The best Business Suite software in India, built to help your business grow. Contact us at +91-8882435276.
[ Contact ]
Phone number
Email address
Head office
Noida office
The right team at TriostackOne will get back to you.
Built for
GDPR and DPDP Act Data Privacy Rights
Rights you can action
Requests handled, not only acknowledged

Positioning Assessment
The EU's GDPR and India's Digital Personal Data Protection Act, 2023 give individuals rights such as to know what is held about them, to correct it, and to ask for its erasure, and they require a lawful basis, usually consent, for collecting it. Businesses that run their sales on a CRM need to be able to act on those rights within a reasonable time.
This page covers the data-rights side; the security page covers the controls side. In Triostack CRM, consent can be recorded against a contact with its source and time, so you can show when and how someone agreed. A person's record can be found and exported to answer an access request. Erasure workflows allow a record to be deleted or anonymised, with the action logged, subject to your own legal retention duties. Under both laws, your business is the one deciding why data is collected, and we act on your instructions. This is not legal advice, so confirm your obligations with your counsel.
“A customer asked us to delete their data. We found the record, removed it and had the log to show when.”
Sample team scenario
A made-up scenario about GDPR and DPDP Act Data Privacy Rights, not a customer testimonial

All Leads
GDPR and DPDP Act Data Privacy Rights: every lead with its source, status and owner
In the Product
Imagine every request answered and recorded.
With time.
In seconds.
As evidence.
Platform Integrity
Source and time
Find and export
Delete or anonymise
What was done
At a Glance
What changes when a person asks for their data.
Consent
Recorded with source and time
An Unmanaged Database: Assumed
Finding a person
Searchable, exportable record
An Unmanaged Database: Spreadsheets to search
Erasure
A defined workflow with a log
An Unmanaged Database: Ad hoc deletes
Evidence
Logs of what was done
An Unmanaged Database: None
Responsibility
Your instructions, our processing
An Unmanaged Database: Unclear
Book a walkthrough of GDPR and DPDP Act Data Privacy Rights. We set up a sandbox so you can try Data rights, Consent logging and Right to erasure before you commit.
Live Interface Tour
The screens below belong to GDPR and DPDP Act Data Privacy Rights: All Leads, Lead Pipeline and Lead Follow-Ups, all from the product.
Audit Logs
GDPR and DPDP Act Data Privacy Rights: requests handled, not only acknowledged
Feature Breakdown
4 screens from the live product that show GDPR and DPDP Act Data Privacy Rights at work.

Records to find and export.
How it fits the plan
Receive. Log the request and verify the person.
Find. Locate their record in the CRM.
Practical tip
Write down the response time you will aim for before the first request arrives, so every request is treated alike.

Evidence.
In real life
Erasure request
The record is removed and the log kept.

Consent and channels.
Watch out for
Deleting a record without telling backups and exports, where the data still sits.

Retention.
Before you start
Execution Plan
Log the request and verify the person.
Locate their record in the CRM.
Export, correct or erase as they asked.
Keep the log of what was done.
Practical Guide
Before you start
A tip that helps
Write down the response time you will aim for before the first request arrives, so every request is treated alike.
A common mistake
Deleting a record without telling backups and exports, where the data still sits.
Availability: What GDPR and DPDP Act Data Privacy Rights covers can depend on your plan and setup. Please confirm with our team which parts are live for your account, and any prerequisites, before you plan around it.
In Real Life
Scenario 01
The record is removed and the log kept.
Scenario 02
The record is exported.
Scenario 03
Consent evidence is ready.
Straight answers about GDPR and DPDP Act Data Privacy Rights, from setup to what happens next.
Have a question about GDPR and DPDP Act Data Privacy Rights?
Book a free callYes, with source and time against a contact.
Yes, through a workflow that deletes or anonymises, subject to your retention duties.
It supports the duties of a data fiduciary, but your own policies and practices decide compliance.
No. Confirm your obligations with qualified counsel.
Customer data rights under GDPR and India's DPDP Act 2023: consent logging, right-to-erasure workflows and how Triostack CRM supports a data fiduciary's duties.
It runs in 4 steps: Receive, Find, Act and Record. Log the request and verify the person.
The real screens on this page include All Leads, Lead Pipeline, Lead Follow-Ups and Customers, all captured from the product.
Request a demo and ask to see GDPR and DPDP Act Data Privacy Rights. Our team can also walk you through setup, so your first session ends with something working.
We will walk you through GDPR and DPDP Act Data Privacy Rights, from Data rights, Consent logging and Right to erasure, on sample data shaped like yours.