Skip to content
Legal

Privacy rights (DPDPA, GDPR & CCPA)

Last updated: May 9, 2026

This page summarizes core data rights available under India's DPDPA, GDPR / UK GDPR, and California privacy law, and explains how to submit a request.

This page summarizes how individuals in India, the European Economic Area, United Kingdom, Switzerland, and California can exercise privacy rights in connection with HelloGrowthCRM and our marketing websites. It is a supplement to our Privacy Policy, which remains the authoritative legal text.

Submit a privacy request

The fastest way to exercise your rights is through our self-serve form. We will acknowledge within 48 hours and respond within the timeframes required by the applicable law.

Open privacy request form →

1. India — Digital Personal Data Protection Act (DPDPA), 2023

If you are located in India, the following rights apply under the DPDPA. Refer to Section 20 of our Privacy Policy for the authoritative text.

  • Right to access: request a summary of personal data we hold about you and the processing activities involving it.
  • Right to correction and erasure: request correction of inaccurate or incomplete data, or erasure of personal data that is no longer necessary for the purpose for which it was collected.
  • Right to grievance redressal: raise a complaint with our Grievance Officer at grievance@hellogrowthcrm.com. If unresolved, escalate to the Data Protection Board of India through the official government grievance and DPDPA complaint channels when they are publicly available.
  • Right to nominate: nominate a person to exercise rights on your behalf in the event of your death or incapacity.
  • Right to withdraw consent: withdraw any consent previously given for processing, with future effect, by emailing privacy@hellogrowthcrm.com or using the form above.

2. GDPR and UK GDPR

Where applicable law grants rights such as access, rectification, erasure, restriction, portability, and objection, you may submit a request using the form above or the contact details in our Privacy Policy. We verify requests to protect account security and may ask for reasonable information to confirm your identity. We respond within one calendar month, extendable by two further months for complex or numerous requests.

3. California (CCPA / CPRA)

California residents have rights to know, delete, and correct personal information, and to opt out of the "sale" or "sharing" of personal information for cross-context behavioral advertising, subject to exceptions. We do not sell your personal information for money, but our use of advertising and retargeting cookies may qualify as a "sale" or "sharing" under California law.

To opt out, use our Do Not Sell or Share My Personal Information control, or enable Global Privacy Control (GPC) in a supported browser — we honor GPC as a valid opt-out signal. For the full Notice at Collection and California disclosures, see Section 21 of our Privacy Policy. We will not discriminate against you for exercising these rights.

4. Authorized agents

Where permitted by law, you may use an authorized agent to submit a request on your behalf. We may require proof of authorization and may still need to verify your identity directly in some cases.

5. Questions

For privacy requests or questions, submit the privacy request form or use the contact channels listed in our Privacy Policy. For security-sensitive reports, see our vulnerability disclosure page.