Legal Basis for processing
Your Personal Data may be processed by us under different circumstances and under different lawful basis. The same is provided below for your information:
- Consent: We may use and process your Personal Data where you have consented to such processing by means of this Privacy Policy. Once you give your consent, we may also process your Personal Data for purposes incidental to or connected with the specific purposes for which you have consented. You may withdraw your consent at any time. You can let us know by contacting us at the contact details mentioned below. We may require your Personal Data for contacting you.
- Vital Interest in emergent situations: We may use your Personal Data to reach to you if there are any urgent notices or other communications required to be made to you.
- Compliance with applicable laws: We may process your Personal Data wherever applicable law mandates us to process certain data for compliance or other legal purposes, or where your Personal Data or associated information is solicited by the Government or authorized agencies under applicable law.
If you wish to opt out of receiving non-essential communications such as promotional and marketing-related information regarding our Products & Services, please email us at the details provided below in the contact section.
Third-party links
Through the use of the Website, you may access certain third-party links to other services, which may, for example, require transmission of Personal Data or Sensitive Data to third parties. We are not responsible for the collection or use of Personal Data in such applications or services provided by a third-party and recommend that you carefully review applicable terms for (and any integrity policy related to) such applications or services before you use them. If you have questions concerning a certain third party’s use of your Personal Data, please contact the third party directly.
- Sharing, disclosure and retention of Personal Data
We may disclose your Personal Data, as the case may be, to third parties in the manner and for the purposes specified below:
- To our affiliates or group companies for the purposes described in this Policy;
- To Score-Recipients which you have selected, for the purpose of transmitting your scores and Personal Data to such Score-Recipients;
- To our third-party service providers who provide services such as website hosting, email delivery, accommodation, auditing, fraud detection and other services;
- To third parties, to permit them to send you marketing communications, data analysis, research and development purposes consistent with your choices if you have opted into such sharing; and
- Such data available in reports and other materials provided by you and/or your company may be shared pursuant to an engagement with another business partner and/or a supplier.
We may also use and disclose your Personal Data as we believe to be necessary or appropriate:
- To comply with applicable law, which may include laws outside your country of residence, to respond to requests from public and government authorities, which may include authorities outside your country of residence, to cooperate with law enforcement or for other legal reasons;
- To enforce our Terms;
- To enforce or protect our contractual or other legal rights or to defend or bring legal proceedings, threats or notices of legal proceedings thereof; and
- To protect our rights, privacy, safety or property, and/or that of our affiliates, contractors, agents or other users.
In addition, we may use, disclose or transfer your Personal Data, without consent, to a third party in the event of any reorganization, restructuring, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or stock (including in connection with any bankruptcy or similar proceedings).
Cookies and tracking technologies
We may also collect certain Personal Data and non-personal information through cookies while you access the Website. Cookies are text files to identify your internet browser, store your preferences, and to improve your experience on the Website. We use cookies in order to improve our services provided to you. Please note that, some cookies we use are essential for some services to work, others are used to collect information on the use of the Website so that the Website can be more convenient and useful for you.
You are free to opt-in or op-out to the use of cookies when you first visit the Website. Consent, once provided, can be withdrawn at any time by altering your cookie preferences in our Website. The retention period of cookies is limited and differs per cookie. Please be informed that disabling cookie collection through the Website or changing your consent may result in some features of the Website not functioning properly and we may not be able to send customized and relevant communication or promotional messages to you. Alternatively, you also have a choice to disable and delete certain types of cookies by using appropriate options in your browser settings.
These terms relating to cookies and tracking technologies may be applicable to all visitors of the website, irrespective of whether they have registered for a test or not.
Retention of Personal Data
We will only retain your Personal Data for as long as it is necessary to fulfil the purposes outlined in this Policy or the purposes of which you have otherwise been informed. While the exact period may vary, this means that when you have consented to our processing of your Personal Data, we may retain your Personal Data for as long as we process and deliver our Products & Services, until you withdraw your consent or is otherwise legally required. If you have revoked your consent, we may nevertheless retain certain Personal Data for the period required in order for us to meet our legal obligations and defend ourselves in legal disputes.
If we collect your Sensitive Data, we will redact or delete your Sensitive Data upon completion of the Products & Services, however, we may retain your personal data, which does not include Sensitive Data, in accordance with this Privacy Policy. If you withdraw your consent, unless required to be retained by applicable law, we may redact or delete your Sensitive Data unless required to be retained by law, however, we may not be able to provide you with our Products & Services. If we have not received your consent for Processing, the Personal Data will only be retained to the extent we are permitted to do so by law.
- Storage and Cross-Border Transfer
Our Data Centres may not be located in India. You consent to the transfer or sharing of your Personal Data or Sensitive Data with third parties or affiliates situated in countries outside India that may have differing data protection laws. However, we will make best efforts to ensure that the transfer of your Personal Data is made to a country with such appropriate safeguards necessary to secure the same level of data protection afforded under Indian law.
In the event that we may transfer your Sensitive Data outside India, you acknowledge and provide your express consent for such transfer and processing of your Sensitive Data with affiliates or third parties located outside India in jurisdictions or to entities which ensure a same or similar level of data protection adhered to under Indian law.
- Your Rights regarding Personal Data
If you live anywhere in India, the law has various rights bestowed on you in relation to your Personal Data. We will have to confirm your identity, wherever applicable, to ensure that your rights are being exercised appropriately. To exercise these rights, you will have to write to us on the contact details given below.
Except in exceptional circumstances, we will respond to your request within 30 (thirty) days from the date we receive your email. We may charge a minor sum to comply with your exercise of these rights to aid the cost we incur for this compliance. You will be informed of these charges once you write to us. Please be informed that you have the following rights under applicable laws in your country. In rare cases, we may not be able to comply with your directions of exercise of your rights due to some practical or legal reasons. We will inform you appropriately if such a situation occurs.
- Accessing Your Personal Data: You have the right to access a copy of your Personal Data that we hold in a standard form that will be easily understandable. In rare occasions, we may not be able to provide you with a copy of your information in which case we will convey you this message with appropriate reasons.
- Verify and rectify: Accuracy is an important principle of data protection and you have the right to verify your Personal Data with us and ask us to rectify it if it is inaccurate or outdated. You can correct, complete and update Personal Data you provide to us.
- Withdrawing Your consent or opt-out: You can always withdraw your consent you have given us. We will stop collecting or processing your Personal Data we collect from you solely on basis of your consent. We are legally permitted to continue collecting or processing your Personal Data if we can rely on grounds other than consent to process your Personal Data. Also, you may opt-out from providing your Sensitive Data to us, however, we may not be able to provide you with certain Products & Services (such as testing services, if you fail to provide consent for collection of biometric data) if you do not provide us with such information.
- Erasing your Personal Data: You have the right to get your Personal Data erased from our systems. Unless there is a reason that the law allows us to use your Personal Data for longer, we will make reasonable efforts to comply with your request.
- Security Measures to safeguard Personal Data
We strive to work towards the security, integrity and privacy of your Personal Data and to protect your Personal Data against unauthorized disclosure, access or destruction to the extent reasonably possible by us. We are in compliance with the reasonable security standards as prescribed by the applicable laws. Notwithstanding anything contained in this Policy or elsewhere, we are not responsible for any loss, damage, or misuse of your Personal Data, if such loss, damage, or misuse takes place as a result of a Force Majeure Event (as defined below).
A "Force Majeure Event" shall mean any event that is beyond our reasonable control and shall include, without limitation, fire, flood, explosion, acts of God, civil commotion, strikes, insurrection, war, epidemic, pandemic, acts of government, computer hacking, software failure and storage device, computer crashes etc.
Breach of Personal Data
We will promptly and in compliance with applicable law report to appropriate authorities about breach of any Personal Data processed by us, in accordance with applicable law. We will take necessary directions and remedial measures directed by such authority to prevent further loss of information or mitigate harm, as may be specified. We may also contact you to report such breaches to you based on directions issued by authorities under applicable law.
- Modifications & Grievance Redressal