Grievance Redressal

This page explains how to raise a grievance about personal data handled through Sehmat, as section 13 of the Digital Personal Data Protection Act, 2023 (the “Act”) and Rule 14 of the Digital Personal Data Protection Rules, 2025 provide.

1. First, who should you contact?

If an organisation collected your consent through Sehmat, that organisation is responsible for your data. It is the Data Fiduciary. Blue Pencil runs Sehmat on its behalf, as a Data Processor. Please contact the organisation first:

• use the link on your consent receipt, or the organisation’s My consents page, to see, change or withdraw your consents; or
• write to the organisation’s officer. Their name and contact details are printed on the notice you were shown and on your receipt.

The organisation can act on your request directly. If you write to us instead, we will pass your grievance to the organisation promptly and help it respond. We cannot make decisions about an organisation’s use of your data in its place.

Contact us directly if:

• you visited our website, wrote to us, or asked for access to Sehmat;
• you are a console user at one of our customer organisations;
• your organisation is a Sehmat customer and has a complaint about the service; or
• you cannot reach the organisation that collected your consent.

2. Our Grievance Officer

Bhupendra Singh Mewari Grievance Officer and Data Protection Officer Blue Pencil Strategies Private Limited 5th Floor Vinay Bhavya Complex, 159A, CST Road, Kalina, Santacruz East, Mumbai 400098 Email: contact@bluepencil.com

Please write “Grievance” in the subject line.

3. What to include

To help us deal with your grievance quickly, please tell us:

• your name, and an email address or mobile number where we can reach you;
• the email address or mobile number you used with us or with the organisation, so that we can find your records;
• if it is about consent given through Sehmat, the organisation’s name and the consent or request number on your receipt, if you have it;
• what happened, and when; and
• what you would like us to do.

We may ask you to confirm your identity before we share or change any personal data. We will use what you send only to deal with your grievance.

If you are writing for someone else, for example as their parent, lawful guardian or nominee, tell us how you are related and send proof that you may act for them.

4. What happens next

1. We acknowledge your grievance within 7 days and give you a reference number.
2. We look into it. If the grievance concerns an organisation’s data, we pass it to that organisation and keep you informed.
3. We reply with what we found and what we have done. If we cannot do what you asked, we explain why.

We will respond to your grievance within a reasonable time, and in any case within 90 days of receiving it, in line with Rule 14(3).

You will not be charged for raising a grievance.

5. If you are not satisfied

You must first use this grievance process (section 13(3) of the Act). If you are not satisfied with our reply, or we do not reply within 90 days, you may complain to the Data Protection Board of India. The Board can inquire into the complaint. An appeal against the Board’s decision lies to the Telecom Disputes Settlement and Appellate Tribunal (section 29).

The same applies to an organisation that collected your consent through Sehmat. Use its grievance process first, and then you may complain to the Board.

6. Your duties

Under section 15 of the Act, a person raising a grievance must give accurate information, must not impersonate anyone, and must not file a false or frivolous grievance or complaint. The Board may impose a penalty of up to ₹10,000 for breach of these duties.

7. Related pages

• Privacy Policy: your rights, including access, correction, erasure and nomination.
• AI Use Policy: how paper sheets are read and how to ask for a correction.
• Terms of Service: for customer organisations.