Data Principal Rights

Under the DPDP Act, 2023, you — as a data principal — have specific rights over the personal data we hold about you. This page explains those rights and exactly how to exercise them, so you don't have to dig through our full Privacy Policy to find them.

Your rights

• Right to access — request a copy of the personal data we hold about you.
• Right to correction — ask us to fix inaccurate or incomplete data.
• Right to erasure — ask us to delete your personal data, where we're not required to keep it for legal or contractual reasons.
• Right to withdraw consent — opt out of any processing based on consent at any time, without affecting processing that already happened lawfully.
• Right to grievance redressal — raise a complaint if you think we've mishandled your data. See our Grievance Redressal page.
• Right to nominate — nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.

How to exercise a data subject access request (DSAR)

Email support@achsecurity.com with the subject line "Data Rights Request", tell us which right you'd like to exercise, and include enough detail for us to locate your record (e.g. the email address on your account or the one you used to submit a form). We'll verify your identity before acting on the request to protect your data from being accessed by someone else.

How long it takes

We acknowledge every request within 24 hours and complete it within 30 days, consistent with our Grievance Redressal timelines.