Privacy Policy

In compliance with the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025

Effective Date: 01 June, 2025
Last Updated: June 26, 2026

Applicable to: Website Visitors, Arbitrator/Mediator/Résolveur Applicants, Empanelled Neutrals, Clients, and Partners of RDRC

1. Introduction

Resol Dispute Resolution Centre (“RDRC”, “we”, “us”, or “our”) is committed to protecting the privacy and personal data of every individual who interacts with us — whether as a visitor to our website, an applicant seeking empanelment as an Arbitrator, Mediator, or Résolveur, an empanelled neutral, a party to a dispute, a client, or a partner.

This Privacy Policy (“Policy”) explains what personal data we collect, why we collect it, how we use, store, share, and protect it, and what rights you have over your personal data. This Policy is framed in accordance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the Digital Personal Data Protection Rules, 2025 (“DPDP Rules”), along with other applicable laws of India.

By accessing our website, submitting any form (including the Arbitrator/Mediator/Résolveur Empanelment Form), or otherwise engaging with RDRC’s services, you acknowledge that you have read and understood this Policy.

2. Scope and Applicability

This Policy applies to all personal data collected by RDRC through:

• Our website(s) and any associated digital platforms;
• Empanelment forms for Arbitrators, Mediators, and Résolveurs;
• Case filing, case management, and dispute resolution proceedings conducted through RDRC;
• Communication with RDRC via email, telephone, or any other channel;
• Partnership, referral, or collaboration arrangements with RDRC; and
• Any other interaction in which personal data is shared with RDRC.

This Policy applies regardless of whether the data is collected in digital form or collected offline and subsequently digitized, in line with the scope of the DPDP Act.

3. Definitions

“Data Principal” means the individual to whom the personal data relates — including applicants, empanelled neutrals, clients, partners, and website users.

“Data Fiduciary” means RDRC, being the entity that determines the purpose and means of processing personal data.

“Data Processor” means any entity that processes personal data on behalf of RDRC, such as a technology service provider.

“Personal Data” means any data about an individual who is identifiable by or in relation to such data.

“Processing” means any operation performed on personal data, including collection, storage, use, sharing, and erasure.

“Consent” means the free, specific, informed, and unambiguous indication of agreement by the Data Principal to the processing of their personal data.

4. Information We Collect

4.1 Information You Provide Directly

Depending on how you interact with RDRC, we may collect:

• Identity information: full name, date of birth, gender, nationality, photograph, government ID (Aadhaar/PAN/Passport);
• Contact information: address, mobile number, email address;
• Educational and professional information: qualifications, certifications, Bar Council enrollment, employment history, ADR-specific training and memberships;
• Experience details: years of practice, case history, domain specialization, languages;
• Financial information: bank account details and PAN, for fee disbursement and tax compliance;
• Declarations: conflict-of-interest disclosures, consent confirmations, and related undertakings;
• Case-related information: details submitted as part of a dispute resolution proceeding, including documents, evidence, and submissions; and
• Any other information voluntarily submitted through forms, emails, or correspondence with RDRC.

4.2 Information Collected Automatically

When you visit our website, we may automatically collect limited technical information such as IP address, browser type, device type, pages visited, and time spent on the website, typically through cookies or similar tracking technologies, for the purpose of improving website functionality and user experience.

5. Purpose of Collection and Use

RDRC collects and processes personal data strictly for specified, lawful purposes, including:

• Evaluating and processing applications for empanelment as Arbitrator, Mediator, or Résolveur;
• Verifying identity, qualifications, and professional credentials;
• Administering and facilitating dispute resolution proceedings (arbitration, mediation, or other ODR/ADR mechanisms);
• Maintaining panel records and assigning matters to empanelled neutrals;
• Processing payments and fee disbursement, and complying with applicable tax obligations;
• Communicating updates relating to applications, case assignments, training, or panel-related matters;
• Responding to queries, grievances, and support requests;
• Improving our website, services, and internal processes; and
• Complying with applicable legal, regulatory, and institutional requirements.

We do not process personal data for any purpose beyond what is specified at the time of collection, except where permitted under the DPDP Act.

6. Legal Basis for Processing and Consent

RDRC processes personal data primarily on the basis of your free, specific, informed, and unambiguous consent, given through the relevant form, declaration, or agreement. Where applicable, RDRC may also process personal data on the basis of “legitimate uses” recognized under the DPDP Act, such as for compliance with a legal obligation, or where the Data Principal has voluntarily provided their data for a specified purpose and not indicated their non-consent.

You have the right to withdraw your consent at any time. Please note that withdrawal of consent may affect RDRC’s ability to process your application, continue your empanelment, or provide the relevant service, and will not affect the lawfulness of processing carried out prior to such withdrawal.

7. Disclosure and Sharing of Information

RDRC does not sell, rent, or trade personal data. Personal data may be shared only in the following circumstances:

• With parties to a dispute, co-arbitrators, mediators, or counsel, strictly on a need-to-know basis for case administration;
• With institutional or referral partners, where necessary to facilitate empanelment, training, or case handling;
• With service providers (e.g., technology, payment, or verification service providers) engaged by RDRC, under contractual obligations of confidentiality and data protection;
• With regulatory authorities, courts, or government bodies, where required under applicable law; and
• With your explicit consent, for any other purpose not covered above.

All third parties with whom personal data is shared are contractually bound to maintain confidentiality and adopt reasonable security safeguards consistent with this Policy and applicable law.

8. Cross-Border Data Transfer

Personal data collected by RDRC is generally stored and processed within India. In the event personal data needs to be transferred outside India — for instance, in relation to a cross-border dispute or an international panel member — such transfer will be carried out in accordance with the DPDP Act and any restrictions notified by the Central Government from time to time.

9. Data Retention

RDRC retains personal data only for as long as necessary to fulfil the purpose(s) for which it was collected, including:

• For the duration of your empanelment with RDRC, and thereafter for such period as required for legal, regulatory, audit, or record-keeping purposes;
• For the duration of a case proceeding, and thereafter as required under applicable arbitration/mediation rules and limitation laws; and
• For website and general inquiry data, for a reasonable period necessary to address the relevant query or purpose.

Once the specified purpose is no longer being served and retention is not otherwise required by law, RDRC will securely delete or anonymize the personal data.

10. Data Security

RDRC implements reasonable technical and organizational safeguards to protect personal data against unauthorized access, alteration, disclosure, loss, or destruction. These measures include, as applicable:

• Access controls restricting personal data to authorized personnel only;
• Secure storage of physical and digital records;
• Confidentiality obligations imposed on employees, panel members, and service providers; and
• Periodic review of data handling practices.

While RDRC takes all reasonable steps to protect personal data, no method of electronic transmission or storage is completely secure, and RDRC cannot guarantee absolute security.

11. Rights of Data Principals

As a Data Principal under the DPDP Act, 2023, you have the following rights in relation to your personal data held by RDRC:

Right to Access: to obtain a summary of the personal data RDRC holds about you and the processing activities undertaken.

Right to Correction and Updating: to request correction of inaccurate or misleading data, completion of incomplete data, and updating of your personal data.

Right to Erasure: to request deletion of your personal data once it is no longer necessary for the purpose for which it was collected, subject to RDRC’s legal and regulatory retention obligations.

Right to Withdraw Consent: to withdraw consent at any time, with effect on a prospective basis only.

Right to Grievance Redressal: to raise a grievance with RDRC’s Grievance Officer, and thereafter, if unresolved, with the Data Protection Board of India.

Right to Nominate: to nominate another individual to exercise your rights under the DPDP Act in the event of death or incapacity.

To exercise any of these rights, please contact RDRC using the details provided in Section 18 (Contact Us) below.

12. Children’s Data

RDRC’s services, including empanelment as an Arbitrator, Mediator, or Résolveur, are intended for individuals who are at least 18 years of age. RDRC does not knowingly collect personal data of children (individuals below 18 years of age) without verifiable parental or guardian consent. If RDRC becomes aware that it has inadvertently collected personal data of a child without appropriate consent, it will take reasonable steps to delete such data promptly.

13. Cookies and Tracking Technologies

RDRC’s website may use cookies and similar tracking technologies to enhance user experience, analyze website traffic, and improve our services. You may control or disable cookies through your browser settings; however, doing so may affect certain website functionalities.

14. Personal Data Breach Notification

In the event of a personal data breach, RDRC will undertake the necessary intimation to the Data Protection Board of India and to affected Data Principals, in the manner and within the timelines prescribed under the DPDP Act and DPDP Rules.

15. Grievance Redressal and Data Protection Officer

RDRC has designated a Grievance Officer to address any queries, concerns, or grievances relating to the processing of personal data. RDRC will endeavor to resolve all grievances within a reasonable period, and in any event, no later than ninety (90) days from the date of receipt.

Grievance Officer, RDRC
Name: Samiya Ameen
Email: info@rdrc.in
Phone: +91-9412687783
Address: T4, A-1208, NX-One, Techzone 4, Greater Noida (west), UP-201306, India

If you are not satisfied with the resolution provided by RDRC’s Grievance Officer, you may approach the Data Protection Board of India in accordance with the DPDP Act.

16. Changes to this Policy

RDRC may update this Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. Any changes will be posted on our website with a revised “Last Updated” date. We encourage you to review this Policy periodically. Continued use of our services or interaction with RDRC after such changes constitutes acceptance of the revised Policy.

17. Governing Law and Jurisdiction

This Policy shall be governed by and construed in accordance with the laws of India, including the Digital Personal Data Protection Act, 2023, and the Digital Personal Data Protection Rules, 2025. Subject to the dispute resolution mechanisms otherwise agreed between the parties, courts at Greater Noida / Gautam Buddha Nagar, Uttar Pradesh shall have exclusive jurisdiction over any matters arising out of or in connection with this Policy.

18. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact:

Resol Dispute Resolution Centre (RDRC)
Address: T4, A-1208, NX-One, Techzone 4, Greater Noida (west), UP-201306, IndiaEmail: info@rdrc.in
Phone: +91-8368005291