Digital Personal Data Protection Act, 2023
HarmonySuite is a society management platform developed and owned by Novexial Limited. In India, HarmonySuite is marketed by Novexial India.
The Digital Personal Data Protection Act (DPDP), 2023 is India's comprehensive data protection law that governs the processing of digital personal data. HarmonySuite is committed to full compliance with this legislation to ensure the privacy and security of your personal information.
As a society management platform handling sensitive resident and society data, we take our DPDP obligations seriously and have implemented comprehensive measures to ensure compliance.
End-to-end encryption and secure data storage
Clear communication about data usage
Easy access, correction, and deletion of data
Comprehensive privacy policies and records
We process personal data only for legitimate purposes with your consent and provide clear notice about our data practices.
We collect and use data only for specified, explicit, and legitimate purposes related to society management services.
We collect only the minimum data necessary to provide our services effectively.
We maintain accurate and up-to-date personal data and provide mechanisms for users to update their information.
We retain data only as long as necessary for the purposes collected and as required by law.
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or misuse.
We maintain records of data processing activities and are accountable for our compliance with DPDP requirements.
As a data principal, you have the following rights:
Request information about personal data we hold about you
Request correction of inaccurate or incomplete personal data
Request deletion of your personal data when no longer necessary
Request transfer of your data to another service provider
Lodge complaints regarding data processing with our Grievance Officer
Nominate another individual to exercise your rights in case of death or incapacity
We process the following categories of personal data:
We implement industry-standard security measures:
If we transfer personal data outside India, we ensure appropriate safeguards are in place as required under the DPDP Act, including standard contractual clauses and adequacy assessments.
In the event of a data breach that may harm your rights, we will notify you and the Data Protection Board of India as required by law, typically within 72 hours of becoming aware of the breach.
We do not knowingly process personal data of children under 18 years without verifiable parental consent, in compliance with DPDP requirements for processing children's data.
For any concerns, complaints, or requests related to your personal data or our DPDP compliance, please contact our Grievance Officer:
Product Owner
Novexial Limited
Marketing Partner (India)
Novexial India
Pune, Maharashtra, India
Contact Details
We aim to respond to all grievances within 30 days as required under the DPDP Act.
We regularly review and update our data protection practices to ensure ongoing compliance with the DPDP Act and other applicable data protection laws. This includes periodic audits, staff training, and policy updates.
This compliance statement may be updated from time to time to reflect changes in law, regulations, or our data processing practices. We will notify users of significant changes.
For more information about our DPDP compliance or data protection practices:
Novexial Limited
Novexial India
Pune, Maharashtra, India