Last updated: 8 October 2026
This notice explains what Sanathanam Matrimony collects, who can see it, and how to raise a complaint. It follows the law in force on the date above.
Sanathanam Matrimony is a matrimonial introduction service at matrimony.sanathanamdharmapadashala.in and in the Sanathanam app. We decide why and how member data is used. Under the Digital Personal Data Protection Act, 2023 (Act 22 of 2023) that role is called a Data Fiduciary. Under the Information Technology Act, 2000 we are an intermediary, because members create the profiles and messages.
The Digital Personal Data Protection Rules, 2025 were published on 13 November 2025. By notification G.S.R. 843(E) of the same date, the Central Government brought the Act into force in stages. Definitions, the Data Protection Board, and the rule-making powers are already in force. The main duties, including consent, security safeguards, breach intimation, and the rights in sections 11 to 17, come into force on 13 May 2027. The consent-manager provisions in section 6(9) and section 27(1)(d) come into force on 13 November 2026.
On 5 October 2026 the Digital Personal Data Protection (Removal of Difficulties) Order, 2026 (S.O. 5458(E)) corrected the wording of section 9(1) and section 10(2)(c)(ii). Those sections themselves start on 13 May 2027. Until 13 May 2027, sensitive personal data remains covered by the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. This page describes what the service does today, and the rights that open on 13 May 2027.
Account: your mobile number, the one-time code used to sign in through Firebase, your email address, and the session that keeps you signed in.
Identity and profile: first name, last name, date of birth, gender, marital status, address, PIN code, city, district, state, religion, caste, education, occupation, income, family details, lifestyle, partner preference, and the text you write about yourself. You choose which of these other members can see.
Photographs and a selfie. A new profile photo is shown to other members after it is approved.
An image of your Aadhaar card, used to check that the profile belongs to you. It is not placed on your public profile. An administrator sees it again only after an approved request to view it. We do not carry out UIDAI online authentication, and we do not publish the Aadhaar number.
Activity: interests you send or receive, bookmarks, chats, reports you make, notifications, and profile share links you create.
Payment: if the registration fee is on, Razorpay collects the payment. We keep the payment reference, the amount, and the invoice. We do not store the full card number or UPI PIN.
A device token, if you allow notifications, so the app can alert you.
To create your account, show your profile to members you allow, and let you send an interest or a message.
To check identity, review photos, and act on reports, so the service is harder to misuse.
To take the registration fee, where it is switched on, and to give you an invoice.
To keep the service secure, to answer a complaint, and to follow an order from a court or a written direction from an authorised government officer.
Other members see only what your Privacy and Security settings allow. Those settings cover the profile, photos, contact details, education, occupation, income, family, lifestyle, and religion.
Administrators see what their role allows. A district administrator sees members in that district. A state administrator sees members in that state. A platform administrator sees the whole platform. A platform administrator cannot open the audit log. Permanent deletion of a member account is limited to a super administrator.
Razorpay sees the payment it processes. Firebase sends the sign-in code and, if you allow it, notifications. A person who has your share link can open what that link shows until it expires or you revoke it.
We provide information in our control when a court, or a government agency that is lawfully authorised, sends a written order that states the purpose. The Information Technology Rules, 2021 require that assistance within 72 hours of such an order.
The service is for people who have completed 18 years. The Information Technology Rules, 2021 define a child as a person below 18. If we learn that an account belongs to a person under 18, we close it.
From 13 May 2027, section 9 of the Digital Personal Data Protection Act, 2023 requires verifiable consent of a parent or lawful guardian before a child’s personal data is processed. The Removal of Difficulties Order of 5 October 2026 makes clear that this also covers a person with a disability who has a lawful guardian. We do not offer the service to children, so we do not ask for that consent.
You can edit your profile. A change to your name, birth date, marital status, phone number, address, place, religion, caste, or selfie stays private until an administrator approves it. Gender is corrected only by an administrator, and only with a written reason.
You can hide the profile, limit who sees photos and contact details, block a member, report a profile or a chat, turn sharing off, and revoke a share link.
You can delete the account from Settings. Deleting it takes the profile off the service. It does not, by itself, destroy every stored copy the same day. The next section explains what stays, and how to ask for a full wipe.
When sections 11 to 14 of the Digital Personal Data Protection Act, 2023 come into force, you may ask what personal data of yours is being processed, ask for it to be corrected, completed, or updated, and ask for it to be erased unless we must keep it for the purpose you gave it for or for a law that requires us to keep it.
You may raise a grievance with us before you approach the Data Protection Board of India. You may nominate another person to use these rights if you die or become unable to use them.
Rule 14 of the Digital Personal Data Protection Rules, 2025, which also starts on 13 May 2027, requires the grievance system to respond within a period not exceeding 90 days. That outer period does not replace the shorter times in the Information Technology Rules, 2021, which already apply and are set out below.
While the account is open, we keep the profile because the service cannot run without it.
When you delete the account from Settings, the profile is hidden from other members at once, the sign-in is closed, and the phone number and email are released so you can register again. The stored profile is not destroyed that day. The record, photographs, Aadhaar image, messages, and the phone number and email kept on the deleted record remain in our systems.
About 30 days after deletion, a cleanup removes that member record, including photos, chats, interests, and the profile fields. Until that cleanup runs, the data is still held.
Some information is kept after the cleanup. Rule 3(1)(h) of the Information Technology Rules, 2021 requires registration information to be retained for 180 days after you cancel. Invoices and payment records are kept for the period Indian tax and accounting law requires. If information was removed because of a complaint or an order, rule 3(1)(g) requires that information and its records to be preserved for 180 days, or longer if a court or a lawfully authorised agency requires it.
A full wipe, sooner than that cleanup, is a separate request. Email support@sanathanammatrimony.com with your matrimony ID and the phone number that was on the account, and write that you want all personal data erased. We erase what the law allows us to erase, and we tell you what must stay and why. From 13 May 2027, section 12 of the Digital Personal Data Protection Act, 2023 requires erasure unless retention is still necessary for the purpose or for compliance with law.
Sign-in uses a one-time code sent to your phone. The website and the app talk to the service over HTTPS. On the public website the session cookie is marked SameSite=Strict, and Secure when the page is served over HTTPS.
Sensitive profile changes and new photos are reviewed before other members see the new version. Connection messages can be held for review before they are delivered.
Rule 3(1)(i) of the Information Technology Rules, 2021 requires reasonable security practices as prescribed in the 2011 sensitive personal data rules. Those practices apply until Rule 6 of the 2025 Rules, on security safeguards, takes effect on 13 May 2027.
Cyber security incidents are reported to the Indian Computer Emergency Response Team as required by the Information Technology (The Indian Computer Emergency Response Team and Manner of Performing Functions and Duties) Rules, 2013. Personal-data-breach intimation under the 2023 Act begins on 13 May 2027. No online service can promise that a breach will never happen.
Write to the Grievance Officer, Sanathanam Matrimony, at support@sanathanammatrimony.com. Use the email or phone number on the account, and include your matrimony ID if you have one. This is the contact for a privacy request and for a complaint about content or about the service.
The Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, in the text updated to 10 February 2026 by G.S.R. 120(E), require us to acknowledge a complaint within 24 hours and to resolve it within 7 days.
A request to remove information covered by rule 3(1)(b), other than the exceptions named in that rule, is acted on within 36 hours. A complaint about content that shows nudity or a sexual act, or that impersonates a person including by a morphed image, is acted on within 2 hours, by removing or disabling access to content we host.
Where actual knowledge of unlawful information arrives by a court order, or by a reasoned written intimation from an authorised officer in the manner rule 3(1)(d) describes, access is removed or disabled within 3 hours.
A person who is not satisfied with the Grievance Officer’s decision may appeal to the Grievance Appellate Committee under rule 3A of those Rules, within the time that rule allows. A cyber crime can also be reported at cybercrime.gov.in or on the national helpline 1930.
The date at the top is the date of this text. Rule 3(1)(f) of the Information Technology Rules, 2021 requires us to inform users of a change in this notice at least once a year. Rule 3(1)(c), as substituted on 10 February 2026, requires a reminder at least once every three months that breaking the terms or this notice can lead to suspension or removal, and, where another law says so, to a penalty.
Also read Terms of Service, Cookie notice, and Child safety standards.
