This notice explains how Prime Infoserv Pvt. Ltd. handles the information you give us through the DecodeDPDP website, in particular the DPDPA readiness assessment. Please read it before you give your consent.
Who we are
Prime Infoserv Pvt. Ltd. operates DecodeDPDP and is responsible for the information collected through this website. You can reach us about anything in this notice at dpdpa@primeinfoserv.com.
What we collect
- Your full name
- Your work email address
- Your phone number
- Your organisation name and, if you give it, your designation
- The answers you give in the assessment and the results generated from them
- Basic records needed to keep the platform secure, such as the time of your submission
We do not ask for passwords, Aadhaar numbers, health information or other sensitive details, and you should not enter them. One-time verification codes are never stored after they are used.
Why we use it
- To administer your DPDPA readiness assessment
- To generate your result and communicate it to you
- To contact you by telephone and email to discuss your assessment, your compliance requirements and relevant Prime Infoserv services
- To keep a record of your enquiry and to protect the assessment platform
- If — and only if — you separately tick the optional box, to send you occasional promotional calls and emails about our privacy, cybersecurity and compliance services
The assessment is a lead-generation tool as well as an awareness tool: when you complete it, our team may contact you about how we can help.
Who else may handle your information
Authorised technology and hosting providers may process this information on our behalf — for example our website and application hosting provider, our database provider, our email delivery provider and the service that helps generate your assessment commentary. They act only on our instructions. We do not sell your information, and we do not pass it to any other marketing platform unless that is separately configured and disclosed to you.
How we protect it
The site is served over encrypted connections. Access to assessment and consent records is restricted by authenticated sign-in and database-level access rules, so you can only see your own information and only a named authorised administrator can see the full records. Administrative sessions expire automatically after a period of inactivity, and administrative actions are logged.
How long we keep it
We keep your information only for as long as it is needed for the purposes above, or for as long as we are required to keep it under applicable law. When it is no longer needed, it is deleted or reduced to a non-identifying record.
Withdrawing consent and stopping communication
You can withdraw your consent, or ask us to stop calling or emailing you, at any time by writing to dpdpa@primeinfoserv.com. Promotional consent is optional and can be withdrawn on its own without affecting your assessment. Withdrawal does not affect anything we lawfully did before you withdrew.
Your rights
Subject to applicable law, you may ask for access to the information we hold about you, ask us to correct it if it is wrong or incomplete, and ask us to erase it. Write to dpdpa@primeinfoserv.com and tell us what you need.
Grievances
If you are unhappy with how we have handled your information, email dpdpa@primeinfoserv.com with the subject line “Grievance”. Our grievance contact will acknowledge your message and respond with the outcome. If you remain dissatisfied, you may escalate the matter to the appropriate authority under applicable law.
Not legal advice
The book, quiz, assessment and any report generated on this website are for information and awareness only. They are not legal advice and do not create a professional relationship. Please take your own advice before relying on them.
Prime Infoserv · Our Expertise, Your Shield

