Last Updated: August 23, 2026

BRedPixel respects the privacy rights of individuals whose personal data is processed through the BRedPixel Service.

This page provides a dedicated mechanism for submitting requests concerning personal data processed by BRedPixel.

Depending on the relevant processing activity, BRedPixel may act as a Data Fiduciary or a Data Processor.

Where BRedPixel processes personal data on behalf of an authorised business customer, certain requests may need to be handled by that business customer as the relevant Data Fiduciary.

1. Privacy Requests

You may contact BRedPixel regarding personal data processed by BRedPixel.

Depending on the applicable law and the circumstances of the processing, you may request:

Access

You may request information about personal data concerning you that is being processed by BRedPixel, subject to applicable law.

Correction

You may request correction, completion, or updating of inaccurate or incomplete personal data.

Erasure

You may request deletion or erasure of personal data where applicable.

BRedPixel may retain information where retention is required or permitted by applicable law.

Withdrawal of Consent

Where processing is based on consent, you may request withdrawal of your consent.

Withdrawal of consent will not affect the legality of processing carried out before withdrawal.

Grievance

You may submit a grievance concerning:

Processing of your personal data;
Privacy-related concerns;
Failure to comply with an applicable privacy request;
Unauthorised access or disclosure;
Incorrect personal information; or
Other concerns relating to BRedPixel’s handling of personal data.

The DPDP Act provides rights relating to access, correction/erasure and grievance redressal.

2. How to Submit a Request

You can submit a privacy request through: using registerd email

Privacy Email:
office@bredpixel.online

Email Subject

Please use:

Privacy Request – [Type of Request]

Examples:

Privacy Request – Access
Privacy Request – Correction
Privacy Request – Erasure
Privacy Request – Withdrawal of Consent
Privacy Grievance

3. Information to Include

To help us identify the relevant information, please provide:

Full Name;
Email address, if applicable;
Mobile number, if applicable;
BRedPixel account information, if applicable;
Name of the service centre/agent, if known;
Approximate date of interaction or upload, if known;
Type of request;
Description of the request; and
Any other information reasonably necessary to identify the relevant personal data.

Please do not send unnecessary copies of identity documents or sensitive personal information by email.

BRedPixel may request reasonable information necessary to verify the identity or authority of the requester before processing a request.

4. Identity Verification

To protect personal data from unauthorised disclosure, BRedPixel may verify the identity of the requester before responding to a request.

The information requested for verification will be limited to what is reasonably necessary for this purpose.

BRedPixel will not require unnecessary information merely to process a privacy request.

5. Requests Relating to Citizen Documents Uploaded Through an Agent

If your personal data was submitted through an e-Mitra Centre, CSC Centre, photo studio, cyber café, or another BRedPixel business customer, the relevant business customer may be the Data Fiduciary for that processing.

In such cases, BRedPixel may:

Forward the request to the relevant Business Customer;
Assist the Business Customer in responding to the request;
Provide information that BRedPixel is permitted to provide; or
Take appropriate action where BRedPixel itself controls the relevant personal data.

BRedPixel will not disclose another person’s personal data merely because a request has been submitted.

6. Temporary Customer Documents

Customer documents uploaded through the BRedPixel QR/upload system are intended to be temporarily stored in BRedPixel-controlled cloud storage for the requested service.

The intended maximum retention period is 24 hours from upload, subject to applicable technical, security, or legal requirements.

Where the relevant document has already been deleted in accordance with the retention process, BRedPixel may inform the requester that the document is no longer available in BRedPixel-controlled temporary storage.

Deletion from BRedPixel’s systems does not necessarily delete information independently retained by:

The Business Customer;
A government portal;
A third-party verification provider; or
Another independent service.

7. Local Data

Some BRedPixel functionality operates locally on the agent’s computer.

Examples may include:

Local photographs;
Image processing;
Text-to-PDF;
Image compression;
Printing history;
Local customer records; and
Other locally stored information.

BRedPixel may not have access to such local information.

Requests relating to data stored exclusively on the Business Customer’s computer may need to be directed to the relevant Business Customer.

8. Grievance Officer / Privacy Contact

BRedPixel has designated a person responsible for receiving privacy-related questions and grievances.

Designation: Privacy & Grievance Officer

Email: office@bredpixel.online

Organisation: BRedPixel

The Privacy & Grievance Officer is responsible for receiving and coordinating privacy requests and grievances and, where appropriate, coordinating with the relevant internal team or Business Customer.

9. Acknowledgement

After receiving a privacy request or grievance, BRedPixel will make reasonable efforts to acknowledge receipt.

The acknowledgement may include:

Request/reference number;
Date of receipt;
Type of request;
Information required from the requester, if any; and
Expected next steps.

10. Review and Resolution

BRedPixel will review the request and determine:

Whether BRedPixel is the relevant Data Fiduciary;
Whether BRedPixel is acting as a Data Processor;
Whether additional identity verification is required;
Whether the requested data is available;
Whether the requested action is legally applicable; and
Whether another organisation or Business Customer is responsible for the relevant processing.

Where BRedPixel is responsible for the request, BRedPixel will take appropriate action in accordance with applicable law.

Where another Data Fiduciary is responsible, BRedPixel may direct or forward the request to the relevant Data Fiduciary or provide reasonable assistance where appropriate.

11. Withdrawal of Consent

Where processing is based on consent, a Data Principal may request withdrawal of consent.

Requests may be submitted by email to:

office@bredpixel.online

Withdrawal of consent does not affect the legality of processing carried out before the withdrawal.

Where processing is necessary for another lawful purpose or is required by law, BRedPixel may continue the relevant processing to the extent permitted or required by applicable law.

12. Erasure Requests

Where applicable, BRedPixel will erase personal data upon a valid request unless retention is necessary for:

Compliance with applicable law;
Legal claims or disputes;
Security or fraud prevention;
Investigation of misuse;
Accounting or tax requirements; or
Another lawful purpose.

The DPDP Act provides for erasure subject to retention being necessary for the specified purpose or compliance with law.

13. Grievance Escalation

If you are dissatisfied with the response to your privacy request or grievance, you may reply to the original communication and request further review.

BRedPixel will provide the available escalation route in its response where further escalation is applicable.

A Data Principal is required to first exhaust the opportunity for grievance redressal with the Data Fiduciary before approaching the Data Protection Board, as provided under the DPDP Act.

14. No Fee

BRedPixel will not charge a fee merely for submitting a genuine privacy request unless a fee is permitted by applicable law.

15. Security and Fraud Prevention

BRedPixel may refuse or limit a request where necessary to prevent:

Unauthorised disclosure;
Identity fraud;
Account takeover;
Abuse of the privacy-request system; or
Other security risks.

Where a request cannot be fulfilled, BRedPixel will provide an appropriate explanation to the extent permitted by law.

16. Privacy Policy

For information about how BRedPixel processes personal data, please refer to the BRedPixel Privacy Policy.

The Privacy Policy describes:

Categories of personal data;
Purposes of processing;
Retention;
Data sharing;
Security;
Data Principal rights;
Data Processor relationships; and
Contact information.

17. Contact

Privacy & Grievance Contact

BRedPixel

Role: Privacy & Grievance Officer