Privacy notice

Who we are

[ORGANISATION LEGAL NAME], [ADDRESS], uses Core to run its work and its accounts. Questions about your data: [CONTACT EMAIL].

What we keep

Client contacts: your name, role, phone and email, and the meetings you were in.

Freelancers and vendors: your name, phone, email, skills and rates, PAN, GSTIN, bank account and photo; the work given to you, your bills and what we paid you.

Staff: your name, email, role, sign-in records and the work you do in Core; and, for employment (HR), your employee details (designation, joining date, date of birth, address, personal email, emergency contact), PAN, bank account, the last 4 digits of your Aadhaar and copies of ID documents, your salary and payslips, your In and Out times (with the office network check), your leave, and the policies given to you.

Why

To work with you: to plan and approve work, give work and pay for it, keep the accounts and meet the law (GST, income tax).

For staff, employment is the purpose (DPDP Act §7(i)): attendance, leave, salary and payslips are kept to run the team and pay you.

How long

Finance records (invoices, bills, payments) are kept for at least 8 years, as the law requires. The rest is kept while we work together and for [PERIOD] after, then erased. Staff records and payslips are kept for [STAFF PERIOD] after you leave.

Your rights

You can ask for a copy of what we hold about you, to correct it, or to erase it (finance records the law says to keep stay, under a pseudonym where they can). Write to [CONTACT EMAIL]; we answer within [DAYS] days. If you aren't satisfied, you can complain to the Data Protection Board of India.

If something goes wrong

If your data is lost or seen by someone it shouldn't be, we tell you and the Data Protection Board without delay, and what we are doing about it.