Statutory Compliance Notice — Republic of India

Digital Personal Data Protection Act, 2023 (DPDP Act) Notice

Effective Date: September 2026 • Platform: ipogreypremium.com

Our Commitment to Your Digital Privacy

IPO Grey Premium ("we", "our", "us") operates ipogreypremium.com as a digital market analytics and IPO intelligence platform. In compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act, Act No. 22 of 2023) enacted by the Parliament of India, this notice informs you ("Data Principal") of the categories of digital personal data we process, the specific lawful purposes of processing, technical safeguards, and your statutory rights under Indian law.

1Lawful Basis & Consent Architecture (Sections 4, 5, & 6)

We process digital personal data strictly on the basis of your freely given, specific, informed, unconditional, and unambiguous consent, or for legitimate uses explicitly permitted under the DPDP Act 2023:

Account Authentication (Google OAuth): When you voluntarily register or log in, we collect your name and email address provided by your identity provider to authenticate your user session and maintain your personalized watchlist.
Client-Side Preferences: Your saved IPOs, filter preferences, and calculator values are stored in your device's local storage (localStorage) and are not broadcast or harvested to our remote databases without your consent.
Security & Operational Logs: We collect server logs, IP addresses, and user-agent strings solely for fraud prevention, rate-limiting, DDoS mitigation, and system stability under legitimate use.

2Statutory Rights of Data Principals (Sections 11, 12, 13, & 14)

As an Indian citizen and user of our digital platform, you are entitled to the following statutory rights under Chapter III of the DPDP Act 2023:

Right to Access Information (Sec 11)

You have the right to obtain a summary of your personal data processed by us and the identities of all third parties with whom such data has been shared.

Right to Correction & Erasure (Sec 12)

You have the right to request correction of inaccurate data, completion of incomplete data, or complete erasure of your personal data when no longer necessary.

Right of Grievance Redressal (Sec 13)

You have the right to have your grievances addressed promptly by our designated Grievance Officer, with escalation rights to the Data Protection Board of India.

Right to Nominate (Sec 14)

You have the right to nominate an individual who, in the event of your death or incapacity, shall exercise your rights as Data Principal.

3Protection of Children's Personal Data (Section 9)

In strict adherence to Section 9 of the DPDP Act 2023, IPO Grey Premium does not deliberately target or collect personal data from individuals under 18 years of age. We do not engage in behavioral tracking or targeted advertising directed at children, nor do we process any personal data that may cause detrimental effects to child well-being.

4Technical Safeguards & Breach Management (Section 8)

We implement comprehensive organizational and technical security measures to prevent personal data breaches:

End-to-end encryption in transit via modern Transport Layer Security (TLS 1.3 / HTTPS).
Encrypted session tokens with secure, HTTP-only, and SameSite cookie flags.
Strict firewall filtering, rate-limiting, and sanitized input validation on all backend endpoints.
In the unlikely event of a digital personal data breach, prompt notification will be issued to the Data Protection Board of India and affected Data Principals in accordance with statutory guidelines.

Designated Grievance Redressal Officer (Section 8(9))

In accordance with Section 8(9) of the Digital Personal Data Protection Act, 2023, the details of our designated Grievance Officer for Indian residents are provided below:

DesignationData Protection & Grievance Redressal Officer

PlatformIPO Grey Premium (ipogreypremium.com)

Official Contact Emailgrievance@ipogreypremium.com

JurisdictionRepublic of India

Statutory Turnaround: Grievance acknowledgement within 72 business hours; resolution within 30 calendar days.

Escalation to Regulatory Authority: If your grievance is not resolved to your satisfaction within 30 days, you have the statutory right under Section 13(3) of the DPDP Act 2023 to submit a formal complaint to the Data Protection Board of India (DPBI).

← Return to IPO Grey Premium Home