Privacy & Compliance
DPDP & GDPR posture
How Follow The Spend complies with India's DPDP Act and the EU's GDPR.
Coming soon. This article will document our regulatory posture in detail. The legal entity, lawful basis for processing, data controller/processor relationships, and country-specific obligations.
Topics this article will cover
- Legal entity: Inforah Private Limited, Ahmedabad, Gujarat, India
- Data controller vs processor relationship between FTS and our merchants
- Lawful basis for processing under GDPR (legitimate interest + contract)
- DPDP Act (India) compliance posture
- Cross-border transfers and Standard Contractual Clauses
- DPA (Data Processing Agreement) availability for enterprise customers
- Children's data (we don't knowingly process)
For the data inventory, see What we collect.