KavachOne

Privacy Notice

1. OBJECTIVE

This privacy Statement, is intended to inform you on how we gather, define, and use personal data that you provide to the Company when using our websites and social media platforms or when relying on our services.

This Privacy Statement will primarily help you understand:

a. Intelligent Compliance Tool: Streamline compliance management with real-time insights, automated workflows, and customizable dashboards.
b. Security & Compliance Consultancy: With our strategic insights and tailored approach, we help organizations maintain a secure and compliant environment.
c. Data Privacy Solutions: We specialize in protecting personal data through risk assessments, policy development, and adherence to global privacy regulations.
d. Cybersecurity Services: Our cutting-edge solutions offer robust protection from threats, including threat detection and incident response.
e. Security Testing & Assessment: Our expertly designed testing solutions, including penetration testing, vulnerability scanning, and security audits, ensure robust defenses.

2. SCOPE

This Statement applies to all vendors, visitors, customers, and other individuals who provide their personal data to the Company and all such individuals who are hereinafter referred to as “Data Subject(s)/PII Principal”.

3. BASIC TERMS

SNo.	Terms	Definition
a.	Personal Data/PII	Personal data/PII means any information relating to an identified or identifiable natural person (data subject/PII Principal); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person
b.	Data Subject/PII Principal/Data Principal	A data subject/PII Principal is the individual whose personal information is being collected, held or processed.
c.	IP Address	An Internet Protocol address (IP address) is a logical numeric address that is assigned to every single computer, printer, switch, router or any other device that is part of a TCP/IP-based network.
d.	Data/PII Controller	A data/PII controller is a person, company, or other body that determines the purpose and means of personal data processing (this can be determined alone, or jointly with another person/company/body).
e.	Machine Readable Format	Machine-readable data, or computer-readable data, is data in a format that can be easily processed by a computer. Machine-readable data must be structured data. E.g.: word document, pdf document, excel sheet, etc.
f.	Data/PII Processor	Data Processor/PII means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

4. ABBREVIATIONS

Abbreviation	Meaning
DPO	Data Protection Officer
TCP/IP	Transmission Control Protocol/ Internet Protocol
PII	Personal Identifiable Information

5.ROLES & RESPONSIBILITIES

a. Data/PII Controller detail: A1,Sector-48 Noida, UP 201301
b. Data Protection Officer (DPO) Contact Details: We envisage protecting and safeguarding your personal data and in lieu of the same, our nominated representative is Amar who can be reached at amar@Kavachone.com

6.INTRODUCTION

KavachOne Solutions Pvt Ltd is committed to improving health in partnership with its clients. We bring cloud services to our customers.

KavachOne Solutions Pvt Ltd are committed to protecting and respecting your privacy.

This policy (together with our Website User Agreement, and any other documents referred to on it) sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please carefully read this Privacy Policy, which describes the ways in which we collect information about individuals who visit this website (“Personal Data/PII”), how we hold and use Personal Data/PII and how we respect your privacy rights.

KavachOne Solutions Pvt Ltd undertake to adopt all measures to prevent the misuse of the personal data provided by you. Your data will only be processed when there are legal grounds for their processing. Thank you for using our services.

7.DATA COLLECTION

We may collect and process the following data:

7.1 Personal Data/PII

Personal data is information that you or a third party provides concerning details of, for instance, your name, postal address, e-mail address, age, nationality, contact number which will be disclosed by completing one of our standard forms posted on our site.

Personal data collected from our website when you apply for job, register for newsletter, through social media, customer support includes name, email ID, phone number, address, family details, nationality and country.

7.2 IP Addresses

If you log on to our website, we collect information about your computer, including where available your IP address, operating system and browser type, for system administration. This is statistical data about our users’ browsing actions and patterns, and does not identify any individual. We use this information to provide a better browsing experience to the website.

8.USING THE DATA

We use the personal data we collect from you for a range of different business purposes and according to different legal basis of processing. The following is a summary of how and according to which legal bases we use your personal data:

We may use personal data:

Under applicable law, including laws outside your state or country of residence
ISO 14001:Environmental Management Systems
To comply with legal process and to prevent, detect, or suppress abuse, fraud, or criminal activity
To respond to requests from public and government authorities and self-regulatory organizations, including public and government authorities and self-regulatory organizations outside your state or country of residence
To enforce our terms and conditions
To protect our operations, assets, or interests or those of any of our affiliates
To protect our rights, privacy, safety, or property, and/or that of our affiliates, you, or others
To allow us to pursue available remedies or limit the damages that we may sustain

9.RETENTION AND STORAGE

We will retain your Personal data for the period necessary to fulfil the purposes outlined in this policy unless a longer retention period is required or permitted by law. For details on our retention Policy please contact our DPO at info@kavachone.com

Rest assured, data will be deleted/destroyed/archived post the retention period as per the data destruction mechanism developed by KavachOne Solutions Pvt Ltd in accordance with applicable laws, industry best practices, regional sectoral guidelines and contractual arrangements.

10.DATA SUBJECT/PII PRINCIPAL RIGHTS

As a customer and/or data subject, you may inquire and raise requests regarding the following:

How to access, seek correction and/or erasure of your personal data
How to object to processing of your personal data
How to request for restricting processing of your personal data
How to request for restricting processing of your personal data

For your protection, we may only implement requests with respect to the Personal data associated with the particular email address that you use to send us your request, and we may need to verify your identity before acting on your request.

To raise a request under this section or for clarification regarding your rights as a data subject, please send us a request on the following email ID info@kavachone.com While we envisage to to comply with your request within 30 working days of receiving your requests, we might require some additional time depending upon the circumstances under which the request was made.

Objecting To Legitimate Interest/Direct Marketing: Any data subject/PII Principal whose personal data has been collected may object to personal data processed pursuant to KavachOne Solutions Pvt Ltd legitimate interest. In such case, KavachOne Solutions Pvt Ltd will no longer process their personal data unless KavachOne Solutions Pvt Ltd demonstrates appropriate overriding legitimate grounds for the processing or if needed for the establishment, exercise, or defence of legal claims. Natural persons also may object at any time to processing of their personal data for direct marketing purposes. In such case, their personal data shall no longer be used for that purpose. In cases of direct marketing, natural persons will be able to fulfil such rights directly via an ‘Unsubscribe’ link or similar mechanism (e.g: device settings for push notifications)

Use of Services by Minors: KavachOne Solutions Pvt Ltd services are not directed towards minors. In case the personal data of a minor is collected without the oversight of their guardian/ parents then we request you to contact our DPO.

11.SECURITY OF PERSONAL DATA

Please note that all information you provide to us will be secured using strict procedures and security features to prevent unauthorized access, breach or leakage.

KavachOne Solutions Pvt Ltd endeavors to ensure that the data disclosed by you is as secure as possible. To that end, we have implemented a number of technical and organizational measures, which utilize to protect your personal data from unauthorized or unlawful processing and from unintentional loss, destruction or damage.

12.DISCLOSURE

We may disclose your information to any of our employees, officers, insurers, professional advisers, agents, partners, suppliers or subcontractors insofar as reasonably necessary for the purposes set out in this policy and for the purpose of providing services to you.

Your Personal data may be disclosed or transferred to the following entities. With the exception of our corporate affiliates and service providers, these entities are not controlled by us and Personal data disclosed to them is subject to the applicable entity’s privacy policy and security practices. Therefore, we encourage you to review the privacy policies of any entity whose products or services you purchase using the Services:

We may disclose your personal data to any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries.
We may disclose your personal data to third parties if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms of use and other agreements; or to protect the rights, property, or safety of the Companies, our customers, or others.
To our third party service providers who provide services such as website hosting and webinars. The information we provide to third parties service providers is subject to confidentiality obligations and is intended to be used solely for the purpose(s) permitted thereby.
To identify you to anyone to whom you send messages through the Services. You may also choose to disclose your Personal data on chat, social media, blogs, and other services to which you are able to post information and materials. Please note that any information you post or disclose through these services will become public and may be available to other users and the general public. We urge you to be very careful when deciding to disclose any information on the Services.
To a third party, in the event of any reorganization, merger, sale, joint venture, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock (including in connection with any bankruptcy or similar proceedings.
As we believe to be necessary or appropriate: (a) under applicable law, including laws outside your state or country of residence; (b) to comply with legal process and to prevent, detect, or suppress abuse, fraud, or criminal activity; (c) to respond to requests from public and government authorities and self-regulatory organizations, including public and government authorities and self-regulatory organizations outside your state or country of residence; (d) to enforce our terms and conditions; (e) to protect our operations, assets, or interests or those of any of our affiliates; (f) to protect our rights, privacy, safety, or property, and/or that of our affiliates, you, or others; and (g) to allow us to pursue available remedies or limit the damages that we may sustain.

13.CROSS BORDER DATA TRANSFER

The data that we collect or are provided with may be transferred to and stored at a destination outside the base location or outside European Economic Area (“EEA”), India and the United States of America (“US”). It may also be processed by staff operating outside the base location /EEA and the US who work for us or for one of our related companies and affiliates.

KavachOne Solutions Pvt Ltd will ensure that a legitimate transfer of your personal data takes place to a location abroad keeping in mind the transfer mechanisms mandated by applicable laws.

13.Questions and Queries

Questions, comments and requests regarding this privacy policy are welcomed and should be addressed to info@kavachone.com