Data Protection Policy

Bizeneed India Private Limited is committed to protecting the privacy and security of your personal data. This Data Protection Policy outlines our practices for collecting, storing, processing, and sharing your information in compliance with applicable data protection laws including the Digital Personal Data Protection Act (DPDP Act), 2023, and the General Data Protection Regulation (GDPR) where applicable. By using our services, you consent to the practices described in this policy.

• Applies to all personal data collected through our website, mobile applications, and service engagements
• Compliant with the DPDP Act, 2023 and other applicable data protection regulations
• Last updated to reflect current regulatory requirements and organizational practices
• We reserve the right to update this policy periodically with appropriate notice

We collect personal data that you voluntarily provide when using our services, including identity information such as name, date of birth, gender, and photograph; contact information such as email address, phone number, and postal address; financial information such as bank account details, PAN, and GSTIN for billing and compliance purposes; and professional information such as company details, designation, and service requirements. We also collect usage data including IP address, browser type, device information, and interaction patterns to improve our services.

• Identity data: full name, date of birth, gender, government-issued identification numbers
• Contact data: email address, phone number, residential and correspondence addresses
• Financial data: bank account details, payment card information, PAN, GSTIN, and other tax identifiers
• Professional data: company name, registration numbers, director details, and service-specific information
• Technical data: IP address, browser type, device identifiers, operating system, and access timestamps
• Usage data: pages visited, services viewed, search queries, and interaction patterns on our platform

Your personal data is used to provide and improve our services, process transactions, communicate with you about your services, comply with legal and regulatory obligations, and send you relevant updates and promotional communications with your consent. We process data based on legitimate interests, contractual necessity, legal obligations, and your explicit consent where required by law.

• Providing requested professional services including company registration, GST filing, trademark applications, and compliance management
• Processing payments and maintaining accurate billing records for all transactions
• Communicating service updates, compliance deadlines, and important account information
• Complying with statutory obligations including KYC requirements and regulatory reporting
• Improving our platform functionality, user experience, and service delivery based on usage analytics
• Sending promotional communications and service updates only with your prior consent
• Preventing fraud, ensuring platform security, and protecting against unauthorized access

We implement industry-standard security measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. Data is stored on secure cloud infrastructure with encryption at rest and in transit. We maintain access controls, regular security audits, and incident response procedures. Our team undergoes regular training on data protection practices.

• All data is encrypted using AES-256 encryption at rest and TLS 1.3 encryption in transit
• Access to personal data is restricted to authorized personnel on a need-to-know basis
• Regular security audits, vulnerability assessments, and penetration testing are conducted
• Multi-factor authentication is enforced for all administrative access to data systems
• Data backups are performed daily with geographically distributed, secure storage
• Incident response procedures are in place to address potential data breaches promptly
• All employees and contractors receive mandatory data protection and security training

We share your personal data only when necessary to provide our services or comply with legal obligations. Data is shared with regulatory authorities for statutory filings and compliance purposes; trusted third-party service providers who assist in service delivery under strict confidentiality agreements; payment processors for transaction processing; and professional advisors including lawyers and chartered accountants with your consent. We do not sell your personal data to third parties.

• Shared with government regulatory authorities as required for statutory compliance and filings
• Shared with trusted service providers bound by strict data processing agreements
• Payment processors receive only the minimum data necessary for transaction processing
• Professional advisors may receive relevant data with your explicit consent
• No sale, rental, or commercial sharing of personal data with unaffiliated third parties
• Data may be disclosed if required by law, court order, or government regulation
• All third-party recipients are contractually obligated to maintain data confidentiality

Under applicable data protection laws, you have the right to access your personal data, request correction of inaccurate data, request deletion of your data, restrict or object to processing, receive your data in a portable format, and withdraw consent where applicable. To exercise any of these rights, please contact our Data Protection Officer at dpo@bizeneed.in. We will respond to all legitimate requests within the timeframe prescribed by applicable law.

• Right to access: request a copy of all personal data we hold about you
• Right to rectification: request correction of inaccurate or incomplete personal data
• Right to erasure: request deletion of your personal data under certain circumstances
• Right to restriction: request limitation of processing of your personal data
• Right to data portability: receive your data in a structured, commonly used, machine-readable format
• Right to object: object to processing of your data for direct marketing or legitimate interest grounds
• Right to withdraw consent: withdraw consent for data processing where consent is the legal basis

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Statutory records including financial documents and compliance filings are retained for the period mandated by applicable law. Once the retention period expires, data is securely deleted or anonymized.

• Service-related data is retained for the duration of the service relationship plus statutory retention periods
• Financial and tax records are retained for a minimum of 8 years as required by Indian law
• Corporate records including MCA filings data are retained in accordance with Companies Act requirements
• Marketing communications data is retained until consent is withdrawn or the relationship ends
• Inactive account data may be archived after 3 years of inactivity and deleted after 7 years
• Data marked for deletion is securely removed from all systems within 30 days of the request

In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant Data Protection Authority within 72 hours of becoming aware of the breach. Affected individuals will be notified without undue delay where the breach is likely to result in a high risk to their rights and freedoms. Our incident response team will investigate, contain, and remediate any breach promptly.

• Authority notification: within 72 hours of becoming aware of a qualifying breach
• Individual notification: without undue delay where high risk to rights and freedoms is identified
• Internal investigation and containment procedures activated immediately upon detection
• Root cause analysis and remediation measures implemented to prevent recurrence
• Documentation of all breaches and response actions maintained for regulatory review
• Cooperation with relevant authorities throughout the investigation and remediation process

If you have any questions, concerns, or requests regarding this Data Protection Policy or our data processing practices, please contact our Data Protection Officer. We are committed to addressing your concerns promptly and transparently.

• Data Protection Officer: dpo@bizeneed.in
• General inquiries: support@bizeneed.in
• Registered Office: Bizeneed India Private Limited, [Registered Address]
• We aim to respond to all data protection inquiries within 5 business days

This Data Protection Policy may be updated periodically to reflect changes in our practices, technology, legal requirements, or regulatory guidance. When we make material changes, we will notify you through email or a prominent notice on our website. The date of the most recent revision will be indicated at the top of this policy. Continued use of our services following any changes constitutes acceptance of the updated policy.

• Policy reviewed at least annually or as required by regulatory changes
• Material changes communicated via email notification and website announcement
• Version history maintained for audit and reference purposes
• Previous versions available upon request to dpo@bizeneed.in