HackerHub8 — DPDPA 2023 Compliance

1. Overview

The Digital Personal Data Protection Act, 2023 (DPDPA) is India's dedicated law governing the processing of digital personal data. It recognises both an individual's ("Data Principal's") right to have their personal data protected, and the need of organisations ("Data Fiduciaries") like HackerHub8 Company LLP to process such data for lawful purposes.

As an Indian company handling personal data through our website, training programs, PlayCTF platform, and client engagements, HackerHub8 aligns its data handling practices with the principles and obligations set out in the DPDPA.

2. Our Commitment Under the DPDPA

• Processing personal data only on the basis of consent or another legitimate basis recognised under the Act.
• Applying purpose limitation — using personal data only for the purpose it was collected for.
• Applying data minimisation — collecting only what is necessary for that purpose.
• Providing clear, itemised notice at the point of data collection wherever practicable.
• Implementing reasonable security safeguards to prevent personal data breaches.
• Notifying the Data Protection Board of India and affected Data Principals in the event of a personal data breach, as required under the Act.
• Honouring Data Principal rights as described below.

3. Data Principal Rights We Honour

• Right to Access: obtain a summary of personal data processed and the processing activities carried out.
• Right to Correction & Updating: request correction of inaccurate or incomplete personal data.
• Right to Erasure: request deletion of personal data once it is no longer necessary for the purpose collected, subject to legal retention requirements.
• Right to Grievance Redressal: raise a grievance directly with HackerHub8 and expect a response within a reasonable time.
• Right to Nominate: nominate another individual to exercise these rights on your behalf in the event of death or incapacity.

For details of what data we collect and how, see our Privacy Policy and Data Protection Policy. For retention timelines, see our Data Retention Policy.

4. DPDPA 2023 — Reference

Below is a copy of the Digital Personal Data Protection Act, 2023 for reference and transparency. This resource helps our community understand the key obligations and rights behind India's personal data protection law.

You can also refer to the official DPDPA 2023 text hosted by MeitY, Government of India →

5. Grievance Redressal & Contact

If you have questions about how we handle your personal data under the DPDPA, or wish to exercise a Data Principal right, contact us:

6. Important Legal Disclaimer