Privacy Policy

1. Introduction

OwnTrip OPC Pvt. Ltd. ("Company," "we," "us," or "our") operates the Workforce Management System platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our employee management services in compliance with the Information Technology Act, 2000, and the Digital Personal Data Protection Act, 2023.

We are committed to protecting your personal data and respecting your privacy rights. Please read this privacy policy carefully to understand our practices regarding your personal data.

2. Information We Collect

2.1 Personal Information

We collect the following types of personal information:

• Identity Data: Name, employee ID, date of birth, gender, photograph
• Contact Data: Email address, phone number, residential address
• Biometric Data: Fingerprints, facial recognition data (with explicit consent)
• Location Data: GPS coordinates for attendance tracking
• Employment Data: Job title, department, salary information, bank account details
• Attendance Data: Clock-in/out times, leave records, shift information
• Device Information: IP address, browser type, device identifiers

2.2 Sensitive Personal Data

In accordance with the IT Rules, 2011, we collect and process the following sensitive personal data with your explicit consent:

• Biometric information (fingerprints, facial recognition)
• Financial information (salary, bank account details)
• Physical and mental health records (if provided for leave management)

3. Legal Basis for Processing

We process your personal data on the following legal grounds:

• Consent: You have given explicit consent for processing your personal data
• Contract Performance: Processing is necessary for employment contract performance
• Legal Obligation: Compliance with labor laws, tax regulations, and statutory requirements
• Legitimate Interest: Business operations, security, and fraud prevention

4. How We Use Your Information

We use the collected information for the following purposes:

• Attendance tracking and workforce management
• Payroll processing and salary disbursement
• Leave and shift management
• Performance evaluation and analytics
• Compliance with employment and tax laws
• Communication regarding employment matters
• Security and fraud prevention
• System improvements and customer support

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy and as required by Indian law:

• Active Employment: Throughout your employment period
• Post-Employment: Up to 7 years for compliance with labor laws and tax regulations
• Biometric Data: Deleted within 90 days of employment termination unless required by law
• Financial Records: Maintained as per Income Tax Act and Companies Act requirements

6. Data Sharing and Disclosure

We may share your information with:

• Employer: Your organization that uses our platform
• Service Providers: Cloud hosting, payment processors, SMS/email services (under strict confidentiality)
• Government Authorities: When required by law, court order, or regulatory bodies
• Professional Advisors: Lawyers, auditors, and consultants under confidentiality obligations

We do not sell or rent your personal data to third parties for marketing purposes.

7. Data Security

We implement comprehensive security practices as required under IT Rules, 2011 and DPDP Act 2023:

• Industry best practice information security management
• End-to-end encryption for data transmission
• Encrypted storage of sensitive data at rest
• Multi-factor authentication and access controls
• Regular security audits and vulnerability assessments
• Employee training on data protection
• Incident response and breach notification procedures

8. Your Rights Under Indian Law

As per the Digital Personal Data Protection Act, 2023, you have the following rights:

• Right to Access: Request copies of your personal data
• Right to Correction: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of personal data (subject to legal requirements)
• Right to Withdraw Consent: Withdraw consent for data processing (may affect service delivery)
• Right to Data Portability: Receive your data in a structured format
• Right to Grievance Redressal: File complaints regarding data processing

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

• Maintain user sessions and authentication
• Analyze platform usage and performance
• Personalize user experience
• Ensure platform security

You can control cookie preferences through your browser settings.

10. International Data Transfers

Your data is primarily stored and processed within India. If data is transferred outside India, we ensure:

• Adequate data protection measures as per Indian law
• Standard contractual clauses with international vendors
• Compliance with cross-border data transfer regulations

11. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors without parental consent as required by law.

12. Data Breach Notification

In the event of a data breach affecting your personal data, we will:

• Notify the Data Protection Board of India within 72 hours
• Inform affected individuals as required by law
• Take immediate remedial measures to prevent further breaches
• Provide details of the breach and protective actions taken

13. Third-Party Links

Our platform may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. Please review their privacy policies before providing any personal information.

14. Changes to Privacy Policy

We reserve the right to update this Privacy Policy to reflect changes in our practices or legal requirements. Material changes will be notified through:

• Email notification to registered users
• Prominent notice on our platform
• Updated "Last Modified" date

15. Grievance Redressal

For any privacy concerns, complaints, or to exercise your rights, please contact our Grievance Officer:

16. Compliance and Regulatory Authority

This Privacy Policy is governed by:

• Information Technology Act, 2000
• Digital Personal Data Protection Act, 2023
• IT (Reasonable Security Practices) Rules, 2011
• Payment and Settlement Systems Act, 2007 (for financial data)

If you are not satisfied with our response, you may file a complaint with the Data Protection Board of India.

17. Contact Information

For any questions regarding this Privacy Policy, please contact us at:

By using the Workforce Management System platform, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.