Privacy Policy

Notice under the Digital Personal Data Protection Act, 2023

Who is responsible. CSIR-National Physical Laboratory (the “Data Fiduciary”) decides why and how personal data collected through this website is processed.

What we collect and why

Personal data, purpose and retention

Form	Data	Purpose
Contact us	Name, e-mail, optional phone, subject, message	To read and answer your enquiry
Data rights & grievances	Name, e-mail, optional phone, request details	To act on your request under the DPDP Act

We process this data only with your consent, given by ticking the box on the form. We do not use it for any other purpose, sell it, or use it for advertising.

How long we keep it

Resolved enquiries and requests are deleted after 365 days. Security logs of staff sign-ins are kept as required by CERT-In directions.

Your rights

• Ask for a summary of the personal data we hold and how it is used.
• Ask us to correct or complete it, or to erase it.
• Withdraw consent at any time; withdrawal is as easy as giving it – use the data rights form.
• Seek grievance redressal; we respond within 90 days.
• Nominate another person to exercise these rights if you die or become incapacitated.

Children

If you are under 18, your parent or lawful guardian must submit the form on your behalf and give consent.

Cookies and browser storage

We use one session cookie only on forms and the admin sign-in, and one cookie to remember your language choice. Your chosen style and accessibility settings are kept in your browser’s local storage and never sent to us. We use no analytics, advertising or tracking cookies.

Security

Data is stored on servers managed by Knowledge Resource Centre, CSIR-NPL, New Delhi, protected by access control, encrypted connections and audit logging. If a personal-data breach occurs we will inform affected persons and the Data Protection Board as required by law.

Grievance officer

E-mail:

If your grievance is not resolved, you may complain to the Data Protection Board of India.