Privacy Policy & DPDP Protocol
Effective Date: September 15, 2026
Review My Business complies with India's Digital Personal Data Protection (DPDP) Act 2023 under registered Data Fiduciary HEROXIE 2374. The platform enforces automated phone number masking (e.g., 98****1234), zero-knowledge customer privacy during QR interactions, SHA-256 cryptographic proof logging, and dedicated statutory grievance redressal within 48 business hours.
1. Data Fiduciary & Information We Collect
Review My Business Online is an online service provided by HEROXIE 2374 (MSME Udyam: UDYAM-CG-05-0065371, Bhilai, Chhattisgarh – 490026), acting as the Data Fiduciary under the Digital Personal Data Protection (DPDP) Act 2023. We collect information provided directly when subscribing to Review My Business Online services, including business name, email address, phone number, and location details.
2. End-User QR Scan & Zero-Knowledge Privacy
When customers scan your printable QR kits, no personally identifiable information (PII) is harvested unless explicitly submitted by the end-user in the feedback alert form. All public ledger records undergo Zero-Knowledge PII redaction.
3. Cryptographic Data Security
Feedback resolution records generate SHA-256 block hashes stored in our public proof ledger. We do not sell or monetize merchant feedback data to third parties.
4. Rights under Digital Personal Data Protection (DPDP) Act 2023
Under India's Digital Personal Data Protection (DPDP) Act 2023, data principals possess the statutory right to access summary information regarding personal data processed, request correction or completion of inaccurate data, request erasure of personal data that is no longer necessary for resolution auditing, and seek grievance redressal. For any privacy requests or questions, please contact our designated privacy desk via our Contact Support Desk.
5. Data Protection Grievance Redressal Officer
In compliance with Rule 3(2) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and Section 8 & 11 of the Digital Personal Data Protection Act, 2023, any data principal may direct inquiries, complaints, or consent revocation notices to our designated Data Grievance Officer via our Contact Support Desk. All statutory inquiries are formally acknowledged within 48 business hours and resolved within 30 days.
Explore Related Guides & Topics
Deep-dive into our operational workflows, verified case studies, pricing tiers, and compliance framework.
Terms of Service
Platform ownership by HEROXIE 2374, merchant terms, and legal governing jurisdiction.
Transparency & Ethics
Plain-English guide to zero review gating, IS 19000:2022 ethics, and Quality Officer audits.
Refund & Fair Play Policy
Official 30-day terms and automated Fair Play audit credit guarantee rules.
Helpdesk & Office
Direct onboarding support, billing assistance, and registered Bhilai office details.