Home

Data Processing Agreement

Last updated: June 2026

This Data Processing Agreement ("DPA") is incorporated into the Sarvaraj Terms and Conditions and applies where Sarvaraj processes Personal Data on behalf of a Customer in the course of providing its services.

1. Definitions

"Personal Data", "Data Subject", "Processing", "Controller", and "Processor" have the meanings given in applicable data-protection law, including the Information Technology Act 2000 and the Digital Personal Data Protection Act 2023 (India).

2. Scope and Roles

The Customer acts as the Controller of Personal Data. Sarvaraj acts as the Processor, processing Personal Data only on documented instructions from the Customer and for no other purpose.

3. Processor Obligations

  • Process Personal Data only on the Customer's documented instructions.
  • Ensure persons authorised to process Personal Data are bound by confidentiality.
  • Implement appropriate technical and organisational security measures.
  • Notify the Customer without undue delay upon becoming aware of a Personal Data breach.
  • Delete or return all Personal Data to the Customer upon termination of services.

4. Sub-processors

Sarvaraj may engage sub-processors to assist in providing its services. A current list of sub-processors is available on request at hello@sarvaraj.com. Sarvaraj will inform the Customer of any intended changes and provide an opportunity to object.

5. Data Transfers

Personal Data is processed primarily within India. Where transfers outside India occur, Sarvaraj implements appropriate safeguards in accordance with applicable law.

6. Contact

For DPA-related enquiries, contact us at hello@sarvaraj.com or by phone at +91 85535 55564.