Who we are
This website, blog.concur.live (the “Site”), is operated by Concur (“we”, “us”, “our”), a consent-management platform for India’s Digital Personal Data Protection Act, 2023 (“DPDPA”). We are the Data Fiduciary for the personal data described in this policy.
For any question, request or grievance about your personal data, contact us at [email protected].
Scope
This policy explains what personal data we collect when you visit or interact with the Site, why we collect it, how we use and share it, how long we keep it, and the rights you have under the DPDPA.
Personal data we collect
Information you give us
- Comments: the name, email address, website URL and comment text you submit, plus your IP address and browser user agent for spam detection.
- Forms and email: if you contact us or submit a form, we collect the details you provide, such as your name, email address, organisation and message.
Information collected automatically
- IP address, browser type and version, device type, operating system, referring URL, pages viewed, and the date and time of your visit.
- Approximate location derived from your IP address (city/country level).
- Cookie identifiers and similar technical identifiers.
How we use your personal data
- To deliver the Site and its content, and to keep it secure and available.
- To respond to comments, enquiries and requests.
- To understand how the Site is used so we can improve it (aggregated analytics).
- To detect and prevent spam, abuse, fraud and security incidents.
- To comply with applicable law and to establish, exercise or defend legal claims.
Legal basis under the DPDPA
We process personal data on the basis of your consent (for example, when you submit a comment or a form, or accept analytics cookies) and, where applicable, the legitimate uses permitted under Section 7 of the DPDPA, such as security safeguards, prevention of fraud, and compliance with legal obligations. You may withdraw consent at any time; withdrawal does not affect processing already carried out.
Cookies and analytics
We use cookies and similar technologies to keep the Site working, remember your preferences, and measure traffic. Analytics is provided through Google Tag Manager and Google Analytics. These services may set cookies and process your IP address and usage data. You can block or delete cookies in your browser settings, and you can opt out of Google Analytics using the Google Analytics Opt-out Browser Add-on. Blocking cookies may affect some Site features.
Sharing your personal data
We do not sell your personal data. We share it only with service providers who help us run the Site, and only to the extent necessary:
- Hosting and infrastructure providers that store the Site and its database.
- Cloudflare, which provides content delivery, security and caching.
- Google, for analytics and tag management.
- Email and form-processing providers, to receive and respond to your messages.
- Authorities or third parties where required by law, or to protect our rights and the safety of users.
Where we use a Data Processor, we do so under a contract that restricts it to processing personal data on our instructions.
Cross-border processing
Some of our service providers may process personal data outside India. Where that happens, we take steps required under the DPDPA and applicable rules to ensure an appropriate level of protection.
How long we keep personal data
We keep personal data only for as long as needed for the purposes described above, or as required by law. Comments and their metadata are retained so we can recognise and approve follow-up comments automatically. Analytics data is retained according to our analytics configuration. When data is no longer needed, we delete or anonymise it.
Security
We use reasonable technical and organisational safeguards, including encrypted connections (HTTPS), access controls, and regular updates, to protect personal data against unauthorised access, alteration, disclosure or destruction. No method of transmission or storage is completely secure, but we work to protect your data and to notify you and the Data Protection Board of India where a personal data breach is required to be reported.
Your rights as a Data Principal
Subject to the DPDPA, you have the right to:
- Access a summary of the personal data we process about you and the identities of the Data Fiduciaries with whom it has been shared.
- Correct inaccurate or misleading personal data, and complete incomplete data.
- Erase personal data that is no longer necessary for the purpose for which it was collected.
- Withdraw consent at any time.
- Nominate another person to exercise your rights in the event of death or incapacity.
- Grievance redressal — raise a complaint with us, and if unresolved, with the Data Protection Board of India.
To exercise any of these rights, email [email protected]. We will verify your identity and respond within the timelines required by the DPDPA. You will not be charged for exercising your rights.
Children
The Site is intended for a professional audience and is not directed at children. We do not knowingly collect personal data of children. If you believe a child has provided personal data, contact us and we will delete it.
Third-party links and embedded content
Articles on the Site may include embedded content (for example, YouTube videos) and links to other websites. Embedded content from other sites behaves as if you had visited that site directly, and those sites may collect data about you and set cookies. We do not control their privacy practices; please review their policies.
Changes to this policy
We may update this policy from time to time. The “Last updated” date below shows when it was last revised. Material changes will be highlighted on this page.
Contact and Grievance Officer
For questions, requests or complaints about this policy or your personal data:
Email: [email protected]
Website: https://blog.concur.live
If you are not satisfied with our response, you may complain to the Data Protection Board of India.
Last updated: 14 November 2026.