How we secure, process, and manage personal data in compliance with the Digital Personal Data Protection Act 2023 of India.
In accordance with the Digital Personal Data Protection (DPDP) Act 2023, we process personal data only when explicit, unambiguous, and revocable consent is acquired, or for legitimate uses defined by law (such as employee screening checks).
Data principals possess the right to check, modify, restrict, or request the complete deletion of their personal records from our databases. Deletion requests are processed within 14 business days, except where retention is mandated by judicial authorities.
All data registers are isolated on air-gapped terminals and encrypted using AES-256 protocols. We enforce strict role-based access limits, ensuring only assigned investigators access specific file directories.