Dharampal Satyapal Limited (hereinafter "us," "we", "our", “DSL” or “Entity”) is committed to the security and responsible management of personal data to function effectively and successfully for the benefit of our stakeholders and users in India (hereinafter “you”, “your” or “User”) who access or use its digital interfaces, including but not limited to its website available at www.dsgroup.com and other online platforms or interfaces owned, operated or provided by the Entity (collectively, the “Platform”).
The Entity is committed to protecting and respecting your privacy and processes your personal data through lawful and proper means in compliance with the Digital Personal Data Protection Act, 2023, Digital Personal Data Protection Rules, 2025, and other rules, regulations and notifications thereunder, as may be issued from time to time, and other applicable laws in India (hereinafter, collectively, the “Data Protection Legislation”).
The purpose of this Privacy Notice (hereinafter ‘‘Notice’’) is to describe how the Entity processes i.e., collects, uses, stores, organises, records, adapts, retrieves, aligns and shares your personal data when you access and use our Platform, provide services, communicate with you (where consent has been obtained), and maintain its internal records, in accordance with the applicable grounds of processing under the relevant Data Protection Legislation.
This Notice is also designed to supply information on how the Entity ensures the security of your personal data, discloses your personal data to third parties, and processes your requests in exercising your rights set out under the Data Protection Legislation. This Notice applies to all Users who access, use or interact with our Platform and whose personal data is collected through the Platform, including but not limited to our employees, and business partners.
This Notice should be read and construed together with all other applicable policies and notices of the Entity, as amended from time to time.
For the purposes of this Notice, the terms “Personal Data”, “Processing”, “certain legitimate uses” and “Data Processors” shall have the meaning ascribed to them under the respective Data Protection Legislation.
Personal data may be collected when you access or use our Platform, register an account, subscribe to our services, report a problem with the Platform, request to address any of your queries, register yourselves with us, to access the services provided by the Entity, register for our outreach efforts, engage with us through email or any other electronic means, sign up for our newsletters, exchange communications, including when you visit our Platform anonymously. We will process your personal data only based on your consent, unless we are entitled to do so for certain legitimate uses as permitted under the Data Protection Legislation. The personal data we collect from you includes the following:
(i) Personal data provided by you:
(ii) Personal data that we collect automatically:
We will only process your personal data when we have your consent or for certain legitimate purposes when applicable Data Protection Legislation allows us to do so. Where consent is provided, we process your personal data for purposes including but not limited to:
Enable you to customize or personalize your experience of our Platform.
Your personal data will not be further processed in a manner that is incompatible or in non-compliance with the aforesaid purposes or Data Protection Legislation. We may combine your voluntarily provided, and automatically collated, personal data with general information or research data we receive in the ordinary course from other sources in compliance with Data Protection Legislation. For example, our marketing and market research activities may uncover data and insights, which we may combine with information about how you use our Platform as a medium to ask for information and how you experience your journey on our Platform.
We may send you essential service-related communications, such as notices about maintenance, outages, or policy updates. These are not promotional and are necessary for service delivery; therefore, you cannot opt out of them unless you delete your account or unsubscribe from the services.
We do not knowingly solicit or process personal data of individuals below the age of 18 (eighteen) (hereinafter, “Child(ren)”), or of individuals who have long term physical, mental, intellectual or sensory impairment which, in interaction with barriers, hinders their full and effective participation in society equally with others, including those suffering from conditions relating to autism, cerebral palsy, mental retardation or a combination of any two or more of such conditions, or individuals suffering from severe multiple disability, and who, despite being provided adequate and appropriate support, are unable to take legally binding decisions (hereinafter, “Person(s) with Disability”).
If you notify us or we discover that we have unintentionally processed personal data of a Child, or of a Person with Disability, we will erase their personal data from our records promptly.
We uphold the principle of retaining your personal data only for the duration necessary to fulfil its intended purpose as outlined in our Notice or until you request for the withdrawal or erasure of your personal data. Nevertheless, there are certain circumstances where we may need to keep your personal data for a longer time period, for the following purposes: (i) for compliance with Data Protection Legislation, including for certain legitimate uses such as employment-related processing of social security contributions/ payments (including provident fund and gratuity); and (ii) for compliance with applicable laws, including maintaining adequate records for the purpose of financial, tax, accounting or reporting obligations for such time periods as prescribed under applicable laws, and for statistical analysis.
If your personal data is no longer needed for such purposes, we will notify you in accordance with this Clause, and then remove it or anonymize it by removing any identifiable details and cause our data processors, who process your personal data on behalf of us, to do the same.
In the event you wish to: (i) request access and seek details in relation to the processing and disclosure activities undertaken by us or our data processors in respect of your personal data; (ii) request for change/correction in the personal data you have provided to us; (iii) request for erasure of your personal data; or (iv) wish to nominate another individual to exercise your rights in accordance with the Data Protection Legislation, please reach out to our Data Protection Officer, whose details are set out in this Notice.
Please note that we rely on you with regard to the accuracy of the information shared on the Platform. You hereby represent to us that: (i) the information you provide to us from time to time is and shall be authentic, correct, current and updated and you have all the rights, permissions and consents, as may be required, to provide such information to us; and (ii) your providing of the information to us and our consequent processing of such information shall not be in violation of applicable law.
We and each of our representatives, officers, directors, contractors and agents do not independently verify the accuracy and shall not be responsible for the authenticity of the information that you provide to us. You shall indemnify and hold harmless, us and each of our officers, directors, contractors, agents or any third party relying on the information provided by you in the event: (i) you are in breach of this Notice; and (ii) any suit, action or claim is brought against us by any third party with respect to the information provided by you to us.
Where processing of your personal data is based on consent, you may manage, review or withdraw consent at any time. However, upon such withdrawal there may be certain consequences such as you may be unable to access the Platform, we may not be able to provide services to you or continue our engagement with you. Also, please note that your request for withdrawal will not affect the legality of any processing carried out before you withdraw your consent. Upon your request for withdrawal, the Entity and its processors will cease processing your personal data within a reasonable time, unless otherwise required by applicable laws.
The security of your personal data is of utmost importance. We implement appropriate technical and organizational measures to safeguard the information you provide, ensuring protection against loss, unauthorized access, disclosure, and misuse. These measures are designed to align with the sensitivity of the data we collect, process, and store, as well as the current advancements in technology. The Entity implements reasonable security practices and procedures as mandated under the Data Protection Legislation and has implemented necessary internal control measures that are commensurate with respect to the personal data and information being collected and the nature of our business.
However, it is important to note that due to the inherent nature of electronic communication and information processing technology, we cannot guarantee absolute security against external intrusions while transmitting data over the internet or when it is stored in our systems. Additionally, when you click on a link leading to a third-party website, please be aware that you will be leaving our site, and we do not have control over or endorse the content found on such third-party sites.
We may disclose your personal data to third-parties, including third party service providers and our parent and subsidiary company (ies), affiliate(s), business partners, or collaborated institutions. Please note that we do not, or have not in the past, under any circumstances disclose/share your personal data for any additional purposes (other than as outlined in this Notice), unless we are entitled to do so under Data Protection Legislation or are required to fulfil a statutory obligation in compliance with Data Protection Legislation and other applicable laws. Where required, we will request for and seek your consent before transferring your personal data to third-parties. For avoidance of doubt, “third-parties” under this section includes third-party service providers, including contractors, data processors, IT service providers, data storage, hosting and service providers, analytics, error loggers, debt collectors, maintenance or problem-solving providers, professional advisors, payment systems operators, and financial institutions.
Without limitation, we may disclose personal data under the following circumstances:
(a) Third-Party Service Providers
These include vendors and partners who assist the Entity in carrying out business operations such as order processing, customer support, payment processing, website and application hosting, technology development, logistics, research, analytics, and IT support. Such service providers are authorised to process personal data only on our behalf, strictly in accordance with our instructions and for the purposes for which they are engaged.
(b) Marketing, Media, and Analytics Partners
We may share personal data with advertising agencies, advertising networks, social media platforms, analytics providers, and other marketing or communication partners to enable promotional campaigns, audience measurement, analytics, and product-related communications. Such sharing shall be undertaken only in accordance with applicable law and, where required, based on your consent.
(c) Data Enrichment and Personalisation Partners
To enhance user experience, personalise communications, and improve the relevance of offers, the Entity may share personal data with trusted data enrichment or personalisation partners. Such sharing shall occur only for identified and lawful purposes, and where explicit user consent is required, such consent shall be obtained prior to such processing.
(d) Data Security and Safeguards
All third parties with whom personal data is shared are required to implement appropriate contractual, technical, and organisational safeguards to ensure the confidentiality, integrity, and lawful processing of personal data in accordance with applicable Data Protection Legislation.
We may transfer your personal data to our affiliates or business partners located outside India, for the purposes set out under this Notice. While the Data Protection Legislation currently does not restrict cross-border transfers, we will ensure that such affiliates or business partners provide a level of protection comparable to that offered by us. In the event of any such cross-border transfer of your personal data, we will ensure compliance with the Data Protection Legislation and also that such partners implement reasonable security measures. Your personal data will not be transferred to any country/territory outside India which is restricted/blacklisted by the Indian Government. Any cross-border transfer of personal data will be carried out in accordance with the applicable grounds of processing outlined in this Notice and in compliance with the requirements of the Data Protection Legislation.
In case you have any questions or grievances with regard to the nature of processing your personal data undertaken by us, or any questions regarding this Notice, or you wish to withdraw your consent or exercise any of your rights available to you under applicable Data Protection Legislation, you may contact the Data Protection Officer (DPO) as identified below:
Email Id: privacy@dsgroup.com
Address: C 6 - 10,Dharampal Satyapal (DS) Road,
Sector - 67, Noida - 201309
If you are a resident of India and have a complaint that we have not addressed to your satisfaction, you may refer the matter to the Data Protection Board of India, once constituted and notified by the Government of India, in accordance with the applicable provisions of the Data Protection Legislation.
At our discretion, we may update our Notice from time to time to reflect updates in our business processes, current acceptable practices, or legislative or regulatory changes, and inclusion/ exclusion of target audience and stakeholders. All updates will be posted at the same link.
If the changes are significant and if required by applicable law, we will notify you through email, website alerts or your chosen communication preferences.
Last updated on 16th September, 2026