Privacy Policy

Dilwaale.com (“Dilwaale”, “we”, “us”, “our”) is committed to protecting the privacy and personal data of the users of our matrimonial platform. This Privacy Policy explains, in detail, how we collect, use, disclose, store, transfer, and otherwise process personal data when you visit or use our website, mobile app, and related services (collectively, the “Services”). It also describes the rights available to you regarding your personal data and how you can exercise those rights. This policy applies to all users worldwide who access or use the Services, including parties located in jurisdictions with specific data protection laws (for example: the European Union’s GDPR, the UAE’s Personal Data Protection Law (PDPL), India’s Digital Personal Data Protection Act (DPDP), and the U.S. state-level privacy laws such as the California Consumer Privacy Act (CCPA)). Where required by applicable law, we will apply additional protections or specific processes consistent with local legal requirements. For guidance on major legal frameworks referenced in this policy, see the sections below.

Why this policy is long and what to expect

Because our platform handles highly personal and often sensitive information relevant to intimate life decisions (marital status, religion, caste, family background, photographs, etc.), we provide a comprehensive policy covering:

• What data we collect and why;
• The legal bases for processing that data;
• How we store and protect it;
• Who we share it with and why;
• Data subject rights (how you can access, correct, delete or port your data);
• How we handle sensitive categories of data;
• Cross-border transfers and safeguards; and
• Our commitment to updates, breach notification, and contact points.

If you prefer a short summary, see the “Summary of your rights” at Section 15 and the quick “At-a-glance” bullet points in Section 3.

At-a-glance summary (quick highlights)

• Controller: Dilwaale.com (contact: support@dilwaale.com).
• Purposes: account management, matchmaking, communication, payments, fraud prevention, analytics, marketing.
• Legal bases: consent, performance of contract, legitimate interests, legal obligations.
• Data shared: service providers (hosting, payments, analytics), law enforcement when legally required, other users (profile information you publish).
• Sensitive data: our service may process special categories (e.g., religion, caste) — we treat these with heightened safeguards and mostly process them on the basis of explicit consent or other lawful bases where permitted.
• Rights: access, correction, deletion, restriction, portability, objection, withdraw consent, lodge complaints.
• Contact: support@dilwaale.com for general queries; see Section 20 for details.

This summary is only an overview — the full policy below contains the specifics and legal detail you may need.

Definitions (terms used in this policy)

• Personal data / personal information — Any information that identifies or can reasonably identify a natural person (name, email, phone, IP address, profile photos, etc.).
• Sensitive / special categories of personal data — Information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, genetic data, biometric data for identification, health data, sexual life or sexual orientation, and other categories defined by local laws. Such categories require extra care and legal safeguards.
• Processing — Any operation performed on personal data (collecting, storing, using, sharing, deleting, etc.).
• Controller — The party that determines the purposes and means of processing personal data (Dilwaale, unless otherwise specified).
• Processor — Third party that processes data on our behalf (hosting providers, payment gateways, analytics vendors etc.).
• You / User / Member — Any individual using the Services.

What personal data we collect and why (detailed list)

We collect different categories of personal data depending on what features you use. Below is a detailed breakdown, why we collect each category and the retention considerations.

A. Account & identity data (required to create and use an account)

Full name; username; email address; mobile phone number; date of birth; gender. Purpose: Account creation, identity verification, age verification, profile display, login and account recovery, communications about your account. Legal basis: Performance of contract and/or your consent; legitimate interest for security and fraud prevention.

B. Profile information (you provide when creating a matrimonial profile)

Marital status; religion; caste/community; mother tongue; height; physical attributes; education and profession; workplace; location (city, state, country); family background and family members; lifestyle details (smoking/drinking); partner preferences; photos and gallery images; biographical statements. Purpose: To build a complete matrimonial profile, deliver match suggestions, display to other users as part of matchmaking, and allow you to search and filter matches. Legal basis: Your explicit consent (for sensitive categories such as religion/caste) and/or contract performance for profile features. For non-sensitive attributes the basis may include legitimate interest. Important: Information such as religion, caste, sexual orientation, health conditions, or biometrics are regarded as sensitive or special categories in various jurisdictions. Where we process such data we will normally do so only with your explicit consent and will provide additional safeguards and disclosure.

C. Contact & transactional data

Postal address (if provided), billing name and address, payment details (transaction identifiers; note: we do not store raw card numbers if a third-party payment processor handles them), order history, subscription details. Purpose: Billing, refunds, subscription management, invoicing, tax compliance. Legal basis: Performance of a contract and legal obligation (tax, accounting).

D. Communications and messages

Messages you send to other users via our platform, chat logs, email correspondence with our support team, call logs if using voice features, incident reports you submit. Purpose: To enable communication, resolve disputes, moderate abuse, and maintain evidence of interactions where necessary (safety/fraud mitigation). Legal basis: Contract performance, legitimate interest (safety), and your consent where applicable.

E. Technical & usage data (automatic)

IP address, device identifiers, browser and OS, device type, operating system, unique device or advertising identifiers, visit timestamps, pages visited, referral URLs, clickstream activity, search queries, cookie identifiers, geolocation (approximate, based on IP) and diagnostics logs. Purpose: Service functionality, performance monitoring, analytics, security, personalization, fraud prevention, product improvement. Legal basis: Legitimate interests (analytics, security) and consent for non-essential cookies/trackers.

F. Photographs and identity verification documents

Profile photographs; where identity verification is offered/required, copies or images of identity documents (passport, national ID, driver license) or selfies to perform facial match checks. Purpose: Identity verification, authenticity checks, fraud prevention, and trust-building between users. Legal basis: Explicit consent, contractual necessity in some cases, or legitimate interest (to reduce fraud and impersonation).

G. Sensitive personal data (special categories)

Data such as religion, caste, sexual orientation, health conditions (if voluntarily disclosed), biometric identifiers (if you choose verification), or other items that may constitute “special categories” under applicable law. Purpose: Matching and search filtering, identity verification (biometric), compliance with user preferences, and other user-directed purposes. Legal basis: Explicit consent or another narrow lawful basis permitted by local law; we will obtain clear, documented consent when required and provide an option not to provide such data.

H. Information from third parties

Public profile data from social networks (if you choose to link accounts), information from background-screening providers (where offered and only with your consent), and data obtained from marketing partners. Purpose: To speed up onboarding, enrich profile information with your consent, and provide verified identity signals. Legal basis: Consent and legitimate interest depending on source and use.

How we collect data (channels & methods)

• Directly from you: When you sign up, fill in profile fields, upload photos, use messaging features, make payments, or communicate with support.
• Automatically: Via cookies, web beacons, server logs and similar technologies when you visit or interact with the Services.
• From third parties: Payment processors, identity/verification vendors, analytics providers, advertising networks, social login providers (if you use them), public sources.
• From other users: Where you publish information on your profile, other users will see that information and may re-use it within the platform (for communication). We are not responsible for third-party re-publication outside the service.

Legal bases for processing (how we justify processing)

Our processing of your personal data is grounded on one or more lawful bases depending on the purpose and the applicable law. The main bases we rely on are:

1. Consent — For processing that requires express permission (for example: processing special categories such as religion or caste; marketing communications; certain cookies or tracking). You can withdraw consent at any time (withdrawal does not affect prior lawful processing).
2. Contract performance — To deliver the services you request (profile hosting, allowing matches, subscription fulfillment, payments and refunds).
3. Legitimate interests — For analytics, platform security and fraud prevention, product improvement, and to maintain the integrity of our community; we balance our interests against your privacy rights and provide opt-outs where appropriate.
4. Legal obligation — To comply with laws, tax, accounting, or court or regulatory orders.

Where multiple legal regimes apply (for example GDPR or CCPA), we will comply with the stricter obligations where required.

Use cases — detailed processing purposes and examples

This section maps common activities on the platform to the specific processing we perform and the data used.

• 8.1 Onboarding and account management

Collect basic information and verify age/identity to create and manage accounts. We use your name, DOB, photo, email, phone and, where provided, identity documents. Necessary for contract performance and safety.

• 8.2 Profile display and matchmaking

Store and display the data you put into your profile (education, religion, caste, family details, photos). Use that data to suggest compatible profiles and allow searching/filtering by preferences. Consent is required for any sensitive fields; non-sensitive fields are processed under contract/legitimate interest.

• 8.3 Communication between users

Process, store and transmit messages that you send through our platform. Messages are accessible to our moderation and abuse-detection systems to the extent necessary to enforce policies and protect users (legitimate interest).

• 8.4 Payments, subscriptions, refunds

Process subscription payments, enable invoicing, handle refunds — involving billing data and transaction records. Payment processors may collect card or bank details; where we do not store full card numbers, the payment gateway will handle this data under its own policy (we store transaction IDs and required metadata).

• 8.5 Identity verification and fraud prevention

When you opt-in to verification, we process identity documents or biometric images to confirm identity and reduce impersonation risk. This processing is sensitive and will require explicit consent and additional security controls. We retain verification artifacts for as long as necessary to evidence verification results and to comply with legal obligations.

• 8.6 Safety, trust & moderation

Automated and manual review of profiles and messages to detect fraud, abuse, fake accounts, or prohibited content. We may temporarily preserve accounts or restrict access based on risk indicators.

• 8.7 Analytics, personalization & product improvement

Analyze aggregated usage patterns (how members search, which filters they use, profile performance metrics) to improve search ranking, match quality, and product features. Data is pseudonymized or aggregated where possible to reduce privacy risk.

• 8.8 Marketing & promotional communications

Send emails or push notifications about new features, offers, or partner services when you have consented or where we have a legitimate interest (dependent on jurisdiction). You may opt-out of promotional messages at any time via unsubscribe links or your account settings.

Sharing and disclosure — who we share data with and why

We only share personal data for legitimate and documented reasons. Categories of recipients include: A. Service providers and processors (vendors)

• Hosting and infrastructure providers (cloud hosting, CDN, backups).
• Payment processors and billing providers (for transactions).
• Email, SMS and communication vendors (delivery of messages).
• Analytics and monitoring providers (usage analytics, performance monitoring).
• Identity verification and background check vendors (where you opt-in).

These vendors process personal data strictly under contract and are subject to confidentiality and technical security obligations.

B. Other users

• Information you choose to publish in your profile (name, age, photos, religion, etc.) is accessible to other members within the platform in accordance with your privacy settings. Think carefully before publishing sensitive information.

C. Legal, safety and fraud prevention

• If required by law, regulatory orders, court orders, or in response to lawful requests by public authorities (including to meet national security obligations), we may disclose personal data. We may also disclose data to protect rights, property, or safety of our users, or to detect and prevent fraud.

D. Corporate transactions

• In connection with a merger, sale, financing, acquisition of some or all of Dilwaale’s assets, we may share personal data with the acquiring party under confidentiality and data-protection obligations.

E. Advertising & marketing partners

• When you consent to targeted advertising, we may provide limited signals to advertising partners or use third-party platforms for ad delivery. In such cases, contract terms and data minimization apply.

We do not sell your personal data for unrelated commercial purposes. If any change is made to this practice, we will notify users and obtain necessary consents where required by law.

Cross-border data transfers and safeguards

Because Dilwaale is a global online service, your personal data may be transferred to, processed in, or stored in countries other than your home country (for example: cloud servers in other regions, vendors located in different countries). When we transfer personal data across borders we apply appropriate safeguards such as:

• Standard contractual clauses (SCCs) where required for transfers from the EU;
• Ensuring recipients implement adequate technical and organizational safeguards;
• Relying on adequacy decisions where available;
• Limiting transfers of sensitive data and processing them only where necessary and with explicit consent.

If your country’s law requires additional protections (for instance, restrictions on transfers), we will comply with those requirements and disclose relevant information in this policy or during the consent flow. If you have questions about where your personal data is stored, contact support@dilwaale.com .

Data retention — how long we keep your data

We retain personal data only for as long as necessary to fulfil the purposes set out in this policy, including legal, accounting, tax, and regulatory obligations. Typical retention periods:

• Account & profile data: retained while the account is active and for a reasonable period (e.g., 1–3 years) after account closure to address disputes, fraud investigations, or legal requirements.
• Payment & transaction records: retained for tax and accounting purposes (commonly 6–10 years depending on local law).
• Messages & communications: retained for a period needed to provide service, moderate abuse, or as required by law; archived messages may be retained longer for safety reasons.
• Verification documents: retained a limited time necessary to verify identity and to meet compliance obligations; sensitive documents may be purged after verification unless retention is necessary for legal reasons.
• Analytics & logs: retention periods vary; aggregated or anonymized data may be kept indefinitely.

When data is no longer required we will delete or anonymize it in a secure fashion. Specific retention schedules may vary by jurisdiction and legal requirement. If you want to request a copy or deletion of your data, see Section 15.

Security measures and data protection

Dilwaale deploys industry-standard organizational, administrative, and technical measures to protect personal data including (but not limited to):

• Encryption in transit (TLS/HTTPS) and encryption at rest where appropriate;
• Access controls and role-based access for staff and vendors;
• Regular vulnerability scanning and security testing;
• Multi-factor authentication for administrative access;
• Data minimization practices and pseudonymization for analytics;
• Internal policies and staff training on data protection;
• Contractual protections with processors and vendors.

While we take appropriate steps to secure data, no method of transmission or storage is 100% secure. You acknowledge the inherent risks of internet-based services and that we cannot guarantee absolute security.

Cookies, trackers and your choices

We use cookies and similar technologies to provide, secure, analyze, and improve the Services. Cookies fall into categories:

• Strictly necessary: Required to operate the Services (login persistence, security). These do not require consent for functional operation but you can disable cookies via your browser — note this may break functionality.
• Functional: Remember settings and preferences.
• Analytics & performance: Help us understand site usage (page visits, crash reports) — often pseudonymized and aggregated.
• Advertising & targeting: For personalised content and advertising (subject to your consent where required).

You may manage cookie preferences through the cookie banner, your account settings, or by changing your browser preferences. Opting out of analytics or advertising cookies will not prevent essential functionality.

Minors and age restrictions

Our services are intended for adults. You must be at least 18 years old to register. We do not knowingly collect personal data from children under 16 (or a higher age where local law sets the age of consent). If we learn that a minor has provided us with personal data in violation of this policy, we will promptly delete such information from our systems. If you believe we may have collected personal data of a minor, please contact support@dilwaale.com with details so we can investigate and act promptly.

Your rights — how to access, correct, delete or move your data

Depending on your jurisdiction, you may have some or all of the following rights. We explain how to exercise them and the standard approach we will take:

• Right of access: You can request a copy of the personal information we hold about you. We will provide the data in a commonly used, machine-readable format when appropriate.
• Right to rectification/correction: If your information is inaccurate or incomplete, you can request correction.
• Right to erasure/deletion (right to be forgotten): You may request that we delete personal data we process about you, subject to exceptions (e.g., if retention is necessary for legal claims, fraud prevention, or compliance).
• Right to restriction of processing: You can request that we limit processing where certain conditions apply (e.g., pending dispute over accuracy).
• Right to data portability: Where technically feasible, we will provide your personal data in a structured, commonly used, machine-readable format for transfer to another service provider.
• Right to object: You may object to processing based on legitimate interests (including profiling) or to direct marketing at any time. If you object to legitimate-interest processing, we will assess and either stop processing or demonstrate compelling legitimate grounds to continue.
• Right to withdraw consent: Where processing is based on consent (cookies, marketing, sensitive data), you can withdraw consent at any time without affecting prior lawful processing.
• Right to lodge a complaint: If you are dissatisfied with our response, you can lodge a complaint with a supervisory authority in your jurisdiction (for example: a data protection authority in an EU Member State, the Indian Data Protection Board, or applicable authorities in the UAE or U.S. state regulators). For EU residents, you have the right to file a complaint with an EU supervisory authority. For California residents, specific CCPA rights are described in the subsection below.

How to submit a request

Send your request to: support@dilwaale.com . Please include:

• Your full name;
• The email or phone number associated with your account;
• A clear description of the right you wish to exercise.

We will verify your identity before fulfilling requests to avoid disclosure to unauthorized parties. We will respond within the time mandated by applicable law; we will endeavour to respond promptly and in any case within statutory time limits.

California residents — CCPA / CPRA style rights (if applicable)

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (and its amendments) including:

• Right to know categories of personal information collected, sold, or disclosed for business purposes;
• Right to request deletion of personal information, subject to exceptions;
• Right to opt-out of sale or sharing of personal information (note: Dilwaale does not “sell” personal information for direct profit; where data sharing for advertising occurs we provide opt-out mechanisms);
• Right to non-discrimination for exercising privacy rights.

To make a request under California law, contact support@dilwaale.com and indicate you are acting under CCPA/CPRA. We may require additional verification steps for requests submitted by authorized agents. For general CCPA summary and rights see California AG guidance.

Sensitive data and special categories — extra safeguards

Because our platform commonly includes highly personal information, we treat special categories with elevated caution:

• Explicit consent: For fields or features that capture sensitive attributes (religion, caste, sexual orientation, health), we will obtain explicit and informed consent before processing, explaining the purpose and retention.
• Limited sharing: Sensitive information will only be displayed to others if you explicitly choose to publish it in your profile. We provide privacy controls to restrict visibility of certain fields.
• Secure storage & access controls: Sensitive data is subjected to stricter storage, access controls, and logging. Access to verification documents or biometric data is severely restricted, logged, and limited to authorised personnel and processors.
• Legal exceptions: In rare situations, we may process sensitive data without consent when a jurisdiction explicitly permits it (e.g., to comply with court orders), but we will only do so to the extent strictly necessary and where permitted by law.

Automated decision-making and profiling

We use automated systems and algorithms to generate match suggestions, ranking results, and to detect suspicious behavior or potential abuse. These processes may employ profiling techniques (analyse preferences, past interactions, search behaviour) to provide personalized results.

• Why: To improve match relevance, provide faster recommendations, reduce spam/fraud, and enhance user experience.
• Transparency & controls: We strive to make profiling transparent. You can request information on the logic involved in automated decisions and, where applicable under local law, request human review or object to certain automated profiling.
• Impact on rights: If an automated decision produces legal or similarly significant effects on you (rare in our context), we will provide an explanation, the decision’s logic in reasonable terms, and an opportunity for human intervention where required by law.

Data breach notification

We maintain incident response plans and will notify affected users and relevant supervisory authorities where required by law if a personal data breach occurs that is likely to result in a risk to individuals’ rights and freedoms. Notifications will include the nature of the breach, the categories and approximate number of affected data subjects, likely consequences, measures taken or proposed, and contact information for inquiries. Where required by law in your jurisdiction (for example, under GDPR, DPDP or local PDPL rules), we will notify the supervisory authority within the statutory timeframe and provide required details. For Indian and UAE legal frameworks see our legal guidance references.

Contact details, Data Protection Officer (DPO) and complaints

If you have questions, requests, or concerns about this Privacy Policy or our processing practices, you may contact us at: Dilwaale.com Email: support@dilwaale.com Postal address: [Add postal address if applicable] If a DPO is appointed for your jurisdiction or where required by law, the DPO contact details will be published on this page and within account settings. If your concern is unresolved, you may also lodge a complaint with your local data protection authority (for EU residents: supervisory authority; for India: Data Protection Board once established; for UAE: relevant PDPL authority).

International, jurisdictional notes and compliance overview

We aim to be compliant across major jurisdictions and to provide appropriate contractual, organizational and technical measures. Some jurisdiction-specific highlights:

• European Union (GDPR): We provide data subject rights, lawful bases (consent, contract, legitimate interests), data protection impact assessments where required, and mechanisms for cross-border transfers (SCCs, adequacy where available). The GDPR treats special categories of data specially (Art. 9).
• United Arab Emirates (PDPL): UAE’s PDPL provides individuals with rights similar to global standards (access, rectification, erasure, objection to automated processing in some cases). The law also regulates cross-border transfers and imposes obligations on controllers. We will comply with PDPL provisions applicable to our operations or user base in the UAE.
• India (DPDP Act / DPDP Rules): India’s Digital Personal Data Protection Act, 2023 and implementing rules set obligations for processing digital personal data, including user consent, purpose limitation, and breach notifications. We will honour rights and obligations required for Indian residents and adjust our practices accordingly where necessary.
• United States (state laws such as CCPA): For U.S. residents, state laws like the CCPA afford specific rights including the right to know, delete, and opt-out of sale/sharing. We will provide or mimic required mechanisms for residents of covered states like California.

This is a high-level compliance overview; legal requirements are nuanced and evolve, so we update this policy to reflect material changes.

Security incidents and law enforcement requests

We may receive law enforcement or government requests for information. Where legally permitted, we will attempt to redirect authorities to request data directly through the legal process and will respond only to valid legal process (e.g., court order). To the extent permitted by law, we will notify affected users of requests, unless prohibited by law or a court order. We also cooperate with law enforcement to identify, stop, and penalize illegal activities (fraud, extortion, child exploitation). Any such disclosures are limited to the scope of the legal request and documented.

Third-party links, embedded content & social login

Our Services may contain links to third-party websites, embedded content (e.g., videos), or social login features. These third parties have separate privacy notices and practices. We are not responsible for their content or privacy practices. Use caution and review third-party policies before providing personal data to them.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the Services, legal requirements, or technologies. Where required by law, we will notify you of material changes (for example by email, in-app notification, or by posting a prominent notice on the website). The “Last updated” date at the top will reflect the most recent revision. If changes are material and make your continued use of the Services inconsistent with your original consent, we will seek fresh consent where required.

Practical examples & FAQ (common scenarios)

Q: If I list religion/caste on my profile, who sees it?

A: Any field you choose to publish on your profile is visible to other users according to your profile visibility settings. Sensitive fields are shown only when you explicitly choose to include them. You can edit visibility or remove the field at any time.

Q: Can I delete my account and all data?

A: You can request account deletion via account settings or by emailing support@dilwaale.com . We will erase personal data subject to legal exceptions (e.g., transaction records kept for tax), backup retention windows, and fraud prevention holds. After deletion we will remove your profile from public view and anonymize or delete retained data per our retention schedule.

Q: Are photos shared outside the site?

A: Profile photos you publish are visible to other members of Dilwaale. We do not publish your photos to third-party advertising partners without your explicit consent. However, photos may be used in aggregated or anonymized analytics, and we cannot control what another user does after downloading or re-using your photo outside the service; please avoid publishing anything you would not want publicly available.

Q: How do I change cookie preferences?

A: Use the cookie panel at the bottom of our website, your account privacy settings, or browser controls to manage cookies. Note that rejecting essential cookies may impair critical functionality.

Annex A — Cookie & tracking table (example)

Essential (strictly necessary): Session cookies, login cookies — purpose: keep you logged in / secure sessions. Retention: session or short term.

• Functional: Remember language or UI preferences. Retention: months.
• Analytics: Usage statistics (pageviews, events). Retention: 6–24 months (pseudonymized).
• Advertising/Targeting: Third-party ad networks and remarketing (only with consent). Retention: varies by vendor (see vendor privacy pages).

For full cookie details and vendor lists, see [Cookie Settings] in your account dashboard.

Annex B — Template request forms & verification

When you make requests (access, deletion, portability), we may ask you to:

• Provide the email or phone linked to your account;
• Confirm identity using a copy of a government document or a verified login;
• For portability, indicate a destination service and specify the data scope.

We will not ask for more sensitive data than necessary to verify identity (e.g., full financial numbers).

Responsible data practices — our commitments

Data minimization: We limit collection to what is necessary for the Service. Privacy by design: Privacy considerations are embedded into product development. Transparency: We will clearly explain how and why we process personal data. Accessibility: Users can exercise rights through easy, supported channels. Security: We continuously invest in technical and organizational security measures.

Legal disclaimers & advisory

This Privacy Policy describes our intended practices. It is not a contract or a guarantee of absolute outcomes. It does not create any third-party beneficiary rights. Nothing in this policy supersedes legal obligations or regulatory requirements that may mandate different handling in particular jurisdictions. Important: This document does not constitute legal advice. Because privacy laws and enforcement evolve rapidly (for example, GDPR interpretations, the Indian DPDP Act implementation rules, and the UAE PDPL), we strongly recommend you obtain independent legal advice to align this policy with specific jurisdictional obligations and to review it periodically. For reference, authoritative sources include official GDPR texts and guidance, national data protection authorities, and statutory texts for DPDP and PDPL.

How to contact us (repeat and escalation)

Primary contact: support@dilwaale.com — for privacy questions, requests, and exercising rights. If you are an EU resident and prefer to contact a representative or supervisory authority, we will provide assistance and the contact details of relevant authorities upon request. If you are in a jurisdiction with a local data protection authority and wish to complain, we will cooperate fully with any lawful investigation.

Final notes and next steps for implementation (for site owners / developers)

If you, as the site owner or admin of Dilwaale.com, plan to adopt this policy:

1. Localize — add the applicable country-specific DPO contact and data transfer mechanisms; insert your business address and legal entity details.
2. Consent flows — implement consent capture for marketing, cookies, and processing of sensitive fields; store consent records.
3. Vendor contracts — ensure all processors sign data processing agreements with standard protections.
4. Data retention schedule — create a documented retention policy and deletion workflows.
5. Security controls — validate encryption, access logs, incident response plan, and staff training.
6. User-facing UI: Provide clear controls in profile settings for visibility of sensitive fields and cookie preferences.
7. Legal review: Run the final text by counsel in jurisdictions where you operate (particularly EU, UAE, India, and U.S. states like California).

For jurisdictional summaries and legal references see: GDPR overview, UAE PDPL guides, India DPDP Act, California AG guidance. A short closing statement Protecting your privacy and providing a trustworthy matchmaking environment is central to Dilwaale’s mission. We strive to be open about our practices and give you meaningful control over your personal data. If you have any questions or suggestions about this Privacy Policy or our privacy practices, please contact us at

support@dilwaale.com