Privacy Policy

This policy explains what personal data we collect, why we collect it, who we share it with, how long we keep it, and the rights you have under Indian law. We have written it in plain language so it is easy to understand.

Last updated: 23 September 2026 DPDP Act, 2023 & IT Act, 2000 We do not sell your data

Platform Role

DeathCertificateCounsel.org is a private administrative facilitation platform. We are not a law firm and not a government website. We do not provide legal advice and do not issue death certificates. Any legal counselling you request is given by an independent Lawyer, who is responsible for his or her own handling of your information under professional duties of confidentiality.

Summary

What we collect

Your contact details, basic details of the deceased person, your request, documents you choose to share, and payment status.

Why

To handle your request, coordinate a session with an independent Lawyer when you ask, process payments and stay compliant with the law.

Who sees it

Our team, the Lawyer you request, and service providers such as payment gateways and hosting. We never sell your data.

How long

Only as long as needed. Most request data is erased within 1 year of closure. Payment records are kept for 8 years, as tax law requires.

Your rights

You can access, correct, update or erase your data, withdraw consent, nominate someone, and raise a grievance.

Contact

Write to our Grievance Officer at support@deathcertificatecounsel.org.

1. Who We Are

DeathCertificateCounsel.org (the "Platform") is owned and operated by Omvin, #3, Sagarkunj Complex, Chirawa, Jhunjhunu, Rajasthan 333026, India ("Company", "we", "us", "our").

For the personal data you share with us, the Company is the Data Fiduciary: the entity that decides why and how your data is processed. You are the Data Principal: the individual the data relates to. These terms come from the Digital Personal Data Protection Act, 2023.

2. Legal Framework

We process personal data in line with applicable Indian law, including:

  • The Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Digital Personal Data Protection Rules, 2025 ("DPDP Rules"), as and when their provisions come into force;
  • The Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules"), to the extent they continue to apply;
  • The Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, where applicable; and
  • The Consumer Protection (E-Commerce) Rules, 2020, where applicable.

The DPDP Rules are being brought into force in phases. We are aligning our practices with the DPDP framework now and will update this policy as further provisions take effect.

3. Personal Data We Collect

3.1 Data you give us
CategoryExamples
Your identity & contact detailsName, mobile number, email address, city and state, relationship to the deceased person.
Details of the deceased personName, date and place of death, address, and the registration authority concerned, where known.
Request detailsThe issue you face (for example delayed registration, correction or a missing record) and any information you choose to share for coordination.
Documents (optional)Copies of documents you choose to upload or send, such as an old certificate, a hospital slip, a cremation or burial receipt, or ID proof.
Payment informationOrder ID, transaction ID, amount, payment status and date. We do not collect or store your full card, UPI PIN, net-banking or CVV details. These are handled directly by the payment gateway.
CommunicationsEmails, WhatsApp messages, and call records or recordings (with notice) exchanged with our support team.
3.2 Data collected automatically
  • Device and log data: IP address, browser type, device type, pages visited, timestamps and referring pages.
  • Cookies and similar technologies: see Section 8.
3.3 Sensitive information: please share only what's needed

Some documents, such as a medical certificate of cause of death, hospital records or Aadhaar, contain sensitive personal data. Please share such documents only when they are needed for coordination. Mask your Aadhaar number (show only the last 4 digits) wherever possible. Share confidential legal facts about your case directly with the Lawyer, not with our staff. Never share passwords, OTPs, UPI PINs or card details with anyone claiming to represent us.

4. Data of the Deceased Person & Family Members

Our service involves information about a person who has died, and sometimes about other family members such as a spouse, parent or legal heir. When you submit such information, you confirm that:

  • you are a family member, legal heir, nominee or authorised representative with a legitimate reason to seek the death certificate; and
  • where you share the personal data of living family members, you are authorised to do so, or you have informed them.

We treat the details of the deceased person with the same care and confidentiality as your own data, and we use them only for the purposes in this policy.

5. Purpose of Processing & Legal Basis

We process personal data only for specified and lawful purposes, and we collect only what is necessary for them:

PurposeLegal basis
Receiving your request, verifying basic details and sharing a document checklistYour consent
Coordinating and scheduling a session with an independent Lawyer, only when you askYour consent
Sending confirmations, scheduling updates and support messages by call, SMS, WhatsApp or emailYour consent
Processing payments and refunds, and keeping invoices and transaction recordsConsent; legal obligation (tax and accounting laws)
Preventing fraud and misuse, securing the Platform, and debuggingLegitimate use / legal obligation
Responding to lawful requests from courts or authorities, and enforcing our TermsLegal obligation (Section 7 of the DPDP Act)
Sending service-improvement surveys or promotional messagesSeparate, optional consent. You can opt out at any time.

We do not use your data for automated decision-making or profiling that affects you, and we do not use it for any purpose unrelated to the ones listed above without asking you first.

6. Consent & Withdrawal of Consent

Before you submit a request, we ask for your consent through a clear, unticked checkbox that links to this policy. Your consent is free, specific, informed and limited to the purposes stated here.

You can withdraw your consent at any time by emailing support@deathcertificatecounsel.org with the subject "Withdraw Consent", or by using any unsubscribe link we send. Withdrawing consent is as easy as giving it. After withdrawal:

  • we will stop processing your data and ask our service providers and the Lawyer to do the same, within a reasonable time;
  • we may be unable to continue coordinating your request;
  • processing that happened before withdrawal remains lawful, and records we must keep by law will be retained (see Section 11); and
  • withdrawing consent does not by itself make you eligible for a refund. Refunds are governed by our Refund Policy.

You can ask for this policy and our consent notice in English or in any language listed in the Eighth Schedule to the Constitution of India by writing to us.

7. Sharing & Disclosure

We do not sell, rent or trade your personal data. We share it only as follows:

  • With an independent Lawyer, only on your request: your name, contact details and the minimum request details needed to schedule the session. The Lawyer is an independent professional who handles your information under his or her own duties of confidentiality and applicable law.
  • With our service providers (Data Processors): hosting, cloud storage, email, SMS, WhatsApp, calling or virtual-number providers, analytics tools and payment gateways. They process data only on our instructions, under written contracts that require confidentiality and security.
  • For legal reasons: when required by law, a court order or a lawful request from a government authority, or to protect the rights, safety and property of users, the Company or others.
  • Business transfer: if the Company is merged or acquired, or its assets are sold, your data may be transferred, subject to this policy.

We do not share your data with any government office on your behalf. We do not file applications, so no data goes to a Registrar or municipal body through us.

8. Cookies & Tracking

  • Essential cookies: needed for forms, security and session management. These cannot be switched off.
  • Analytics cookies: help us understand how the site is used, such as which pages people visit. They are used in aggregate form wherever possible.
  • Advertising or remarketing cookies: if we use these (for example to measure ad campaigns), we will do so only with your consent.

You can block or delete cookies in your browser settings, but some parts of the Platform may not work properly without them.

9. Data Security

We take reasonable security safeguards to protect personal data against unauthorised access, use, alteration, disclosure, loss or destruction, including:

  • HTTPS/TLS encryption for data in transit;
  • role-based access, so only authorised staff can see request data, on a need-to-know basis;
  • password protection and access logging for our systems, with logs kept for at least one year to help detect and investigate unauthorised access;
  • regular backups, and confidentiality obligations on staff and service providers; and
  • payment processing through PCI-DSS compliant payment gateways.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. We do, however, review and improve our safeguards regularly.

10. Personal Data Breach

If a personal data breach occurs, we will, as required by applicable law:

  • inform affected users without delay, in plain language, explaining what happened, the likely consequences, what we are doing about it, and the steps you can take to protect yourself;
  • report the breach to the Data Protection Board of India and, where applicable, to CERT-In, within the timelines the law prescribes; and
  • take immediate steps to contain the breach and reduce its impact.

11. Data Retention

We keep personal data only for as long as it is needed for the purpose it was collected for, or as the law requires. After that, we erase it or make it fully anonymous.

DataHow long we keep it
Request details, uploaded documents and communicationsUp to 1 year after your request is closed (to handle follow-ups, refunds and disputes), then erased. Erased earlier if you ask, unless the law requires us to keep them.
Invoices, payment and refund recordsUp to 8 years, as required by tax and accounting laws.
System, access and security logsAt least 1 year, as required for security and legal compliance.
Records linked to an ongoing dispute, complaint or legal proceedingUntil the matter is finally resolved.
Inactive enquiries (no payment made)Up to 6 months, then erased.

Where the law requires, we will notify you at least 48 hours before erasing your data for inactivity, so that you can log in or contact us if you want it kept.

12. Your Rights

Subject to applicable law, you have the right to:

  • Access information: get a summary of the personal data we hold about you, how we process it, and the identities of those we have shared it with.
  • Correct, complete and update: fix inaccurate or incomplete data, or update it.
  • Erase: ask us to delete your data once it is no longer needed, unless the law requires us to keep it.
  • Withdraw consent: at any time (see Section 6).
  • Grievance redressal: complain to our Grievance Officer (see Section 17).
  • Nominate: name another person to exercise your rights if you die or become incapacitated.
  • Opt out of marketing: stop promotional messages at any time. We will still send essential service messages.

How to use your rights: email support@deathcertificatecounsel.org from your registered email ID with your name, registered mobile number, Order ID (if any) and your request. We may need to verify your identity before acting. We will respond within the timelines set by law, and in any case within 30 days.

13. Your Duties

Under Section 15 of the DPDP Act, you must:

  • provide authentic and accurate information, and not suppress material information;
  • not impersonate another person;
  • not register a false or frivolous grievance or complaint; and
  • comply with applicable laws while using the Platform.

Breaching these duties may attract penalties under the DPDP Act.

14. Children's Data

The Platform is meant for adults. We do not knowingly collect personal data directly from anyone under 18. If a request involves a minor, for example a minor legal heir, it must be submitted by a parent or lawful guardian, who gives verifiable consent on the minor's behalf. We do not track, profile or send targeted advertising to children. If you believe a child has shared data with us without such consent, please contact us, and we will erase it.

15. Data Storage & Transfer

Your data is stored on secure servers, primarily in India. Some service providers, such as email or cloud services, may process data outside India. Any such transfer is made only to countries not restricted by the Government of India under the DPDP Act, and with appropriate safeguards.

16. Third-Party Links

The Platform may link to third-party websites, including official government portals. We are not responsible for their content or privacy practices, so please read their privacy policies before sharing any data with them.

17. Grievance Officer

For questions, requests or complaints about your personal data or this policy, contact our Grievance Officer:

Grievance Officer

Name: [Name of Grievance Officer]

Organisation: Omvin (operator of DeathCertificateCounsel.org)

Email: support@deathcertificatecounsel.org

Phone: 0120-3134441 (Monday to Saturday, during business hours)

Address: #3, Sagarkunj Complex, Chirawa, Jhunjhunu, Rajasthan 333026, India

Timelines: We will acknowledge your grievance within 24 hours and aim to resolve it within 15 days. In any case, we will resolve it within the period prescribed by law (currently up to 90 days under the DPDP Rules).

Escalation: If you are not satisfied with our response, you may file a complaint with the Data Protection Board of India, once its complaint mechanism for your matter is in force, after first using our grievance process.

18. Governing Law & Jurisdiction

This policy is governed by the laws of India. Subject to the powers of the Data Protection Board of India and your rights under consumer protection law, courts at Jhunjhunu, Rajasthan shall have jurisdiction.

19. Changes to This Policy

We may update this policy to reflect changes in law, in our services or in how we process data. The updated version will be posted on this page with a new "Last updated" date. For significant changes, especially any new purpose of processing, we will notify you by email or through the Platform and, where required, ask for your fresh consent.

This Privacy Policy should be read together with our Terms and Conditions, Refund Policy and Disclaimer.