Data Protection Notice

This notice supplements our Privacy Policy and describes the technical and organisational measures United Disabled Matrimony uses to protect personal data — particularly the sensitive data members entrust to us (disability information, religion, photographs).

1. Principles we follow

• Lawfulness, fairness, transparency — GDPR Art. 5(1)(a), DPDP Sec. 4.
• Purpose limitation — data is used only for the matrimony purpose disclosed at collection.
• Data minimisation — only fields required to operate a safe service are collected.
• Accuracy — members can correct profile data at any time.
• Storage limitation — see Retention in the Privacy Policy.
• Integrity & confidentiality — encryption, access controls, monitoring.
• Accountability — documented processing, DPIAs for high-risk features.
• Accessibility & dignity — UNCRPD Articles 12, 22 (privacy) and 9 (accessibility).

2. Sensitive personal data

Disability category and religion are special-category data under GDPR Art. 9 and sensitive personal data under the DPDP Act. They are processed only with your explicit, granular, informed consent. You can:

• Hide your disability category from your public profile.
• Edit or remove disability and religion information at any time from your profile.
• Withdraw consent at any time by deleting your account.

3. Security measures

• Encryption in transit: TLS 1.2+ on all endpoints; HSTS enforced.
• Encryption at rest: AES-256 for the primary database and object storage.
• Authentication: securely hashed passwords and supported social sign-in providers.
• Authorisation: row-level database policies; least-privilege service roles.
• Audit: login history and admin action logs.
• Network: rate limits, bot protection, DDoS mitigation at the edge.
• People: background-checked staff, role-based access, mandatory annual security training, signed confidentiality agreements.
• Vendors: only processors with equivalent safeguards and signed Data Processing Agreements.

4. Data Protection Impact Assessments (DPIAs)

We carry out DPIAs (GDPR Art. 35) before launching any feature that processes sensitive data at scale — for example, AI-assisted moderation. DPIAs are reviewed annually.

5. Breach response

If a personal-data breach occurs that is likely to result in a risk to your rights, we will:

• Notify the competent supervisory authority within 72 hours of becoming aware (GDPR Art. 33 / DPDP Sec. 8(6)).
• Notify affected members without undue delay, with clear language about what happened, what data was involved and what to do.
• Publish a public summary once the issue is contained.

6. Children & vulnerable adults

United Disabled Matrimony is for adults only. We apply heightened protections for accounts that indicate cognitive or psychosocial disability, including friction against impulsive deletion, simpler consent screens, and the option to designate a trusted contact (UNCRPD Art. 12; DPDP Sec. 14).

7. Automated decisions & AI

Match suggestions are algorithmic but never produce legal or similarly significant effects on you. Verification and moderation decisions are always reviewed by a human before they affect your account. You may request human review of any automated action that you believe was wrong (GDPR Art. 22; EU AI Act transparency obligations).

8. Your contacts

• Privacy & Data Protection Officer: reach us through the Contact page.
• EU representative (GDPR Art. 27) and UK representative details: available on request via the Contact page.
• Grievance Officer (India) per DPDP Act 2023 and IT Rules 2021: contact us via the Contact page — response within 30 days.

9. Updates to this Notice

This Data Protection Notice is a living document and may be updated by United Disabled Matrimony at any time, at its sole discretion — to reflect new safeguards, new regulations, new subprocessors, or new product capabilities. Material changes will be announced in-app and by email before they take effect. The "Last updated" date above always reflects the current version.

10. Enforcement & account action

To protect the safety of members and the integrity of the platform, United Disabled Matrimony may suspend, restrict or permanently terminate any account at its sole discretion — with or without prior notice — where it finds or reasonably suspects illegal activity, fraud, fake identity, harassment, or any other violation of the Terms. Investigation data may be retained for the period strictly necessary to enforce our Terms, defend legal claims, or comply with law, in line with Section 6 of the Privacy Policy.

See also: Terms & Conditions · Privacy Policy.