Legal
Privacy Policy
Last updated: 23 June 2026
This Privacy Policy explains how United Disabled Matrimony collects, uses, shares and protects your personal data when you use our matrimony platform. It is written to comply with the EU/UK GDPR, the California Consumer Privacy Act (CCPA/CPRA), Brazil's LGPD, Canada's PIPEDA, India's Digital Personal Data Protection Act 2023 (DPDP Act), and the privacy principles of the UN Convention on the Rights of Persons with Disabilities (UNCRPD).
1. Who is the data controller?
United Disabled Matrimony acts as the data controller (GDPR) / data fiduciary (DPDP Act) / business (CCPA) for personal data described here. Contact us through our Contact page.
2. Data we collect
- Account: name, email, phone, password (hashed), date of birth, gender.
- Profile: photos, bio, country / state / district, religion, education, occupation, partner preferences.
- Sensitive / special-category data (GDPR Art. 9, DPDP "sensitive personal data", CCPA "sensitive personal information"): disability category and religion. We process these only with your explicit consent and for the specific purpose of operating a disability-inclusive matrimony service.
- Interactions: interests sent / received, matches, messages, reports and blocks.
- Device & usage: IP address, device type, browser, approximate location, login history, crash logs.
- Payments: handled by our PCI-DSS-certified payment processor; we store only invoices and last-4 digits, never full card numbers.
3. Why we process your data (legal bases)
| Purpose | Legal basis (GDPR) |
|---|---|
| Create and run your account | Performance of contract |
| Show your profile to other members | Consent (revocable in Settings) |
| Process disability category & religion | Explicit consent (Art. 9) |
| Safety, anti-fraud, moderation | Legitimate interests + legal obligation |
| Security alerts, login history | Legitimate interests |
| Marketing emails | Consent — unsubscribe anytime |
| Tax, accounting, legal claims | Legal obligation |
4. Who we share data with
- Other members — only the profile fields you choose to show; photos can be blurred via Photo Privacy.
- Processors — cloud hosting, email delivery, payments, analytics and moderation tools, bound by data-processing agreements (GDPR Art. 28 / DPDP Sec. 8).
- Authorities — only when legally compelled (court order, lawful request).
- We do not sell personal information and do not "share" it for cross-context behavioural advertising as defined by the CCPA/CPRA.
5. International transfers
United Disabled Matrimony is global. Data may be processed in India, the EU and the US. For transfers out of the EEA/UK we rely on Standard Contractual Clauses (2021) and supplementary safeguards. For transfers out of India we follow DPDP Sec. 16 and only use countries not restricted by the Central Government.
6. Retention
- Active account data — for as long as your account exists.
- Deleted accounts — purged within 30 days, except where law requires longer (tax: 7 years; safety reports: up to 3 years).
- Backups — rotated out within 90 days.
7. Your rights
Depending on where you live, you have the right to:
- Access a copy of your data (GDPR Art. 15, DPDP Sec. 11, CCPA "right to know").
- Correct inaccurate data (Art. 16 / Sec. 12 / CCPA).
- Delete your data — "right to be forgotten" (Art. 17 / Sec. 12 / CCPA "right to delete").
- Restrict or object to processing (Art. 18 / 21).
- Port your data in a machine-readable format (Art. 20 / DPDP Sec. 11).
- Withdraw consent at any time — does not affect lawfulness of past processing.
- Non-discrimination for exercising your CCPA rights.
- Nominate someone to exercise rights on your behalf if you are incapacitated or after death (DPDP Sec. 14).
- Lodge a complaint with a supervisory authority — your local DPA in the EU, the ICO in the UK, the Data Protection Board of India under the DPDP Act, the California Privacy Protection Agency, or the ANPD in Brazil.
Exercise these rights in Settings, or reach us through the Contact page. We respond within 30 days (GDPR / DPDP) or 45 days (CCPA), free of charge.
8. Accessibility-aware consent (UNCRPD)
We provide privacy information in plain language, screen-reader-friendly markup, and high-contrast modes. You may bring a trusted person to assist with consent decisions; supported-decision-making requests are welcomed (UNCRPD Art. 12). Where you cannot complete a consent flow, contact us for an accessible alternative.
9. Children
United Disabled Matrimony is strictly for adults (18+). We do not knowingly collect data from children. If you believe a minor has registered, contact us through the Contact page and we will remove the account immediately (DPDP Sec. 9; COPPA where applicable).
10. Cookies & similar technologies
We use strictly necessary cookies for sign-in and security. Optional analytics cookies only run after your consent (where required by ePrivacy / GDPR). Manage preferences via your browser or the cookie banner.
11. Security
Encryption in transit (TLS 1.2+) and at rest, hashed passwords, role-based access, row-level database policies, audit logs, device trust and login alerts. No system is perfectly secure; we will notify affected users and regulators of any qualifying breach within 72 hours (GDPR Art. 33 / DPDP Sec. 8(6)).
12. Changes to this Policy
United Disabled Matrimony reserves the right to update, modify, or replace this Privacy Policy at any time, at its sole discretion — for example, to reflect changes in law (GDPR, CCPA, DPDP Act, UNCRPD-aligned practices), in our processing activities, in subprocessors, or in product features. Material changes will be notified in-app and by email at least 14 daysbefore they take effect (shorter notice may apply where the law requires immediate action). The "Last updated" date above always reflects the current version. Continued use of United Disabled Matrimony after the effective date constitutes acceptance of the updated Policy.
13. Account suspension & data handling
Where United Disabled Matrimony suspends or terminates an account for violation of our Terms (e.g. illegal activity, fraud, fake profile, harassment), we may retain a minimal record of the account, the violation and related evidence for as long as necessary to protect other members, enforce our Terms, defend legal claims, or comply with law (up to 3 years, or longer where statute requires). All other personal data is deleted in line with the Retention section above.
See also: Terms & Conditions · Data Protection Notice.