¶¶Òõ¶ÌÊÓƵ

The Customer Privacy Notice is a mandatory document for organizations operating in India that collect, process, or store personal information of customers. It serves as a crucial compliance tool under the Information Technology Act 2000 and its associated rules, particularly the IT Rules 2011, while also preparing for the forthcoming Digital Personal Data Protection Act 2023. This document is essential for establishing transparency in data handling practices and building trust with customers. It must be provided to customers before or at the time of data collection and should be easily accessible throughout the business relationship. The notice needs regular updates to reflect changes in data processing activities or regulatory requirements, making it a living document that requires ongoing maintenance and review.

1. Introduction and Scope: Overview of the privacy notice and its application scope

2. About Us: Information about the organization collecting the data, including contact details

3. Definitions: Key terms used throughout the privacy notice

4. Types of Personal Information We Collect: Detailed categorization of personal and sensitive personal data collected

5. How We Collect Your Information: Methods and sources of data collection

6. Purposes of Processing: Specific purposes for which personal data is collected and processed

7. Legal Basis for Processing: Legal grounds under Indian law for processing personal data

8. Data Sharing and Disclosure: Information about third parties with whom data is shared

9. Data Security Measures: Overview of security practices to protect personal information

10. Data Retention: Period for which personal data is stored and criteria for determining this period

11. Your Rights: Description of data subject rights under Indian law

12. Grievance Redressal: Process for raising privacy concerns and contact details of Grievance Officer

13. Updates to Privacy Notice: Process for updating the privacy notice and notifying users of changes