Digital Personal Data Protection Act, 2023
Data deletion and data rights request
Use this form to ask for your personal data to be deleted, corrected or disclosed, to withdraw consent, or to raise a grievance. Reading the Data Deletion policy first will tell you what happens and how long it takes.
Ask your CA firm first if you can.
ToSure stores documents on behalf of the CA firm you deal with. Under the DPDP Act that firm is the Data Fiduciary
and decides what can be deleted and what it must keep. Its name and email are on the notice or WhatsApp message you received.
If you cannot reach the firm, or it has not replied, use this form and we will route your request and follow up.
What happens next
- We acknowledge your request within 48 hours by email, with a reference.
- We pass it to your CA firm within 3 working days and tell you we have.
- The outcome reaches you within 30 days, and in every case within the 90 days the DPDP Rules allow for grievance redressal.
- Some records must survive an erasure request — tax invoices, payment records, consent records, security logs and anything under a legal hold. Section 5 of the Data Deletion page lists each one and for how long.
Please do not send copies of identity documents or passwords. If you are not satisfied, write to our Grievance Officer at grievance@tosure.in; if it is still unresolved after 90 days you may complain to the Data Protection Board of India.