IWOCAL Legal
Effective date: 27 September 2026
This Privacy Policy explains how IWOCAL ('we', 'us' or 'our') handles personal data when you use our websites, village information services, accounts, forms, service-request workflows and related digital services.
This Policy is intended to support compliance with applicable Indian privacy and technology laws, including the Digital Personal Data Protection Act, 2023 and rules brought into force under it. Where the EU General Data Protection Regulation (GDPR) applies to a particular processing activity, IWOCAL also seeks to meet the applicable GDPR requirements.
Applicable requirements may differ depending on location, service, category of data and purpose of processing.
Personal data is processed only where an appropriate basis is available under applicable law. Depending on the activity, this may include consent, processing needed to provide a requested service, compliance with legal obligations or another recognised lawful basis.
Where consent is required, IWOCAL seeks to provide clear information about the data and purpose before consent is obtained. Consent may be withdrawn where applicable, subject to legal or operational consequences.
IWOCAL may display information originating from government or public datasets, approved organisations, local contributors or other sources. Source or verification indicators may be shown where available.
Publication does not mean every item has been independently verified by IWOCAL. Important information should be checked against the relevant authoritative source.
IWOCAL may use authorised hosting, technology, communications, security, analytics or operational service providers where necessary to operate the service.
Information may also be disclosed where required by applicable law, lawful government request, court or regulatory requirement, security investigation, or where reasonably necessary to protect users, IWOCAL or others.
Some technology or service providers may process or store information outside the jurisdiction from which IWOCAL is accessed. Where cross-border processing occurs, safeguards required by applicable law should be applied.
Where GDPR applies, relevant transfer requirements will be considered.
Personal data is retained only for as long as reasonably necessary for the purpose for which it was collected, legitimate operational needs, dispute handling, security or fraud prevention, or applicable legal requirements.
Retention periods may differ by data category and workflow. Information may be anonymised or deleted when no longer required, subject to legal and backup constraints.
IWOCAL seeks to use reasonable and appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.
No internet-connected service can guarantee absolute security. Users should protect passwords, authentication codes and devices used to access IWOCAL.
Depending on applicable law and circumstances, individuals may have rights relating to access to information about processing, correction or completion, erasure, withdrawal of consent, grievance redressal or nomination.
Where GDPR applies, additional rights may include restriction, objection, portability and a right to lodge a complaint with a competent supervisory authority.
IWOCAL is not designed to intentionally collect unnecessary personal data from children. Where applicable law requires parental or guardian consent, such consent must be obtained before the relevant processing.
IWOCAL does not intend to use children’s personal data for behavioural tracking or targeted advertising where prohibited by applicable law.
IWOCAL may use necessary storage, cookies or similar technologies for login state, language preference, security, service continuity and analytics where enabled.
Where consent is legally required for non-essential technologies, the appropriate notice or consent mechanism should be used.
Privacy questions, correction requests, withdrawal requests or grievances may be submitted through IWOCAL’s official Contact page.
A dedicated privacy or grievance business contact may be published when required and once the relevant organisational contact is formally designated.
IWOCAL may update this Policy to reflect changes in law, technology, services or processing practices. Material updates will be reflected by changing the effective date and, where appropriate, providing additional notice.