Data security and privacy policy

Privacy Policy

Effective Date: [Insert Date]

Welcome to WorkplaceSentinel ("we," "us," or "our"). We are committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services, in compliance with the General Data Protection Regulation (GDPR) and other applicable privacy laws.

1. Information We Collect

We collect personal information to provide, operate, and improve our services. The types of personal information we collect include:

• Employee Reports:  Information provided when an employee reports an incident, which may include personal details, descriptions of incidents, and any attached      evidence.
• User Information:  Information about individuals who use our platform, such as names, email  addresses, job titles, and contact details.
• System Data: Information about how you use our platform, including log files, IP addresses, browser type, and usage data.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To Provide Services: To facilitate incident reporting, case management, and resolution processes.
• To Improve User  Experience: To enhance the functionality and      performance of our platform.
• To Ensure Security: To protect the integrity and security of our systems and users.
• To Comply with Legal      Obligations: To fulfill our obligations under applicable laws and regulations, including GDPR.

3. Legal Basis for Processing

We process personal data based on the following legal grounds:

• Consent: Where necessary, we obtain consent from individuals for the collection and processing of their data.
• Legitimate Interests: We process data based on our legitimate interests in ensuring a safe and compliant workplace.
• Compliance with Legal      Obligations: We process data to comply with our legal and regulatory obligations.

4. Data Security

We take data security seriously and employ various measures to protect your information:

• Encryption: We use SSL/TLS encryption to protect data transmitted to and from our platform.
• ISO 27001 Certification: Our      platform is ISO 27001 certified, ensuring adherence to international      information security standards.
• Access Controls: We use Role-Based Access Control (RBAC) to restrict access to personal data.
• Regular Audits: We perform regular security audits and assessments to maintain the integrity of our systems.

5. Data Retention

We retain personal data for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. When personal data is no longer needed, we securely delete or anonymize it in accordance with our data retention policy.

6. Sharing and Disclosure of Information

We do not sell or rent personal data to third parties. We may share personal data in the following circumstances:

• With Your Consent: When you have given us explicit consent to share your information.
• For Legal Reasons: To comply with legal obligations, court orders, or governmental requests.
• With Service Providers: With      third-party service providers who assist us in operating our platform,      subject to strict confidentiality and security obligations.

7. International Data Transfers

As part of our global operations, we may transfer personal data to countries outside the European Economic Area (EEA). In such cases, we ensure that appropriate safeguards, such as Standard Contractual Clauses (SCCs), are in place to protect your data.

8. Your Data Rights

Under GDPR and other applicable laws, you have the following rights regarding your personal data:

• Right to Access: You can request access to the personal data we hold about you.
• Right to Rectification: You can request correction of any inaccurate or incomplete data.
• Right to Erasure: You can request the deletion of your personal data under certain conditions.
• Right to Restrict Processing: You can request the restriction of      processing your data in specific circumstances.
• Right to Data Portability: You can request a copy of your data in a structured, commonly used format.
• Right to Object: You can object to the processing of your data for certain purposes.

To exercise any of these rights, please contact us using the contact details provided below.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our platform. Cookies help us understand how you use our services and enable us to improve functionality and performance. You can manage your cookie preferences through your browser settings.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by posting the new Privacy Policy on our website and updating the effective date. We encourage you to review this policy periodically to stay informed about how we protect your privacy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:

• Email: Mukesh.gadge@dbtpl.com
• Phone: +919922113707