Privacy Policy & Data Protection Notice

Last Updated: September 2026

This Privacy Policy describes our practices regarding the collection, storage, use, and protection of your personal and financial details in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable Indian data protection frameworks.

1. Categories of Personal Data Collected

To audit your provident fund discrepancies and prepare procedural filings, we collect:

Identification Details: Name, father's/spouse's name, date of birth, contact number, and email address.
Statutory & Member Records: Universal Account Number (UAN), Member ID, Establishment codes, and dates of joining/exit.
Documentation Copies: Scanned Member Passbooks, Service Transfer Summaries, Joint Declaration forms, and masked identity verification records (PAN, masked identity cards).
Communication Logs: Notes from consultation calls, WhatsApp interactions, and case notes.

2. Purpose and Legal Basis for Processing

We process your information solely for the following specified purposes:

Executing diagnostic audits on EPF passbook misalignments, overlapping service dates, and name mismatches.
Drafting procedural applications, Joint Declarations, and formal administrative grievance submissions.
Updating you on case milestones and responding to your direct inquiries.

We do not sell, rent, monetize, or disclose your personal data to marketing third parties, lead aggregators, or unauthorized external entities.

3. Storage, Encryption, and Access Controls

3.1. Access Restrictions: Access to client records is restricted strictly on a need-to-know basis to personnel assigned to document drafting.

3.2. Storage Security: All electronic files, passbooks, and case folders are kept in encrypted digital storage with role-based access authentication.

3.3. No Credential Harvesting: We will never ask you for your private Unified Member Portal passwords or Aadhaar OTPs. Any credential shared inadvertently will be deleted immediately.

4. Retention & Deletion Policy

Active Engagement: Data is maintained throughout the period of document drafting and active case resolution.
Archival Period: Closed case documentation is retained for up to ninety (90) days post-resolution to address secondary queries or EPFO re-verifications.
Right to Erasure: You may request complete deletion of your documents and case profile at any time by emailing privacy@corporatecompliance.in. Upon verification, files will be purged from our active databases within seven (7) working days.

5. Your Rights as a Data Principal (DPDP Act 2023)

Under the DPDP Act 2023, you hold the right to:

Access a summary of personal data held and processing activities performed.
Request correction of outdated, incomplete, or inaccurate records.
Withdraw consent and request data deletion, subject to ongoing statutory documentation requirements.
Nominate a representative or register a grievance with our Data Officer.

Grievance Redressal:

For privacy questions, access requests, or deletion requests, contact our Compliance & Privacy Desk:

Email: privacy@corporatecompliance.in
Response SLA: Within 72 business hours