally.

Contact Information

If you have questions, concerns, or wish to file a complaint regarding your personal data, please contact:

Darren Lanchester
Email: [email protected]
Address: Clifton Suspension Bridge, Bridge Road, Leigh Woods, Bristol BS8 3PA, United Kingdom

You also have the right to file a complaint with the Digital Personal Data Protection Board established under the DPDP Act if you are unsatisfied with our response.