rLoka

Join Now

Privacy Policy

Last Updated: 14th July, 2026

This Privacy Policy is published in accordance with, and governed by, the applicable laws of India, including:

  • The Information Technology Act, 2000 ("IT Act")
  • The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules")
  • The Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, as amended by the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Amendment Rules, 2026 ("IT Rules")
  • The Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 ("DPDP Act"), to the extent its provisions are in force
Note on the legal framework: India's privacy regime is currently in transition. The DPDP Act's substantive obligations (notice, consent mechanics, breach notification timelines) become fully enforceable in a phased manner, with full effect from May 2027. Until then, day-to-day obligations continue to be governed primarily by the IT Act and the SPDI Rules. This Policy is drafted to comply with the current operative framework while aligning with the DPDP Act's principles.

1. Introduction

This Privacy Policy is published by NJK Dassur Technology Pvt. Ltd. ("rLoka", "we", "us", or "our"), a company incorporated in India with its registered office at UrbTech Trade Centre, Sector 132, Noida, Uttar Pradesh – 201304, and operates the website rloka.com and its associated community platform (collectively, the "Platform").

By accessing or using the Platform, you agree to the collection and use of information in accordance with this Policy. If you do not agree, please do not use the Platform.

2. Definitions

  • "Personal Data" means any data about an individual who is identifiable by or in relation to such data.
  • "Sensitive Personal Data or Information" (SPDI) has the meaning assigned under the SPDI Rules, including passwords, financial information, and health-related information, where collected.
  • "Data Fiduciary" means rLoka, as the entity determining the purpose and means of processing personal data.
  • "Data Principal" means the individual to whom the personal data relates — i.e., you, the user.
  • "Intermediary" has the meaning assigned under Section 2(1)(w) of the IT Act, referring to rLoka's role in hosting user-generated content within community groups and forums.

3. Information We Collect

3.1 Information you provide directly

  • Name, email address, phone number, and gender (used to route sign-up flows)
  • Account credentials (username, password)
  • Payment information processed via our payment gateway, Razorpay — rLoka does not store your full card or bank details
  • Content you post within community groups, forums, comments, or support requests
  • Communications you send to us

3.2 Information collected automatically

  • IP address, browser type, device information, and operating system
  • Log data, including pages visited and time spent
  • Cookies and analytics data via Google Analytics (see Section 9)

We do not knowingly collect SPDI beyond what is necessary for the purposes described in this Policy.

4. How We Use Your Information

  • To create and manage your account and membership
  • To provide access to educational series, community groups, and forums
  • To process payments via Razorpay and manage your subscription
  • To communicate with you about your account or support requests
  • To moderate community spaces and enforce our community guidelines
  • To analyse and improve the Platform, including via Google Analytics
  • To comply with our legal obligations under the IT Act, IT Rules, and DPDP Act
  • To investigate complaints or violations reported by users

5. Legal Basis and Consent

We collect and process your personal data on the basis of your consent, given by creating an account, submitting information through forms on the Platform, or continuing to use the Platform after being notified of this Policy. You may withdraw consent at any time by contacting us using the details in Section 12, subject to legal or contractual restrictions.

6. Sharing and Disclosure of Information

We do not sell your personal data. We may share information with:

  • Razorpay, to process your subscription payments
  • Google Analytics, to understand Platform usage (in aggregated/pseudonymised form where possible)
  • Legal and regulatory authorities, where required under applicable law
  • Other members, to the extent you post content in community groups or forums visible to them
  • A successor entity, in the event of a merger, acquisition, or sale of assets

7. International Data Transfer

The Platform's servers are hosted outside India. By using the Platform, you consent to your personal data being transferred to, stored, and processed in a jurisdiction outside India. We require our hosting provider to maintain reasonable security safeguards consistent with the SPDI Rules and, where applicable, the cross-border transfer conditions under the DPDP Act.

8. Data Storage, Security, and Retention

We implement reasonable security practices and procedures as required under Section 43A of the IT Act and the SPDI Rules. We retain personal data only as long as necessary for the purposes described in this Policy, or as required by law. Upon account deletion, we will delete or anonymise your personal data within a reasonable period, except where retention is required for legal or dispute-resolution purposes.

9. Cookies and Tracking Technologies

The Platform uses cookies and Google Analytics to keep you logged in, remember preferences, and understand usage patterns. You can control or disable cookies through your browser settings, though this may affect Platform functionality.

10. Children's Data

The Platform is intended for users aged 18 and above. We do not knowingly collect personal data from individuals under 18. If we become aware that we have inadvertently collected personal data from a minor, we will take steps to delete it promptly.

11. Your Rights

Subject to applicable law, you have the right to access, correct, and request erasure of your personal data, and to withdraw consent for its processing. To exercise these rights, contact us using the details in Section 13.

12. Grievance Redressal

In accordance with the IT Rules, we have designated a Grievance Officer to address complaints regarding this Policy, the Platform, or content hosted on it.

Grievance Officer: Kantimyo Sur
Email: Connect@rloka.com
Address: UrbTech Trade Centre, Sector 132, Noida, Uttar Pradesh – 201304

We will acknowledge complaints within 24 hours and resolve them within the timelines prescribed under the IT Rules, including the expedited 2-hour/3-hour windows introduced under the 2026 Amendment Rules for specific categories of complaints (such as non-consensual intimate imagery).

13. Contact Us

NJK Dassur Technology Pvt. Ltd.
UrbTech Trade Centre, Sector 132, Noida, Uttar Pradesh – 201304
Email: Contact@rloka.com

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law, including as the DPDP Act's provisions come into force in phases. We will post the updated Policy on this page with a revised "Last Updated" date.

15. Governing Law and Jurisdiction

This Policy is governed by the laws of India. Any disputes shall be subject to the exclusive jurisdiction of the courts at Gautam Buddh Nagar, Uttar Pradesh.

This document is a template drafted for general guidance based on the IT Act, 2000, SPDI Rules, 2011, IT Rules, 2021 (as amended in 2026), and the DPDP Act, 2023 and Rules, 2025, as understood as of July 2026. It is not a substitute for legal advice. We recommend having this reviewed by an Indian qualified lawyer before publishing, particularly the Grievance Officer details and any obligations specific to your data flows.