DPDPA Policy

Digital Personal Data Protection Policy

Last updated: May 2025

This policy is issued pursuant to the Digital Personal Data Protection Act, 2023 (DPDPA) enacted by the Government of India. It describes InternshipForMe's obligations as a Data Fiduciary and your rights as a Data Principal.

1. Who Are We?

InternshipForMe ("Data Fiduciary") is an internship platform. We determine the purpose and means of processing your personal data when you use our services.

2. Consent

Under the DPDPA, we obtain your free, specific, informed, and unambiguous consent before processing your personal data. When you register on InternshipForMe, you provide consent by accepting our Terms & Conditions and Privacy Policy. You may withdraw consent at any time by contacting us — withdrawal will not affect prior lawful processing but may limit your ability to use the platform.

3. Personal Data We Process

We process personal data as described in our Privacy Policy. We do not process sensitive personal data (as defined under the DPDPA) except as strictly necessary to provide specific services you opt into.

4. Your Rights as Data Principal

Under Sections 11–14 of the DPDPA, you have the following rights:

• Right of Access (Section 11): Obtain a summary of your personal data we process and the identities of all Data Fiduciaries and Data Processors with whom it has been shared.
• Right to Correction and Erasure (Section 12): Correct inaccurate or misleading data; request erasure of data no longer necessary for the purpose it was collected.
• Right of Grievance Redressal (Section 13): Have grievances addressed by our Grievance Officer within prescribed timeframes.
• Right to Nominate (Section 14): Nominate another individual to exercise your rights in the event of your death or incapacity.

5. Our Obligations as Data Fiduciary

• Process personal data only for the stated, lawful purpose for which consent was obtained.
• Implement reasonable security safeguards to prevent personal data breaches.
• Notify you and the Data Protection Board of India (DPBI) in the event of a data breach likely to cause harm.
• Not retain personal data beyond the period necessary for the stated purpose.
• Ensure Data Processors engaged by us are contractually bound to equivalent data protection standards.

6. Children's Data

We do not knowingly process the personal data of children (persons under 18 years of age) without verifiable parental consent, as required under Section 9 of the DPDPA. Users must confirm they are 18 or older during registration. If we become aware a child's data has been collected without consent, we will delete it promptly.

7. Cross-Border Data Transfers

Where personal data is transferred outside India (e.g., to cloud infrastructure providers), such transfers are made only to countries or entities notified by the Central Government under the DPDPA as providing adequate data protection.

8. Grievance Officer

In accordance with Section 13 of the DPDPA and the IT (Intermediary Guidelines) Rules, 2021:

• Name: Grievance Officer, InternshipForMe
• Email: grievance@internshipforme.in
• Response Time: Acknowledgement within 48 hours; resolution within 30 days.

9. Data Protection Board of India

If your grievance is not resolved to your satisfaction, you have the right to approach the Data Protection Board of India (DPBI) once constituted, for adjudication under the DPDPA.

10. Updates to This Policy

This policy will be updated to reflect changes in the DPDPA, its rules, and our practices. Significant changes will be communicated to you via email.