Grievance Officer
In accordance with the Information Technology Act, 2000 and the rules made thereunder, and the Digital Personal Data Protection Act, 2023 ("DPDP Act") and its Rules, Hiyan Enterprises Pvt Ltd has appointed a Grievance Officer to address grievances relating to the processing of personal data and the use of the GulSuite Service.
1. Grievance Officer — Name and Contact Details
Arun Gulati
Grievance Officer
Hiyan Enterprises Pvt Ltd
Email: [email protected]
Website: gulsuite.com
To help us address your grievance, please include: your name and registered email or account, a description of the grievance, and any relevant details (such as dates or screenshots).
2. What You Can Raise
- Exercising your rights as a Data Principal under the DPDP Act — access, correction, completion, erasure, or nomination (see our Privacy Policy, Section 6).
- Withdrawal of consent to the processing of your personal data.
- Concerns about how your personal data is collected, used, stored, shared, or secured.
- Any other grievance relating to your personal data or the Service.
3. Redressal Timelines
We will acknowledge receipt of your grievance and redress it within the timelines prescribed under applicable law:
- Under the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 — expeditiously, and within one month from the date of receipt of the grievance.
- Under the DPDP Act and the Digital Personal Data Protection Rules, 2025, from the date their grievance-redressal provisions come into force — within the period prescribed thereunder, not exceeding ninety (90) days from receipt.
4. Escalation to the Data Protection Board of India
Under Section 13(3) of the DPDP Act, a Data Principal must first exhaust the grievance-redressal opportunity provided by the Data Fiduciary before approaching the Data Protection Board of India. If your grievance is not resolved within the prescribed period, or you are not satisfied with the resolution, you may approach the Board in the manner prescribed under the DPDP Act and its Rules.
5. For Business Customers
If you are a business using GulSuite to process the personal data of your own customers, staff or suppliers, you are the Data Fiduciary for that data and we act as your Data Processor under our Terms of Service. Grievances from your data principals should, in the first instance, be directed to you; we will provide reasonable assistance so that you can meet your obligations.