Privacy guide

What is a customer data platform (CDP)? Your data, unified.

Customer data platforms explained: how tools like a CDP combine your data from many sources into one profile, and what that means for your privacy.

The simple answer

A customer data platform, or CDP, is a tool that gathers your data from many sources, website, app, email, support, purchases, and stitches it into one unified profile of you.

The benefit for companies is a single view of the customer. The privacy trade-off is that scattered bits of data become one detailed profile, which makes purpose, consent and security more important.

What to check

1
Understand your data may be combined across channels.

If this is unclear, treat it as a signal to ask the company for a plain-English explanation.

2
Look for unified-profile or CDP language in policies.

If this is unclear, treat it as a signal to ask the company for a plain-English explanation.

3
Ask what sources feed your profile.

If this is unclear, treat it as a signal to ask the company for a plain-English explanation.

4
Check how you can access or delete the unified profile.

If this is unclear, treat it as a signal to ask the company for a plain-English explanation.

From our investigation

Scattered data becomes one profile.

State of Privacy cares about data unification because a single combined profile can reveal far more than any one source alone, which raises the stakes for consent and security.

What to do next

1
Ask companies what data sources they combine.

Keep it practical: take one action, save proof, and avoid giving more data than the task needs.

2
Use access and deletion rights on the full profile.

Keep it practical: take one action, save proof, and avoid giving more data than the task needs.

3
Share less across channels by default.

Keep it practical: take one action, save proof, and avoid giving more data than the task needs.

People also ask

What does a CDP do?

It combines your data from many sources into one unified customer profile for marketing and analytics.

Why is a unified profile a concern?

Because combining sources can reveal more about you than any single source, so purpose and consent matter more.

Can I see my profile?

You can ask the company, using access and deletion rights, what it holds and request changes.

If you are a company
Check your own website.

How many trackers run on your pages? Does your privacy policy name them? Can you answer a data-rights email? If you don't know, we can help you find out.

Talk to Meridian Bridge Strategy →
Your right under Indian law
Mera data mera hai.

Your personal data belongs to you. Under DPDP, every company must tell you what they have and delete it if you ask. One email is all it takes.

Get the template email →
Read the full investigation.

We investigated 107 Indian company websites. The public report shows what we found.

Read the reportTry the experience