The Privacy Centre
A clear door for the people whose data you hold.
Customers, patients, students and employees use the Privacy Centre to read your privacy information, change their choices, raise requests and grievances, and see where each one stands. It runs under your name and domain, in their language.
In short
What is the TrustOS Privacy Centre?
A self service page, under your own name and domain, where Data Principals read your privacy information, change their consents, ask for access, correction or erasure, raise grievances, nominate someone and track each request. Everything they do lands in TrustOS as assigned work with a due date and a record.
What people can do
Six things, without writing to anyone
The DPDP Act gives Data Principals rights to information, correction, completion, updating and erasure, grievance redressal and nomination, and the right to withdraw consent as easily as they gave it. The Privacy Centre puts each one a click away.
See and change consents
Each purpose they agreed to, when and where, with a switch to withdraw that is as easy as agreeing was.
Ask for their data
A summary of the personal data you process about them, how, and who you shared it with.
Correct, complete or update
Fix a wrong address or a misspelt name, or add what is missing, without visiting a branch.
Ask for erasure
Request deletion of data no longer needed for its purpose, and see what was erased and what was kept, with the reason.
Raise a grievance
Complain about how their data was handled, and see the period you have published for a response.
Nominate someone
Name a person who can exercise their rights in case of death or incapacity.
Status at every step
People see where their request stands
Every request gets a reference number and a status page. Updates go by SMS or email, so the person does not have to call to find out what happened, and your support desk is not asked twice.
In their language
Hindi, Gujarati, Tamil, or the language they asked for
Notices and the Privacy Centre can be published in the 22 languages of the Eighth Schedule, using the versions your legal team approved. A person can switch language at any point, and the version shown to them is recorded.
Behind the page
How a request reaches your team
- Step 1A person signs inOTP on registered mobile or email, or your own login
- Step 2They actWithdraw, request, complain or nominate
- Step 3It lands in the workspaceWith a reference, an owner and a due date
- Step 4Your team does the workIn the systems that hold the data
- Step 5They see the outcomeStatus page, SMS and email
Watch a withdrawal travel
One switch in the Privacy Centre, every system that used it
A customer turns off WhatsApp offers. The consent record changes, and the withdrawal goes to each system and processor that relied on it, until every one has confirmed. Sample data.
Your brand, your rules
Set up the way your organisation works
Your domain and colours
It runs under your name, linked from the app menu, website footer, SMS messages and printed forms.
Identity checks that fit
A hospital can use the patient's UHID and mobile; an NBFC the loan account and registered number.
Parents and guardians
A verified parent or guardian can manage a child's choices and requests, recorded against both.
Choose what is online
Some requests may go through a desk instead. A hospital may take erasure through medical records.
Or use your own screens
Build the screens in your own app and send the same consents and requests to TrustOS.
Contact details published
Who answers questions about personal data, shown where people will look for it.
Screens show sample data. People and account numbers are invented for illustration.
Questions
About the Privacy Centre
Can someone make a request without an account with us?
Yes, if you allow it. They verify by OTP on a mobile number or email, and the request is matched to your records by the rights team before anything is shared.
Do requests by email, phone or at a branch still count?
Yes. Your team logs them in the same queue with the channel recorded, so they get the same owner, due date and status page.
Is the Privacy Centre the same as a Consent Manager?
No. A Consent Manager is a separate company registered with the Data Protection Board to act for Data Principals. The Privacy Centre is your own page, run by you for the people whose data you hold.
How do people find it?
Link it from your privacy notice, app menu, website footer, SMS messages, support replies and printed forms. The more places it appears, the fewer requests arrive in a general inbox.
See it with your data
Show us where your personal data lives. We will show you TrustOS running on it.
A 30 minute walkthrough on Google Meet with someone who knows the Act and the product. You leave with a view of your first phase, the owners and the effort.
Or get a rollout proposal in two minutes- Step 1A 30 minute demo on Google MeetWith someone who knows the Act and the product.
- Step 2Your systems and purposesWe walk one product's personal data through TrustOS.
- Step 3A first phase you can planModules, owners and effort, written down for you to keep.