Complete legal transparency report detailing how Apna Prabh (OPC) Private Limited adheres to the Digital Personal Data Protection Act, 2023 (DPDP Act) and protects customer data privacy.
We present clear notices at the point of data collection detailing the exact purpose of processing. Consent is collected through affirmative, un-bundled, non-pre-ticked checkboxes on both registration and checkout forms.
We only collect data strictly necessary to fulfill e-commerce orders, verify 18+ age criteria, provide invoice tax compliance, and process verified earnings. No invasive advertising tracking, no hidden cookies, and no selling of data.
Under Section 9 of the DPDP Act, commercial processing of children's data is strictly controlled. Apna Prabh enforces automated date-of-birth age validation ensuring all registered customers are at least 18 years of age.
Passwords are cryptographically hashed using standard `bcrypt`. Sensitive payments are processed via PCI-DSS compliant payment aggregator (Razorpay). Sessions are protected against CSRF and injection attacks.
Customers have full access to view, update, correct, or request deletion of their data. In addition, our profile portal allows users to register a designated nominee as provided under Section 14 of the DPDP Act.
If you wish to request a formal copy of your stored data, ask for correction, or request erasure of your non-tax data records, please submit your request to our designated Grievance Officer: