DPDPA Compliance at OrigLeads

OrigLeads is proud to be India's first lead intelligence platform that is fully compliant with the Digital Personal Data Protection Act, 2023 (DPDPA). We are deeply committed to responsible data processing, transparent usage, and protecting the privacy rights of both our customers and the individuals whose data is present on our platform.

At OrigLeads, data is not just a commodity — it's a responsibility. Our systems, policies, and workflows have been designed to align with DPDPA's core principles, including:

• Lawful and Fair Processing: We collect and process only publicly available business data that falls within the lawful grounds defined by the DPDPA.

• Purpose Limitation: All data made available via OrigLeads is used strictly for B2B communication, research, and outreach — no profiling or advertising to individuals.

• Data Minimization: We only collect and retain information necessary for the stated business purposes and ensure data is updated regularly to maintain accuracy.

To ensure full compliance with the DPDPA, OrigLeads has implemented the following practices:

• Purpose-Driven Processing: Each data field served (email, phone, etc.) has a clearly defined purpose and lawful basis.

• Notice and Transparency: Data principals are made aware, where applicable, of their rights and the processing purposes.

• Data Audit and Traceability: All data sources are documented and verified from trusted public repositories.

• Periodic Refresh Cycles: Contact data is refreshed every 90 days to ensure relevance and compliance with data accuracy norms.

• Grievance Redressal Mechanism: We've appointed a dedicated Grievance Officer and established a simple channel for queries and redressals.

• Cross-Border Compliance: We do not transfer personal data outside India unless explicitly permitted or exempted under the law.

• Data Protection Impact Assessments (DPIA) are performed periodically on our high-impact products. Internal Policies & Training: Our teams undergo regular training to ensure DPDPA awareness and compliance at every level.

• Internal Policies & Training: Our teams undergo regular training to ensure DPDPA awareness and compliance at every level.

If your personal data appears on OrigLeads (e.g., as a director or authorized signatory of a business), you are a Data Principal under DPDPA and have the following rights:

• Right to Access: You may request details on what data we store about you.

• Right to Correction: You can request correction of inaccurate or outdated personal information.

• Right to Erasure: You can request deletion of your data under permitted grounds.

• Right to Consent Management: You have the right to withdraw consent or restrict processing where applicable.

• Right to Grievance Redressal: If you feel your data rights are violated, you may raise a complaint with our Data Protection Officer (DPO).

As a customer of OrigLeads, you have:

• Transparent Access to Source Information

• Full Control Over Data Usage via platform, APIs, or integrations

• Detailed Audit Logs of your data consumption

• Right to Portability, Deletion, or Export of downloaded datasets

• Assurance that the data has been processed in compliance with DPDPA and is sourced only from public and permitted domains

In compliance with Section 10 of the DPDPA, we have appointed a Grievance & Data Protection Officer to handle requests, complaints, and queries.

Name: Harika Pogaku

Email: contact@attestr.com

Address: 8-2-293/K/57/101 Kamalapuri Colony Phase 3 Hyderabad Telangana 500073 India

We respond to all verified requests within 7 working days as per DPDPA guidelines.

Please email us at contact@attestr.com to exercise your data rights.

By aligning our operations with the Digital Personal Data Protection Act, OrigLeads is setting a new standard in ethical B2B data usage. Our focus remains clear — empower sales and research teams with verified, lawful, and privacy-compliant business data.

We believe transparency is the foundation of trust. If you have any questions or feedback on how we handle your data, we'd love to hear from you.