1. Data Fiduciary
Desk Daddy, operating at deskdaddy.in, is the Data Fiduciary responsible for the processing of your personal data under the Digital Personal Data Protection Act, 2023 (DPDP Act). Contact: privacy@deskdaddy.in.
2. Personal Data We Collect
We collect personal data only when you voluntarily provide it:
- Inquiry forms: Full name, email address, phone number, company name, team size.
- Account registration: Full name, email address, phone number, password (hashed).
- Bookings: Booking dates, seat count, payment information (processed by Razorpay; we do not store card details).
- Google OAuth: Name, email address, and Google profile ID (if you choose to sign in with Google).
3. Purpose of Processing
We process your personal data for the following purposes:
- To connect you with coworking space providers based on your inquiry.
- To create and manage your user account.
- To process workspace bookings and payments.
- To send booking confirmations and inquiry status updates via email.
- To improve our platform and user experience (analytics, only with your consent).
4. Data Sharing
We share your inquiry details (name, email, phone, requirements) with the workspace provider you selected. We do not sell your personal data. We use third-party services for payment processing (Razorpay), email delivery (SendGrid), and analytics (Google Analytics, only with consent). Each processor is contractually bound to protect your data.
5. Data Retention
We retain your personal data for as long as your account is active or as needed to fulfill the purposes described above. Inquiry data is retained for 24 months. Booking records are retained for 7 years for tax and compliance purposes. You may request deletion at any time (see Section 7).
6. Cookies
We use essential cookies for authentication and session management. Analytics cookies (Google Analytics) are only activated with your explicit consent via our cookie consent banner. You can withdraw consent at any time by clearing your browser cookies.
7. Your Rights (DPDP Act 2023)
Under the DPDP Act, you have the right to:
- Access: Request a summary of your personal data and how it is processed.
- Correction: Request correction of inaccurate or incomplete data.
- Erasure: Request deletion of your personal data (subject to legal retention requirements).
- Grievance redressal: Lodge a complaint with our Data Protection Officer.
- Nominate: Nominate another individual to exercise your rights in case of death or incapacity.
To exercise any of these rights, email privacy@deskdaddy.in. We will respond within 30 days.
8. Security
We implement industry-standard security measures: passwords are hashed with bcrypt, API access is rate-limited, data is transmitted over HTTPS, and we use secure httpOnly cookies for authentication tokens. Payment data is handled entirely by Razorpay and never touches our servers.
9. Changes to This Policy
We may update this policy from time to time. Material changes will be notified via email to registered users. The “Last updated” date at the top reflects the most recent revision.
10. Contact
Data Protection Officer: privacy@deskdaddy.in
Registered Address: Bangalore, Karnataka, India