Loading page content
These terms govern your use of this website and the resources published on it. They are not the terms of a paid engagement — those are negotiated separately and are materially different, particularly on liability.
We have tried to write these without the defensive padding that makes most website terms unreadable. Where a limitation is genuinely in our interest rather than yours, we have said so plainly rather than dressing it up.
These terms govern your use of https://www.datatrustindia.com and the content, resources and downloadable materials published on it. By using this website you agree to them. If you do not agree, please do not use the site.
The site is operated by DATA Trust India Consulting, a company incorporated in India and trading as DATATrust India. References to "we", "us" and "our" mean that company.
Everything published on this website — articles, guides, templates, checklists, registers and whitepapers — is general information. It is written by practitioners and reflects our experience, but it is not legal advice, and it is not professional advice given in relation to your organisation.
It cannot be, because advice requires knowledge of your systems, your contracts, your regulatory exposure and your risk appetite. None of which we have unless you engage us.
Do not act or refrain from acting on the strength of anything on this site without appropriate professional advice for your circumstances. Nothing here creates a client relationship, and no duty of care arises from your use of it.
We publish working artefacts from live engagements because they are more useful in your hands than in ours. The licence below is deliberately permissive.
If you want to redistribute a resource inside a commercial product, write to hello@datatrustindia.com describing what you intend. The answer is usually yes, and we will say so in writing.
We do not warrant that using any resource, template or guidance published here will make your organisation compliant with any regulation, standard or framework. No resource can do that.
A template is a starting structure. It cannot know whether the control it describes is operating in your environment, whether your evidence would satisfy your auditor, or whether the judgement calls you make while adapting it are sound. Those are the parts that determine an outcome, and they are the parts a document cannot supply.
We keep resources current — every one carries a version and an update date — but frameworks and regulations change, and there may be a period between a change and our revision. Check the update date against the current state of the obligation you are addressing.
The site and its content are provided on an "as is" and "as available" basis, without warranties of any kind, whether express or implied, to the fullest extent permitted by applicable law.
To the fullest extent permitted by applicable law, we will not be liable for any indirect, incidental, special, consequential or punitive loss, or any loss of profit, revenue, data, goodwill or anticipated saving, arising out of or in connection with your use of this website or its content.
Our total aggregate liability arising out of or in connection with your use of this website, whether in contract, tort including negligence, breach of statutory duty or otherwise, is limited to ten thousand rupees (₹10,000).
Nothing in these terms excludes or limits our liability for death or personal injury caused by our negligence, for fraud or fraudulent misrepresentation, or for any other liability that cannot lawfully be excluded or limited.
These limitations do not apply to a paid engagement. Where you engage us for services, liability is governed by the engagement contract, which is negotiated separately and provides materially different protection.
When using this website you agree not to:
We welcome coordinated vulnerability disclosure. If you believe you have found a security issue, report it to security@datatrustindia.com before taking any further action. We will not pursue legal action against researchers who act in good faith, avoid privacy violations and data destruction, and give us reasonable time to remediate before disclosing publicly.
Unauthorised testing that degrades service availability, accesses other users' data, or continues after we have asked you to stop is outside that protection.
All content on this website — text, graphics, layout, code, our methodology and our control library — is owned by us or licensed to us, and is protected by Indian and international intellectual property law.
The DATATrust India name, the shield mark and our brand assets are our property. Framework names such as ISO 27001, SOC 2, DPDPA, NIST CSF and PCI DSS belong to their respective owners, and our use of them is descriptive and does not imply any endorsement, affiliation or accreditation.
This site links to external resources, including our Digital Trust assessment platform, regulator publications and third-party tools. We do not control those sites and are not responsible for their content, availability, security or privacy practices.
A link is not an endorsement. Where a link goes to a service operated by someone other than us, its own terms and privacy notice apply to your use of it.
We aim to keep this site available but do not guarantee uninterrupted access. We may suspend, withdraw or restrict all or part of it for business or operational reasons, and we may change or remove content at any time.
We may revise these terms. The effective date at the top of this page reflects the current version, and continued use of the site after a revision constitutes acceptance of it. Where a change is material we will make it prominent rather than silent.
These terms and any dispute arising out of or in connection with them, including any dispute regarding their existence, validity or termination, are governed by the laws of India.
The courts at New Delhi, Delhi have exclusive jurisdiction, save that we may seek injunctive relief in any jurisdiction where necessary to protect our intellectual property or confidential information.
If any provision of these terms is found to be unenforceable, the remaining provisions continue in full force.
For any question, request or complaint relating to this document, contact our Data Protection Officer at dpo@datatrustindia.com, or write to us at B-313, 3rd Floor, Ansal Chambers-1, Bhikaji Cama Place, New Delhi, Delhi 110066, India.
We acknowledge every request within three working days and respond substantively within the statutory period. If you are not satisfied with our response, you may escalate to the Data Protection Board of India or, where the GDPR applies to the processing, to your local supervisory authority.