Data Protection
Last updated: March 2026
This Data Protection Policy applies to MangalyaMatrimony and the mobile application ‘Mangalya Matrimony South’.
MangalyaMatrimony is committed to protecting your personal data and respecting your privacy rights. This page outlines how we comply with applicable data protection legislation — for users in India, this includes the Digital Personal Data Protection Act, 2023 (DPDP Act) — describing your rights as a data principal and the safeguards we have in place to keep your information secure.
Legal Basis for Processing
We process your personal data on the following legal bases: • Contractual necessity — to provide the matrimony matching service you signed up for • Legitimate interests — to improve our platform, prevent fraud, and ensure security • Consent — for optional features such as marketing communications and third-party integrations • Legal obligation — to comply with applicable laws and regulatory requirements
Your Rights
Under applicable data protection laws — including the DPDP Act, 2023 for users in India — you have the right to: • Access — request a copy of the personal data we hold about you • Rectification — correct inaccurate or incomplete data • Erasure — request deletion of your personal data ("right to be forgotten") • Restriction — ask us to limit how we use your data • Portability — receive your data in a structured, machine-readable format • Object — object to processing based on legitimate interests • Withdraw consent — at any time, without affecting prior processing
Data Transfers
Your data may be transferred to and processed in countries outside your region. We ensure appropriate safeguards are in place, including: • Standard contractual clauses approved by relevant authorities • Data processing agreements with all third-party service providers • Transfers only to countries with adequate data protection standards • Encryption of data in transit and at rest
Data Retention
We retain your personal data only for as long as necessary: • Active accounts — data retained for the duration of your account • Deleted accounts — most data deleted within 30 days of account deletion • Legal obligations — certain data may be retained longer as required by law • Backups — residual copies may persist in backups for up to 90 days • Anonymised analytics data may be retained indefinitely
Data Breach Notification
In the event of a personal data breach, we will: • Report significant cybersecurity incidents to India's CERT-In within 6 hours of detection, as required by the CERT-In Cyber Security Directions, 2022 • Notify the relevant data protection supervisory authority (including the Data Protection Board of India, where applicable) within the timelines required by law • Inform affected users without undue delay if the breach poses a risk to their rights • Document all breaches in our internal breach register • Take immediate steps to contain and remediate the breach
Technical & Organisational Measures
We implement appropriate measures to protect your data: • End-to-end encryption for sensitive communications • Role-based access controls — staff access data only on a need-to-know basis • Regular penetration testing and security audits • Employee data protection training • Privacy by design — data protection built into new features from the start
How to Exercise Your Rights
You can submit a data subject request at any time by:
- Emailing our Data Protection Officer at dpo@mangalyamatrimony.com
- Going to Settings > Privacy Settings in the app for self-service controls
We will respond to all valid requests within 30 days.
Contact Our Data Protection Officer
For any data protection queries, contact us at dpo@mangalyamatrimony.com