Privacy Policy

D2C Innovate (“we”, “us”) runs the AI-native cohort for D2C brand owners at d2cinnovate.org. We are based in Bengaluru, India. This policy explains what personal data we collect, why, and the rights you have under India’s Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000.

1. Data we collect

• Application details — name, email, phone, brand name, role, and anything you include in your application.
• Cohort communication — messages, session participation, and feedback you share with us.
• Technical data — basic device, browser, and log data collected by our hosting provider to keep the site secure and working.

We do not run advertising trackers on this site, and we do not buy or sell personal data.

2. Why we use it

• Reviewing applications and running admissions.
• Delivering the cohort: sessions, materials, and support.
• Communicating with you about the program.
• Meeting legal obligations and keeping our systems secure.

We process your data on the basis of your consent, given when you apply or contact us. You may withdraw consent at any time by writing to us — withdrawal does not affect processing already done.

3. Sharing

We share data only where needed: with service providers who host our site and email (bound to protect it), and with authorities where the law requires. We never sell your personal data.

4. Retention

Application data is kept for up to 24 months for admissions records; cohort records for up to 36 months for program operations. After that, data is deleted or anonymised.

5. Your rights

Under the DPDP Act, 2023, you may:

• Ask what personal data we hold about you.
• Ask us to correct, complete, or erase it.
• Withdraw consent and ask us to stop processing.
• Raise a grievance with us first, then with the Data Protection Board of India if unresolved.

Write to our grievance contact at privacy@d2cinnovate.org — we respond within 30 days.

6. Security

We use reasonable safeguards — access controls, encrypted transport, and least-privilege tooling. No internet system is perfectly secure; if a breach affects your data, we will notify you and the Data Protection Board as the law requires.

7. Children

The cohort is for adults running or operating brands. We do not knowingly collect data from anyone under 18.

8. Changes

We may update this policy as the program or the law changes. Material changes will be noted here with a new “last updated” date.

9. Contact & jurisdiction

Questions: privacy@d2cinnovate.org, Bengaluru, Karnataka, India. This policy is governed by the laws of India, with courts at Bengaluru having jurisdiction.