Data Protection
Last updated · July 2026
How we meet India's Digital Personal Data Protection Act, 2023 (DPDP) and the EU/UK GDPR where they apply. This complements our Privacy Policy.
Data controller
Comfort Curators Private Limited (CIN U47912HR2026PTC144195), with its registered office in Gurugram, Delhi NCR, India, is the data controller for personal data processed through comfortcurator.com. Contact privacy@comfortcurators.in for any data-protection matter.
Lawful basis for processing
We process personal data to respond to your enquiries and perform our services, to pursue our legitimate interests in operating and securing the site, to meet legal obligations, and — for anything non-essential, such as analytics/advertising cookies or newsletter sign-up — on the basis of your consent, which you may withdraw at any time.
Your rights
Subject to applicable law, you may access, correct, update, export, or erase your personal data, object to or restrict certain processing, and withdraw consent. To exercise a right, email privacy@comfortcurators.in.
Grievance redressal (DPDP Act, 2023)
If you have a grievance about how your personal data is handled, you may contact our Grievance Officer, Yash Rajvansh (Director), c/o Comfort Curators Private Limited, at grievance@comfortcurators.in. We will acknowledge and respond within the timelines the DPDP Act requires. You also retain the right to approach the Data Protection Board of India.
International transfers
Some of our service providers operate outside India. Where personal data is transferred internationally, we rely on appropriate safeguards (such as standard contractual clauses) and process it only for the purposes set out in our Privacy Policy.
Sub-processors & DPA
We share personal data only with vetted providers that help us run the service (hosting, database, email, and — with your consent — analytics/advertising). A Data Processing Agreement and the current list of sub-processors are available to business partners on request at privacy@comfortcurators.in.
Breach notification
If a personal-data breach is likely to affect you, we will notify the relevant authority and affected users without undue delay, in line with DPDP and GDPR requirements.