Data Rights and Grievance Procedure

• Ask for information about personal data and processing where applicable law provides that right.
• Correct inaccurate or incomplete personal data.
• Request erasure where the purpose is complete and no retention requirement applies.
• Withdraw consent for future processing where consent is the basis.
• Raise a grievance about privacy, security, or an earlier request.
• Nominate another individual to exercise applicable DPDP rights in circumstances provided by law once that right applies.

Email support@whats91.com with the subject “Privacy request”. Include your name, linked email or phone, organisation or Whats91 customer involved, requested right, and enough context to locate the information.

Do not send passwords, API keys, one-time codes, complete card numbers, or unnecessary identity documents in the first email.

We may ask for proportionate information to verify identity, account authority, or a lawful representative. We will not disclose account or message data when the requester cannot be reliably connected to it.

If a business contacted you using Whats91, that business normally decides why your information is used. Contact it first. When Whats91 processes the data for that customer, we may forward the request and provide reasonable assistance without independently changing records unless authorised or legally required.

We will acknowledge and respond within the period required by applicable law. A request may be limited where retention or disclosure is legally required, another person’s rights would be affected, identity cannot be verified, or the request is manifestly fraudulent or abusive.

If you disagree with the response, reply with the original request reference and unresolved issue. Relevant DPDP rights require using the Data Fiduciary’s grievance process before approaching the Board. Other complaint routes may apply under other laws.