ComplyQuick DSC Services
Effective Date: 6th June 2025
Last Updated: 6th June 2025
1. Introduction
Welcome to ComplyQuick DSC Services, a DSC platform by Utility Spider LLP ()(“Company,” “we,” “our,” or “us”), your trusted partner in digital authentication solutions, accessible at https://dsc.complyquick.in. We understand that in today’s digital world, your privacy is not just a preference—it’s a fundamental right that deserves our utmost respect and protection.
At ComplyQuick, we believe that transparency builds trust. That’s why we’ve created this comprehensive Privacy Policy to clearly explain how we handle your personal information. We are committed to protecting your privacy and safeguarding your personal data in strict accordance with applicable Indian laws, including:
- The Information Technology Act, 2000 and its amendments
- The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“SPDI Rules”)
- The Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021
- Guidelines issued by the Controller of Certifying Authorities (CCA)
- Other applicable data protection regulations and industry standards
This Privacy Policy serves as your comprehensive guide to understanding how we collect, use, process, store, disclose, and protect your personal and sensitive personal information when you visit our website, engage with our services, or interact with us in any capacity related to Digital Signature Certificates (DSCs). We encourage you to read this policy carefully and reach out to us if you have any questions or concerns.
Our Privacy Commitment:
- We collect only the information necessary to provide you with excellent service
- We never sell or rent your personal information to third parties for commercial purposes
- We implement robust security measures to protect your data
- We respect your rights and provide clear channels for you to exercise them
- We are transparent about our data practices and regularly update our policies
2. Scope of Services and Policy Coverage
This Privacy Policy governs all interactions you have with ComplyQuick DSC Services and applies comprehensively to our digital ecosystem, which includes:
2.1 Core Platform Services
Our primary mission is to simplify your digital signature journey through:
DSC Consultation and Advisory:
- Personalized guidance to help you select the most appropriate DSC type based on your specific professional, business, or personal requirements
- Expert consultation on compliance requirements across different industries and use cases
- Educational resources and support materials to help you understand DSC applications
Authorized DSC Procurement:
- Seamless facilitation of DSC purchases from India’s leading licensed Certifying Authorities (CAs), including eMudhra, VSign, PantaSign, Capricorn, and other authorized entities (as may be added later)
- Comparative analysis of different CA offerings to help you make informed decisions
- Streamlined application processes that save you time and effort
Documentation and Compliance Support:
- Professional assistance in preparing and submitting necessary documentation for DSC issuance
- Ensuring full compliance with guidelines issued by the Controller of Certifying Authorities (CCA) under the Information Technology Act, 2000
- Quality verification of submitted documents to minimize rejection risks
Customer Care and Support:
- Dedicated customer support throughout your DSC journey
- Technical assistance and troubleshooting
- Regular updates on application status and processing timelines
2.2 Extended Service Coverage
This policy also extends to:
- Email communications and newsletters
- Customer feedback and survey responses
- Support ticket interactions and chat services
- Marketing communications (where you have provided consent)
- Third-party integrations and partnerships that enhance our service delivery
2.3 Multi-Channel Coverage
Our privacy commitments apply across all touchpoints:
- Website interactions and online transactions
- Mobile application usage (where applicable)
- Email and phone communications
- Physical document submissions
- Third-party platform integrations
3. Information We Collect – A Detailed Overview
We believe in collecting only the information that is necessary to provide you with exceptional service. Here’s a comprehensive breakdown of the types of information we may collect during your journey with us:
3.1 Personal Information
This includes basic information that helps us identify and communicate with you:
Identity Information:
- Full legal name (as per government records)
- Date of birth
- Recent photograph (passport-size, as per CA requirements)
- Video verification recordings (where mandated by specific CAs for enhanced security)
- Digital signature specimen
- Father’s/Mother’s/Spouse’s name (as required by certain CAs)
- Gender and nationality information
Government-Issued Identification Documents: We collect these to verify your identity and comply with regulatory requirements:
- Permanent Account Number (PAN) and PAN card copy
- Aadhaar Number and Aadhaar card details (where legally permissible and with consent)
- Driving License information and copies
- Passport details and copies
- Voter ID card information
- Other government-issued identification documents as specifically required by individual CAs
Contact and Communication Information:
- Primary email address for correspondence
- Mobile telephone number for SMS and voice communications
- Residential address and correspondence address
- Business address and office contact details (if applicable)
- Emergency contact information (where required)
Professional and Business Information (for organizational DSCs):
- Employment details and designation
- Company name and registration details
- Goods and Services Tax Identification Number (GSTIN)
- Business registration documents and certificates
- Certificate of Incorporation for companies
- Partnership deed for partnerships
- Memorandum and Articles of Association
- Board resolutions and authorization letters
- Other business-related documentation as required by specific CA guidelines
3.2 Sensitive Personal Information
In strict accordance with the SPDI Rules, we may collect sensitive personal information, which we handle with extra care and security measures:
Biometric Information:
- Fingerprint data (only when specifically required by certain CAs)
- Digital signatures and handwriting samples
- Voice recordings for verification purposes
Financial Information:
- Payment card details (processed through secure payment gateways)
- Bank account information (only when required for specific DSC types)
- Transaction history and payment records
- Credit/debit card transaction details
Health and Medical Information:
- Physical and mental health records (only when specifically required for certain specialized DSC categories such as medical professional DSCs)
- Medical certificates and fitness declarations
Personal Characteristics:
- Physical characteristics for identification purposes
- Any special accommodation requirements
3.3 Technical and Usage Information
We automatically collect certain technical information to improve our services and ensure security:
Device and Browser Information:
- IP addresses and geographical location data
- Browser type, version, and settings
- Device type, model, and operating system
- Screen resolution and display preferences
- Language preferences and timezone settings
Website Usage Analytics:
- Pages visited and time spent on each page
- Click patterns and navigation behavior
- Search queries and filters used
- Download and upload activities
- Session duration and frequency of visits
Security and Performance Data:
- Login attempts and authentication logs
- Error logs and system performance metrics
- Security incident logs and access attempts
- Cookie data and local storage information
3.4 Information from Third Parties
We may also receive information about you from:
- Certifying Authorities during the verification process
- Payment processors and financial institutions
- Identity verification services
- Government databases for KYC compliance
- Business partners and affiliated service providers
4. Legal Basis and Purpose of Data Processing – Why We Need Your Information
We want you to understand exactly why we collect your information and how it benefits you. We process your personal data only when we have a valid legal basis to do so:
4.1 Contractual Necessity – Fulfilling Our Service Commitment
When you engage our services, we process your information to:
Service Delivery and Fulfillment:
- Evaluate your eligibility for different types of DSCs based on your profile and requirements
- Facilitate smooth communication between you and the selected Certifying Authority
- Process your DSC application accurately and efficiently
- Coordinate document submission and verification processes
- Provide real-time updates on your application status
- Deliver your DSC securely upon issuance
Customer Support and Relationship Management:
- Respond to your queries, concerns, and support requests promptly
- Provide technical assistance and troubleshooting guidance
- Maintain comprehensive records of our interactions for continuity of service
- Offer personalized recommendations based on your specific needs
- Resolve any issues or disputes that may arise during the service delivery process
Payment Processing and Financial Management:
- Process payments securely through authorized payment gateways
- Generate invoices and maintain transaction records
- Handle refunds and payment-related queries
- Ensure compliance with financial regulations and tax requirements
4.2 Legal Compliance – Meeting Regulatory Obligations
We are legally required to collect and process certain information to:
Know Your Customer (KYC) Compliance:
- Verify your identity in accordance with Reserve Bank of India guidelines
- Conduct due diligence checks to prevent fraud and money laundering
- Maintain records as required by the Prevention of Money Laundering Act, 2002
- Report suspicious transactions to relevant authorities when required
Information Technology Act Compliance:
- Fulfill obligations under the Information Technology Act, 2000
- Comply with SPDI Rules for handling sensitive personal data
- Adhere to Controller of Certifying Authorities (CCA) guidelines
- Maintain audit trails and transaction logs as required by law
Regulatory Reporting and Documentation:
- Submit required reports to regulatory authorities
- Maintain prescribed records for statutory periods
- Cooperate with government agencies during audits and investigations
- Respond to legal processes including court orders and summons
CA-Specific Requirements:
- Meet individual Certifying Authority documentation standards
- Comply with specific verification procedures mandated by different CAs
- Ensure adherence to industry-specific regulations (banking, insurance, etc.)
- Maintain records in the format and duration specified by CA guidelines
4.3 Legitimate Business Interests – Improving Your Experience
Where permitted by law and balanced against your privacy rights, we may process information for:
Service Enhancement and Innovation:
- Analyze usage patterns to improve our website and service offerings
- Develop new features and services based on user feedback and behavior
- Conduct market research to better understand customer needs
- Optimize our processes to reduce processing times and improve efficiency
Security and Fraud Prevention:
- Monitor for suspicious activities and potential security threats
- Implement advanced fraud detection mechanisms
- Protect against cyber attacks and data breaches
- Ensure the integrity of our systems and your data
Business Operations and Analytics:
- Generate business intelligence reports for internal management
- Conduct performance analysis and quality assessments
- Plan resource allocation and capacity management
- Evaluate partnership opportunities and vendor relationships
Marketing and Communication (with consent):
- Send you relevant updates about our services and industry developments
- Provide educational content about digital signatures and compliance
- Offer promotions and special services that may interest you
- Gather feedback to improve our communication strategies
5. Data Sharing and Disclosure – Who We Share Your Information With
We understand that sharing your personal information is a matter of trust. We are committed to sharing your data only when necessary and always with appropriate safeguards in place. Here’s a detailed explanation of our data sharing practices:
5.1 Authorized and Necessary Sharing
We share your information with the following entities as part of our core service delivery:
Licensed Certifying Authorities (CAs): Your information is shared with your chosen CA for DSC processing:
- eMudhra Technologies Limited: For Class 2 and Class 3 DSCs, DGFT certificates, and specialized industry DSCs
- VSign Technologies Private Limited: For individual and organizational DSCs, including token-based certificates
- PantaSign (Pantasya Technologies): For affordable DSC solutions and bulk organizational requirements
- Capricorn CA: For comprehensive DSC services across various categories
- Other Licensed CAs: As authorized by the Controller of Certifying Authorities
What We Share with CAs:
- Complete application forms with your personal and professional details
- Identity verification documents and photographs
- Supporting documentation required for your specific DSC type
- Payment confirmation and transaction details
- Any additional information specifically requested by the CA for verification
Trusted Service Providers: We work with carefully selected third-party service providers who assist us in delivering quality services:
Technology Partners:
- Cloud hosting providers for secure data storage and website hosting
- Payment gateway providers for secure transaction processing
- Email service providers for communication management
- SMS gateway providers for instant notifications
- Document verification services for authenticity checks
Professional Service Providers:
- Legal advisors for compliance and regulatory guidance
- Chartered accountants for financial and tax compliance
- IT security firms for cybersecurity assessments
- Data analytics providers for service improvement insights
All service providers are bound by strict contractual obligations including:
- Confidentiality agreements and non-disclosure clauses
- Data protection and security requirements
- Limited use provisions restricting data usage to specified purposes only
- Regular security audits and compliance assessments
- Immediate notification requirements for any security incidents
5.2 Legal and Regulatory Disclosure
We may be required to disclose your information to government authorities and law enforcement agencies:
Mandatory Legal Disclosure:
- Court Orders: When directed by courts of competent jurisdiction
- Legal Processes: In response to subpoenas, warrants, and other legal instruments
- Regulatory Authorities: To Reserve Bank of India, Securities and Exchange Board of India, and other regulatory bodies
- Law Enforcement: To police, Central Bureau of Investigation, and other investigating agencies
- Tax Authorities: To Income Tax Department, GST authorities, and other tax collection agencies
Voluntary Cooperation (where legally permissible):
- National Security: Matters involving national security and public safety
- Criminal Investigations: Serious criminal matters and ongoing investigations
- Fraud Prevention: Cases involving financial fraud or cyber crimes
- Public Health: During health emergencies or pandemic situations
Disclosure Process and Safeguards:
- We carefully review all disclosure requests for legal validity
- We disclose only the minimum information necessary to fulfill the legal requirement
- We maintain detailed logs of all disclosures made
- We notify you of disclosures where legally permissible and practically feasible
- We challenge legally questionable requests through appropriate legal channels
5.3 Business Transfers and Corporate Transactions
In the event of significant business changes:
Merger or Acquisition:
- If ComplyQuick is acquired by or merged with another company, your information may be transferred as part of the business assets
- We will provide advance notice of such transfers and ensure that privacy protections continue
Asset Sale or Transfer:
- If we sell or transfer specific business assets, associated customer data may be included
- Any such transfer will be subject to confidentiality agreements and privacy commitments
Bankruptcy or Insolvency:
- In unlikely events of business closure, customer data will be handled in accordance with applicable laws
- We will make reasonable efforts to notify customers and provide options for data retrieval
5.4 Strictly Prohibited Sharing
We want to be absolutely clear about what we DO NOT do with your information:
Commercial Exploitation:
- We never sell your personal information to marketers, advertisers, or data brokers
- We do not rent or lease your data to third parties for commercial purposes
- We do not share your information for unsolicited marketing or promotional activities
Unauthorized Access:
- We do not provide your information to unauthorized third parties
- We do not allow employees to access your data for personal purposes
- We do not share your information with entities not bound by appropriate privacy agreements
Data Monetization:
- We do not create revenue streams by selling access to your personal information
- We do not participate in data trading or information brokerage activities
- We do not allow third parties to use your data for their independent business purposes
5.5 International Data Transfers
Current Practice:
- We primarily process and store your data within India using Indian service providers
- Where international transfers are necessary, we ensure adequate protection through:
- Standard contractual clauses approved by regulatory authorities
- Adequacy determinations for countries with equivalent data protection laws
- Your explicit consent for specific transfer purposes
Notification and Consent:
- We will notify you if we plan to transfer your data outside India
- We will obtain your explicit consent for such transfers where required by law
- We will provide details about the receiving country’s data protection standards
6. Data Security Measures – Protecting Your Information Like Our Own
Your trust is our most valuable asset, and we take the security of your personal information as seriously as we would our own family’s data. We have implemented a comprehensive, multi-layered security framework that combines cutting-edge technology with rigorous organizational practices to safeguard your information at every step of your journey with us.
6.1 Advanced Technical Safeguards
We employ state-of-the-art security technologies to create multiple layers of protection around your data:
Encryption and Data Protection:
- End-to-End Encryption: All data transmission between your device and our servers is protected using military-grade encryption protocols (AES-256 encryption standard)
- Secure Socket Layer (SSL) Certificates: Our website uses Extended Validation SSL certificates to ensure secure communication channels
- Database Encryption: Your personal information is encrypted both in transit and at rest using industry-leading encryption algorithms
- Tokenization: Sensitive data like payment information is tokenized, meaning we store random tokens instead of actual sensitive data
- Encrypted Backups: All backup systems maintain the same level of encryption as our primary storage systems
Access Controls and Authentication:
- Multi-Factor Authentication (MFA): Our systems require multiple forms of verification before granting access to your data
- Role-Based Access Control: Employees can only access information necessary for their specific job functions
- Biometric Authentication: Where possible, we use fingerprint and facial recognition for additional security layers
- Session Management: Automatic logout procedures and session timeouts to prevent unauthorized access
- IP Whitelisting: Restricted access from only approved IP addresses and geographical locations
Continuous Security Monitoring:
- 24/7 Security Operations Center: Real-time monitoring of all system activities and potential threats
- Intrusion Detection Systems: Advanced systems that identify and respond to suspicious activities immediately
- Regular Security Audits: Comprehensive third-party security assessments conducted quarterly
- Vulnerability Scanning: Automated daily scans to identify and address potential security weaknesses
- Penetration Testing: Annual ethical hacking exercises to test our security defenses
Infrastructure Security:
- Secure Data Centers: Your information is stored in certified, physically secure data centers with 24/7 monitoring
- Redundant Systems: Multiple backup systems ensure data availability even during system failures
- Disaster Recovery Plans: Comprehensive procedures to restore services quickly in case of emergencies
- Network Security: Advanced firewalls, intrusion prevention systems, and network segmentation
6.2 Organizational Security Measures
Technology alone isn’t enough—we believe that strong security culture and practices are equally important:
Employee Security Training and Awareness:
- Comprehensive Onboarding: All new employees undergo extensive data protection and privacy training
- Regular Training Updates: Quarterly security awareness sessions and updates on latest threats
- Privacy by Design: Our teams are trained to consider privacy implications in every decision
- Incident Response Training: Regular drills and simulations to ensure effective response to security incidents
- Confidentiality Agreements: All employees sign strict confidentiality and non-disclosure agreements
Access Management and Controls:
- Principle of Least Privilege: Employees have access only to the minimum data required for their roles
- Regular Access Reviews: Quarterly reviews of all access permissions and prompt removal of unnecessary access
- Segregation of Duties: Critical operations require approval from multiple authorized personnel
- Clean Desk Policy: Physical security measures to prevent unauthorized access to sensitive information
- Secure Communication Channels: All internal communications about sensitive matters use encrypted channels
Policy and Procedure Framework:
- Information Security Policy: Comprehensive policies covering all aspects of data protection
- Regular Policy Updates: Annual review and updates to security policies based on evolving threats
- Compliance Monitoring: Regular internal audits to ensure adherence to security policies
- Vendor Security Requirements: All third-party vendors must meet our stringent security standards
- Document Control: Secure handling and disposal of physical and electronic documents
Incident Response and Management:
- 24/7 Incident Response Team: Dedicated team ready to respond to security incidents immediately
- Escalation Procedures: Clear protocols for different types of security incidents
- Customer Notification: Transparent communication about any incidents that may affect your data
- Post-Incident Analysis: Comprehensive reviews to prevent similar incidents in the future
- Regulatory Reporting: Prompt reporting to relevant authorities as required by law
6.3 Honest Communication About Security Limitations
We believe in complete transparency about both our strengths and limitations:
Acknowledging Inherent Risks: While we implement the most advanced security measures available, we want to be honest with you about the realities of digital security. No system in the world can guarantee 100% security against all possible threats. The internet, by its very nature, carries inherent risks that even the most sophisticated security measures cannot completely eliminate.
What This Means for You:
- Shared Responsibility: While we protect your data with enterprise-grade security, you also play a crucial role in maintaining security through safe browsing practices and protecting your login credentials
- Continuous Improvement: We constantly monitor emerging threats and upgrade our security measures accordingly
- Transparent Communication: If we ever experience a security incident, we commit to notifying you promptly and transparently about what happened and what we’re doing about it
Your Role in Security:
- Use strong, unique passwords for your accounts
- Keep your devices and browsers updated with the latest security patches
- Be cautious about sharing personal information over unsecured networks
- Report any suspicious activities or communications immediately
- Log out of your accounts when using shared or public devices
7. Data Retention – How Long We Keep Your Information
We understand that your personal information shouldn’t be kept indefinitely. Our data retention practices are designed to balance your privacy rights with legal requirements and business needs, ensuring we keep your information only as long as necessary and no longer.
7.1 Our Retention Philosophy
We follow a “minimum necessary” approach to data retention, which means:
- Purpose Limitation: We keep your data only as long as needed for the specific purposes we collected it
- Legal Compliance: We maintain records for periods required by applicable laws and regulations
- Business Necessity: We retain information only when there’s a legitimate business need
- Your Control: We respect your requests for data deletion whenever legally permissible
7.2 Specific Retention Periods
Here’s exactly how long we keep different types of your information:
DSC Application and Transaction Records:
- Active Application Data: Maintained until DSC issuance is complete, plus 1 year for support purposes
- Completed Transaction Records: Retained for 7 years as required by Indian financial regulations
- Payment Information: Credit/debit card details are not stored; transaction records kept for 7 years
- Communication Records: Email and chat correspondence retained for 3 years for quality assurance
Identity and Verification Documents:
- KYC Documents: Retained for 7 years from the date of DSC issuance as per regulatory requirements
- Biometric Data: Deleted immediately after verification, unless required by specific CA guidelines
- Photograph and Video Verification: Retained for the duration of DSC validity plus 2 years
- Supporting Documents: Business registration documents retained for 10 years for organizational DSCs
Account and User Data:
- User Account Information: Maintained while your account is active, plus 3 years after account closure
- Website Usage Analytics: Aggregated data retained for 2 years; individual tracking data deleted after 13 months
- Customer Support Records: Maintained for 5 years to ensure continuity of service
- Marketing Consent Records: Retained until consent is withdrawn, then deleted within 30 days
Legal and Compliance Records:
- Audit Trails: Maintained for 7 years as required by IT Act and CA regulations
- Regulatory Correspondence: Retained permanently or as specified by relevant authorities
- Legal Proceedings Records: Maintained until case resolution plus applicable limitation periods
- Incident Response Logs: Retained for 5 years for security analysis and improvement
7.3 Automated Deletion and Data Lifecycle Management
We use advanced data management systems to ensure timely deletion:
Automated Deletion Systems:
- Scheduled Deletion: Automated systems delete data when retention periods expire
- Notification Systems: We receive alerts when data is approaching deletion dates
- Verification Processes: Manual verification before deletion of critical records
- Backup Purging: Deleted data is also removed from all backup systems
Data Lifecycle Monitoring:
- Regular Audits: Quarterly reviews of all retained data to ensure compliance with retention schedules
- Classification Systems: All data is classified by type and tagged with appropriate retention periods
- Access Restrictions: Older data has progressively restricted access as it approaches deletion
- Anonymization: Where possible, old data is anonymized rather than deleted to preserve analytical value
7.4 Your Deletion Rights and Requests
You have significant control over your data retention:
How to Request Deletion:
- Simple Process: Email us at support@complyquick.in with your deletion request
- Identity Verification: We’ll verify your identity to ensure we’re responding to the correct person
- Scope Clarification: We’ll confirm exactly what data you want deleted and explain any limitations
- Timeline Commitment: Most deletion requests are processed within 30 days
Limitations on Deletion:
- Legal Requirements: Some data must be retained by law (tax records, audit trails, regulatory filings)
- Active Transactions: Data related to ongoing DSC applications cannot be deleted until completion
- Dispute Resolution: Information may be retained if there are pending legal matters or disputes
- CA Requirements: Some information must be retained to comply with Certifying Authority obligations
What Happens After Deletion:
- Secure Deletion: Data is securely overwritten using industry-standard deletion methods
- Backup Removal: Deleted data is also removed from all backup systems within 90 days
- Confirmation: You’ll receive written confirmation when deletion is complete
- Irreversibility: Once deleted, data cannot be recovered, so we’ll confirm your request before proceeding
8. Your Rights and Choices – Empowering You to Control Your Data
At ComplyQuick, we believe that your personal information belongs to you, and you should have meaningful control over how it’s used. We’ve designed our systems and processes to make it as easy as possible for you to exercise your rights and make informed choices about your data.
8.1 Understanding Your Rights
Under Indian data protection laws, particularly the SPDI Rules and IT Act, you have several important rights regarding your personal information:
Fundamental Principles:
- Transparency: You have the right to know what data we collect and how we use it
- Control: You can make choices about how your data is processed
- Accuracy: You can ensure your information is correct and up-to-date
- Portability: You can obtain copies of your data in a usable format
- Deletion: You can request removal of your data (subject to legal limitations)
8.2 Your Access Rights – Know What We Know
You have the right to access your personal information and understand how we’re processing it:
What You Can Request:
- Complete Data Report: A comprehensive report of all personal information we hold about you
- Processing Activities: Details about how we use your data, who we share it with, and why
- Data Sources: Information about where we obtained your data
- Retention Periods: How long we plan to keep your information
- Third-Party Sharing: Complete list of organizations that have received your data
How to Request Access:
- Email Us: Send your request to support@complyquick.in with “Data Access Request” in the subject line
- Identity Verification: We’ll verify your identity using information from your account
- Specific Requests: Let us know if you want specific categories of data or all information
- Timeline: We’ll provide your data within 30 days of verification
- Format: Data will be provided in a secure, readable format (PDF or secure portal access)
No Cost to You:
- Free Access: Your first access request each year is completely free
- Additional Requests: Subsequent requests may incur a nominal administrative fee (₹500 maximum)
- Complex Requests: Extensive requests may take up to 45 days to fulfill
8.3 Your Correction Rights – Keep Your Information Accurate
Accuracy is crucial for DSC services, so we make it easy for you to keep your information current:
What You Can Correct:
- Personal Details: Name, address, phone number, email address
- Professional Information: Job title, company details, business address
- Preferences: Communication preferences, service preferences
- Supporting Documents: Updated versions of identity or business documents
How to Make Corrections:
- Online Account: Log into your account and update information directly
- Email Updates: Send corrections to support@complyquick.in with supporting documentation
- Phone Support: Call our customer service team during business hours
- Document Updates: Submit new versions of documents through our secure portal
Verification Process:
- Document Verification: Significant changes may require supporting documentation
- Identity Confirmation: We may need to verify your identity for security purposes
- CA Notification: Some changes may need to be communicated to relevant Certifying Authorities
- Confirmation: You’ll receive confirmation once corrections are made
8.4 Your Deletion Rights – The Right to Be Forgotten
You have the right to request deletion of your personal information in certain circumstances:
When You Can Request Deletion:
- Service Completion: After your DSC service is complete and retention period expires
- Consent Withdrawal: If you withdraw consent for data processing
- Unlawful Processing: If we’ve processed your data without proper legal basis
- No Longer Necessary: If the data is no longer needed for the original purpose
Limitations on Deletion:
- Legal Obligations: We must retain some data to comply with laws (typically 7 years for financial records)
- Ongoing Transactions: Active DSC applications require data retention until completion
- Dispute Resolution: Data may be retained if there are pending legal matters
- Legitimate Interests: Some data may be retained for fraud prevention or security purposes
Deletion Process:
- Written Request: Email your deletion request to support@complyquick.in
- Scope Discussion: We’ll explain what can be deleted and what must be retained
- Confirmation: You’ll need to confirm your request after understanding the implications
- Secure Deletion: Approved data is securely deleted from all systems within 30 days
- Verification: You’ll receive written confirmation when deletion is complete
8.5 Your Consent Management Rights
For processing based on your consent, you have additional rights:
Consent Withdrawal:
- Marketing Communications: Unsubscribe from promotional emails or SMS at any time
- Optional Services: Opt out of non-essential services like surveys or feedback requests
- Data Sharing: Withdraw consent for data sharing with specific partners (where legally permissible)
- Future Processing: Prevent future processing for certain purposes
How to Manage Consent:
- Email Preferences: Use unsubscribe links in our emails
- Account Settings: Manage preferences through your online account
- Direct Contact: Email us at support@complyquick.in
- Phone Support: Call our customer service team
8.6 How to Exercise Your Rights – Making It Simple
We’ve streamlined the process to make exercising your rights as simple as possible:
Step-by-Step Process:
- Contact Us: Email support@complyquick.in or call our customer service line
- Specify Your Request: Clearly state what right you want to exercise and what specific action you want
- Identity Verification: We’ll verify your identity to protect your privacy
- Processing: We’ll process your request and keep you informed of progress
- Completion: You’ll receive confirmation when your request is fulfilled
What We Need from You:
- Clear Request: Specify exactly what you want (access, correction, deletion, etc.)
- Identity Proof: Government-issued ID matching your account information
- Account Details: Information to help us locate your records quickly
- Specific Details: For corrections, provide the exact changes you want made
Our Response Timeline:
- Acknowledgment: We’ll acknowledge your request within 24 hours
- Processing: Most requests are completed within 15-30 days
- Complex Requests: Extensive requests may take up to 45 days
- Updates: We’ll keep you informed of progress throughout the process
No Retaliation Policy:
- Service Continuity: Exercising your rights will not affect the quality of service you receive
- No Penalties: There are no fees or penalties for exercising your legitimate rights
- Respect: We respect your choices and will never pressure you to withdraw requests
9. Cookies and Tracking Technologies – Understanding How We Enhance Your Experience
We want to be completely transparent about how we use cookies and similar technologies on our website. These small pieces of technology help us provide you with a better, more personalized experience while also helping us understand how to improve our services. Let’s break down exactly what we use and why, in plain language.
9.1 What Are Cookies and Why Do We Use Them?
Think of cookies as your website’s memory—they help our site remember your preferences and provide a smoother experience:
Essential Cookies (Always Active): These cookies are necessary for our website to function properly and cannot be disabled:
- Security Cookies: Protect against fraud and unauthorized access to your account
- Session Cookies: Remember you’re logged in as you move between pages
- Authentication Cookies: Verify your identity when you access secure areas
- Load Balancing Cookies: Ensure optimal website performance by distributing traffic
- Error Tracking Cookies: Help us identify and fix technical issues quickly
Functional Cookies (With Your Permission): These cookies enhance your experience by remembering your preferences:
- Language Preferences: Remember your preferred language and regional settings
- Form Data: Save information you’ve entered in forms (except sensitive data)
- Accessibility Settings: Remember your accessibility preferences for visual or audio needs
- Theme Preferences: Maintain your choice of light or dark theme
- Recent Searches: Help you quickly find DSC types you’ve previously looked at
Analytics Cookies (With Your Consent): These help us understand how our website is used so we can improve it:
- Usage Analytics: Track which pages are most visited and helpful
- Performance Monitoring: Identify slow-loading pages and technical issues
- User Journey Analysis: Understand how users navigate through the DSC application process
- Error Tracking: Identify and fix problems that users encounter
- Feature Usage: Understand which features are most valuable to our users
Marketing Cookies (Only With Your Explicit Consent): These cookies help us provide relevant information and services:
- Interest Tracking: Show you information about DSC types that match your interests
- Engagement Measurement: Understand which content is most helpful
- Retargeting Cookies: Show relevant information when you visit other websites
- Social Media Integration: Enable sharing features for social platforms
9.2 Detailed Cookie Information
Here’s a comprehensive breakdown of the specific cookies we use:
First-Party Cookies (Set by ComplyQuick):
- Session ID: Maintains your login session securely
- CSRF Token: Protects against cross-site request forgery attacks
- User Preferences: Stores your language, theme, and accessibility settings
- Application Progress: Remembers where you left off in DSC applications
- Security Flags: Tracks authentication status and security settings
Third-Party Cookies (Set by Our Partners):
- Google Analytics: Provides website usage statistics and user behavior insights
- Payment Gateway Cookies: Secure payment processing (from authorized payment processors)
- reCAPTCHA: Protects against spam and automated attacks
- Customer Support Chat: Enables our live chat functionality
- SSL Certificate Verification: Ensures secure connection to our servers
Cookie Lifespan:
- Session Cookies: Deleted when you close your browser
- Persistent Cookies: Remain for specific periods:
- Security cookies: 30 days
- Preference cookies: 1 year
- Analytics cookies: 2 years (anonymized after 14 months)
- Marketing cookies: 90 days (where consented)
9.3 Your Cookie Choices and Control
You have complete control over how cookies are used on your device:
Browser-Level Controls:
- Block All Cookies: Most browsers allow you to block all cookies
- Accept Only First-Party: You can allow only cookies from our website
- Prompt for Each Cookie: Set your browser to ask permission for each cookie
- Delete Existing Cookies: Clear all existing cookies from your browser
- Incognito/Private Browsing: Use private browsing mode to avoid storing cookies
Our Cookie Management Tools:
- Cookie Consent Banner: Choose your preferences when you first visit our site
- Privacy Settings: Access cookie preferences through your account settings
- Granular Control: Choose specific types of cookies you want to allow
- Easy Opt-Out: Change your mind anytime through our privacy center
- Mobile Options: Manage cookies on mobile devices through app settings
Impact of Disabling Cookies: We want you to understand what happens if you choose to disable cookies:
- Essential Cookies: Disabling these may prevent login and core functionality
- Functional Cookies: You may need to re-enter preferences on each visit
- Analytics Cookies: Won’t affect your experience, but limits our ability to improve
- Marketing Cookies: You may see less relevant information and offers
9.4 Other Tracking Technologies We Use
Beyond cookies, we use several other technologies to improve your experience:
Web Beacons (Pixel Tags):
- Email Tracking: Help us understand if our emails are helpful and relevant
- Page Performance: Monitor how quickly pages load for different users
- Error Detection: Automatically detect and report technical issues
- Security Monitoring: Identify suspicious activities and potential threats
Local Storage:
- Application Data: Store DSC application progress locally for faster access
- User Preferences: Maintain settings without sending data to our servers
- Offline Functionality: Allow certain features to work without internet connection
- Performance Optimization: Cache frequently accessed data for faster loading
Fingerprinting and Device Recognition:
- Fraud Prevention: Identify potentially fraudulent activities
- Security Enhancement: Recognize your trusted devices for faster login
- Personalization: Provide device-appropriate user interfaces
- Technical Support: Identify device-specific issues and provide relevant help
9.5 Third-Party Tracking and Your Privacy
We work with trusted partners who may also use tracking technologies:
Our Partner Selection Criteria:
- Privacy Compliance: All partners must meet strict privacy standards
- Data Minimization: Partners can only collect data necessary for their services
- Consent Requirements: Partners must respect your cookie preferences
- Transparency: Partners must clearly explain their data practices
- Security Standards: Partners must maintain appropriate security measures
How to Opt Out of Third-Party Tracking:
- Industry Opt-Out Tools: Use tools like the Digital Advertising Alliance opt-out
- Browser Privacy Settings: Enable “Do Not Track” in your browser settings
- Direct Opt-Out: Contact third-party services directly to opt out
- Ad Blockers: Use reputable ad-blocking software to limit tracking
- Privacy-Focused Browsers: Consider browsers designed for enhanced privacy
10. Third-Party Links and Services – Navigating Beyond Our Platform
Your journey with ComplyQuick often involves interacting with various third-party services, from Certifying Authority portals to payment gateways. We want to ensure you understand exactly what happens when you venture beyond our platform and how to protect your privacy throughout the entire process.
10.1 Types of Third-Party Services You’ll Encounter
During your DSC journey, you may interact with several categories of external services:
Certifying Authority Portals: When you apply for a DSC, you’ll be directed to your chosen CA’s portal for certain processes:
- eMudhra Portal: For Class 2 and Class 3 DSCs, including video verification and document submission
- VSign Platform: For individual and organizational certificates, including token-based solutions
- PantaSign Interface: For affordable DSC options with streamlined application processes
- Capricorn Systems: For comprehensive DSC services across various professional categories
- Other Licensed CAs: As authorized by the Controller of Certifying Authorities
What Happens on CA Portals:
- Direct Data Submission: You’ll enter information directly into their systems
- Document Upload: Upload identity and supporting documents to their secure servers
- Video Verification: Complete live video verification sessions with CA representatives
- Certificate Download: Receive your digital certificate directly from their platform
- Technical Support: Access CA-specific technical support and troubleshooting
Payment and Financial Services: We use trusted payment partners to process your transactions securely:
- Payment Gateways: Razorpay, PayU, CCAvenue, and other RBI-authorized payment processors
- Banking Interfaces: Direct integration with major Indian banks for net banking
- Digital Wallets: Paytm, PhonePe, Google Pay, and other UPI-enabled services
- International Payments: PayPal and other services for international customers
- EMI Partners: Financial institutions offering installment payment options
Government and Regulatory Portals: Some DSC applications require interaction with government platforms:
- Income Tax Portal: For tax-related DSC applications and verification
- GST Portal: For business-related DSC requirements
- MCA Portal: For company-related DSC applications
- Banking Regulatory Portals: For financial sector DSC requirements
- Professional Body Portals: For profession-specific DSC applications
Support and Communication Services: We integrate with various services to provide comprehensive support:
- Customer Support Platforms: Zendesk, Freshdesk, or similar customer service tools
- Communication Services: WhatsApp Business, SMS gateways, email services
- Video Conferencing: Zoom, Google Meet, or other platforms for customer support
- Document Verification: Third-party services for document authenticity checks
- Translation Services: For customers who need assistance in regional languages
10.2 How We Protect You During Third-Party Interactions
We take several measures to ensure your safety when interacting with third-party services:
Vetting and Due Diligence:
- Security Assessments: We thoroughly evaluate the security practices of all partners
- Privacy Policy Reviews: We ensure partners have appropriate privacy protections
- Compliance Verification: We confirm partners meet relevant regulatory requirements
- Regular Audits: We periodically review partner practices and security measures
- Incident Response: We have procedures to address any security issues with partners
Data Sharing Safeguards:
- Minimum Necessary: We share only the data required for the specific service
- Purpose Limitation: Data shared with partners can only be used for agreed purposes
- Retention Limits: We specify how long partners can retain your information
- Deletion Requirements: Partners must delete your data when no longer needed
- Access Controls: Partners must implement appropriate access restrictions
Contractual Protections:
- Data Processing Agreements: Formal contracts governing how partners handle your data
- Confidentiality Clauses: Legal obligations to maintain the confidentiality of your information
- Security Requirements: Mandatory security standards that partners must maintain
- Breach Notification: Requirements for partners to notify us of any security incidents
- Audit Rights: Our right to audit partner security practices and compliance
10.3 What You Need to Know About Third-Party Privacy Practices
Each third-party service has its own privacy policy and data practices:
Certifying Authority Privacy Practices:
- Independent Policies: Each CA has its own privacy policy that governs their data collection and use
- Regulatory Compliance: CAs must comply with Controller of Certifying Authorities guidelines
- Data Retention: CAs may have different retention periods based on regulatory requirements
- International Transfers: Some CAs may transfer data internationally for processing
- User Rights: Your rights may vary depending on the specific CA’s policies
Payment Processor Privacy:
- PCI DSS Compliance: All payment processors must comply with Payment Card Industry standards
- Transaction Data: Payment processors collect transaction information for processing and fraud prevention
- Financial Regulations: Payment processors are subject to RBI and other financial regulations
- International Standards: Many processors follow international privacy standards
- Data Sharing: Payment processors may share data with banks and financial institutions
Government Portal Privacy:
- Official Policies: Government portals have their own privacy policies and data practices
- Regulatory Purpose: Government agencies collect data for specific regulatory purposes
- Legal Authority: Government data collection is typically based on legal authority
- Retention Periods: Government agencies may have specific retention requirements
- Access Rights: Your rights regarding government-held data may be governed by different laws
10.4 Your Responsibilities and Best Practices
While we provide guidance and protection, you also play a crucial role in maintaining your privacy:
Before Sharing Information:
- Read Privacy Policies: Always review the privacy policy of third-party services before providing information
- Check Security Indicators: Look for SSL certificates and security indicators (lock icon in browser)
- Verify Authenticity: Ensure you’re on the legitimate website by checking the URL carefully
- Understand Purposes: Make sure you understand why the third party needs your information
- Limit Information: Provide only the information that’s necessary for the service
During Third-Party Interactions:
- Use Secure Connections: Always use secure, private internet connections
- Avoid Public WiFi: Don’t enter sensitive information on public or unsecured networks
- Log Out Properly: Always log out of third-party services when you’re finished
- Monitor Activities: Keep track of what information you’ve shared and with whom
- Save Documentation: Keep records of your interactions and transactions
After Third-Party Interactions:
- Monitor Accounts: Regularly check your accounts for any unauthorized activities
- Review Statements: Check payment statements and transaction records
- Update Information: Keep your information current with all relevant services
- Report Issues: Immediately report any suspicious activities or privacy concerns
- Exercise Rights: Use your rights to access, correct, or delete information where appropriate
10.5 When Things Go Wrong – Getting Help and Support
If you encounter problems with third-party services, here’s how we can help:
Immediate Support:
- Contact Us First: Reach out to our customer support team for guidance and assistance
- Escalation Procedures: We can escalate issues to our partner contacts for faster resolution
- Alternative Solutions: We may be able to suggest alternative approaches or services
- Documentation Assistance: We can help you document issues for complaints or disputes
- Regulatory Guidance: We can provide information about relevant regulatory authorities
Partner Accountability:
- Performance Monitoring: We monitor partner performance and address recurring issues
- Contract Enforcement: We can enforce contractual obligations regarding service quality
- Partner Replacement: In cases of persistent problems, we may switch to alternative partners
- Feedback Integration: We use customer feedback to improve partner selection and management
- Continuous Improvement: We regularly review and improve our third-party relationships
Your Recourse Options:
- Direct Complaints: You can file complaints directly with third-party services
- Regulatory Complaints: Report issues to relevant regulatory authorities
- Consumer Forums: Use consumer dispute resolution mechanisms
- Legal Remedies: Pursue legal remedies for serious privacy violations or damages
- Industry Associations: Contact relevant industry associations for dispute resolution
Prevention and Education:
- Regular Updates:
Expanded Privacy Policy Sections 11-15
11. Indemnification and Limitation of Liability
11.1 Understanding Your Responsibility as a User
When you choose to use our Digital Signature Certificate (DSC) services, we want to ensure you understand the nature of our relationship and your responsibilities. We serve as your trusted intermediary, connecting you with authorized Certifying Authorities who are licensed by the Controller of Certifying Authorities (CCA) under the Information Technology Act, 2000.
By engaging with our services, you acknowledge and agree that:
- Our Role as Facilitator: We act as a service facilitator between you and the Certifying Authorities. While we streamline the application process and provide technical support, the final decision regarding DSC issuance rests with the respective Certifying Authority.
- Your Data Accuracy Obligation: You bear the primary responsibility for ensuring that all information, documents, and declarations you provide are accurate, complete, and authentic. This includes personal details, identity documents, and any supporting materials required for DSC application.
- Process Facilitation, Not Guarantee: While we commit to facilitating your DSC application process efficiently and professionally, we cannot guarantee the issuance of your Digital Signature Certificate, as this decision is made independently by the Certifying Authorities based on their verification procedures and compliance requirements.
11.2 Your Agreement to Indemnify Us
To maintain the integrity of our services and protect all parties involved, you agree to indemnify, defend, and hold harmless ComplyQuick Digital Solutions Private Limited, its subsidiaries, affiliates, directors, officers, employees, agents, and representatives from and against any and all claims, liabilities, damages, losses, costs, expenses, or fees (including reasonable attorneys’ fees) that arise from or relate to:
Information-Related Issues:
- Your submission of false, inaccurate, misleading, or incomplete information during the application process
- Any misrepresentation of your identity, credentials, or authorization to apply for a DSC
- Fraudulent use of another person’s information or documents
Authority-Related Matters:
- Delays, rejections, revocations, or suspension of your DSC application or certificate by Certifying Authorities
- Additional verification requirements or compliance issues raised by regulatory bodies
- Changes in regulatory requirements or policies that affect your application
Security and Access Issues:
- Unauthorized access to your account or information due to your failure to maintain account security
- Data breaches or security incidents that occur due to your negligence or sharing of login credentials
- Compromise of your DSC due to inadequate safeguarding on your part
Legal and Regulatory Violations:
- Your violation of this Privacy Policy, Terms of Service, or any applicable laws and regulations
- Your use of the DSC for illegal or unauthorized purposes
- Any third-party claims arising from your use of our services or your DSC
11.3 Limitation of Our Liability
Understanding the limitations of liability helps set clear expectations about our responsibilities and yours:
Scope of Limitation: Our total liability to you for any and all claims arising from or related to our services shall be limited to the maximum extent permitted under applicable Indian law, including but not limited to the Indian Contract Act, 1872, and the Consumer Protection Act, 2019.
Specific Limitations:
- Third-Party Actions: We are not liable for actions, decisions, delays, or failures by Certifying Authorities, government agencies, or other third-party service providers
- Technical Issues: Our liability for technical disruptions, system maintenance, or force majeure events is limited to reasonable efforts to restore services
- Consequential Damages: We shall not be liable for any indirect, incidental, special, consequential, or punitive damages, including but not limited to loss of profits, data, or business opportunities
Reasonable Care Standard: We commit to exercising reasonable care and skill in providing our services, consistent with industry standards and regulatory requirements applicable to DSC intermediaries in India.
12. International Data Transfers and Cross-Border Processing
12.1 Our Commitment to Data Protection Across Borders
In today’s interconnected digital world, we recognize that certain aspects of our service delivery may involve the transfer or processing of your personal information outside India. We are committed to ensuring that any such transfers are conducted with the highest standards of data protection.
12.2 Legal Framework for International Transfers
Our international data transfer practices are governed by the Digital Personal Data Protection Act, 2023, which allows transfer of personal data outside India, except to countries specifically restricted by the central government through notification. We continuously monitor the list of restricted countries as notified by the Government of India to ensure compliance.
12.3 Safeguards and Protection Measures
When transferring your personal data internationally, we implement appropriate safeguards including:
Contractual Protections:
- Standard contractual clauses approved by Indian regulatory authorities
- Data processing agreements with international service providers
- Binding corporate rules for intra-group transfers
Technical and Organizational Measures:
- End-to-end encryption during data transmission
- Secure data storage protocols in compliance with international standards
- Regular security audits of international service providers
Ongoing Monitoring:
- Continuous assessment of data protection laws in recipient countries
- Regular review of transfer mechanisms and safeguards
- Immediate cessation of transfers if adequate protection cannot be ensured
12.4 Your Rights Regarding International Transfers
You have the right to:
- Be informed about any international transfers of your personal data
- Object to transfers that do not meet adequate protection standards
- Request information about the safeguards in place for international transfers
- Withdraw consent for transfers where applicable
13. Grievance Redressal and Support Mechanism
13.1 Our Commitment to Addressing Your Concerns
We believe that transparent and effective grievance redressal is fundamental to maintaining trust and ensuring your satisfaction with our services. Our grievance mechanism is designed to address your concerns promptly, fairly, and in accordance with Indian regulatory requirements.
13.2 Appointment of Grievance Officer
In compliance with Rule 5(9) of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, we have designated a Grievance Officer who shall redress grievances expeditiously within one month from the date of receipt.
Grievance Officer Details:
- Name: [To be filled – Grievance Officer Name]
- Designation: Chief Privacy Officer and Grievance Redressal Head
- Email: grievance@complyquick.in
- Phone: [To be filled – Direct Contact Number]
- Address: [To be filled – Complete Business Address with PIN Code]
- Business Hours: Monday to Friday, 9:00 AM to 6:00 PM (IST)
13.3 Types of Grievances We Address
Our grievance mechanism covers a comprehensive range of concerns including:
Privacy and Data Protection Issues:
- Unauthorized collection, use, or disclosure of your personal information
- Concerns about data accuracy, completeness, or retention
- Requests for data correction, deletion, or portability
- Issues related to consent management and withdrawal
Service Delivery Concerns:
- Delays in application processing or status updates
- Technical issues with our platform or services
- Billing or payment-related disputes
- Quality of customer support received
Regulatory Compliance Matters:
- Violations of this Privacy Policy or Terms of Service
- Non-compliance with applicable data protection laws
- Concerns about our security practices or data handling
13.4 How to File a Grievance
Step 1: Initial Contact
- Submit your grievance via email to grievance@complyquick.in
- Call our Grievance Officer directly during business hours
- Use the grievance form available on our website
- Send a written complaint to our registered address
Step 2: Information to Include
- Your full name and contact information
- Account details or reference number (if applicable)
- Detailed description of your concern or complaint
- Any supporting documents or evidence
- Your expected resolution or outcome
Step 3: Acknowledgment and Tracking
- We will acknowledge receipt of your grievance within 24 hours
- You will receive a unique grievance reference number for tracking
- Our team will begin investigation immediately upon acknowledgment
13.5 Our Resolution Process and Timeline
Investigation Phase (Days 1-15):
- Detailed review of your complaint and supporting evidence
- Internal investigation involving relevant departments
- Consultation with legal and compliance teams if required
- Communication with you for additional information if needed
Resolution Phase (Days 16-30):
- Formulation of appropriate resolution based on investigation findings
- Internal approval of proposed resolution
- Communication of resolution to you with detailed explanation
- Implementation of corrective measures where applicable
Follow-up Phase (Days 31-45):
- Monitoring of implemented solutions
- Follow-up communication to ensure satisfaction
- Documentation of lessons learned for process improvement
13.6 Escalation and External Remedies
If you are not satisfied with our resolution:
Internal Escalation:
- Request escalation to our Chief Executive Officer
- Seek review by our Board of Directors if necessary
External Remedies:
- File a complaint with the appropriate regulatory authority
- Seek legal remedies under applicable consumer protection laws
- Contact relevant industry associations or ombudsman services
14. Updates and Modifications to This Privacy Policy
14.1 Our Approach to Policy Evolution
We recognize that privacy and data protection is an evolving field, influenced by changes in technology, regulatory requirements, business practices, and user expectations. Our commitment is to maintain a Privacy Policy that remains current, comprehensive, and protective of your interests.
14.2 Circumstances Requiring Policy Updates
We may modify this Privacy Policy to reflect:
Regulatory Changes:
- New data protection laws or amendments to existing legislation
- Regulatory guidance or orders from competent authorities
- Changes in international data transfer requirements
- Industry-specific compliance requirements for DSC services
Business Evolution:
- Introduction of new services or features
- Changes in our data processing activities or purposes
- Adoption of new technologies or service providers
- Corporate restructuring or business model changes
Enhanced Protection:
- Implementation of additional security measures
- Expansion of user rights and choices
- Improvement in transparency and accountability measures
- Incorporation of best practices and industry standards
14.3 Our Notification Process
Material Changes: For significant modifications that may affect your rights or our data processing activities, we will:
- Send personalized email notifications to all registered users at least 30 days before implementation
- Display prominent notices on our website homepage and user dashboard
- Provide clear summaries of key changes in plain language
- Offer opportunities for you to ask questions or provide feedback
Minor Updates: For technical corrections, clarifications, or minor administrative changes:
- Update the “Last Modified” date at the top of this Privacy Policy
- Maintain a change log documenting all modifications
- Include brief explanations of changes in our regular communications
14.4 Your Options Following Policy Updates
Acceptance: Continued use of our services after the effective date of policy changes constitutes your acceptance of the revised Privacy Policy.
Objection: If you disagree with material changes:
- Contact our Grievance Officer to discuss your concerns
- Exercise your right to data portability if you wish to switch services
- Request account closure and data deletion in accordance with our retention policies
Clarification:
- Reach out to our customer support team for explanations of any changes
- Schedule a consultation with our privacy team for detailed discussions
- Access our FAQ section for commonly asked questions about policy updates
15. Contact Information and Support Channels
15.1 Multiple Ways to Connect With Us
We believe that accessible communication is essential for building trust and providing excellent service. We offer multiple channels for you to contact us based on your preference and the nature of your inquiry.
15.2 Primary Contact Information
ComplyQuick DSC Services(Utility Spider LLP)
Corporate Office:
- Address: Kad-001, Shipra Srishti, Indirapuram, Ghaziabad-201014
- Phone: +91-8368817630
- Email: support@complyquick.in
- Website: https://dsc.complyquick.in
Business Hours:
- Monday to Friday: 10:00 AM to 6:00 PM (Indian Standard Time)
- Saturday: 10:00 AM to 2:00 PM (Indian Standard Time)
- Sunday and Public Holidays: Closed (Emergency support available via email)
15.3 Specialized Contact Channels
For Privacy and Data Protection Inquiries:
- Email: info@complyquick.in
- Dedicated Phone Line: +91-8368817630
- Response Time: Within 48 hours during business days
For Grievances and Complaints:
- Email: support@complyquick.in
- Direct Line: +91-8368817630
- Response Time: Acknowledgment within 24 hours
For Technical Support:
- Email: info@complyquick.in
- WhatsApp Support: +91-8368817630
- Live Chat: Available on our website during business hours
- Response Time: Within 4 hours during business days
For Business Partnerships and Collaborations:
- Email: connect@complyquick.in
- Phone: +91-8368817630
15.4 Service Level Commitments
Response Times:
- Email Inquiries: Initial response within 4 hours during business days
- Phone Calls: Immediate assistance during business hours, callback within 2 hours if missed
- Live Chat: Real-time support during business hours
- Grievances: Acknowledgment within 24 hours, resolution within 30 days
Quality Standards:
- Professional and courteous communication in English and Hindi
- Accurate and comprehensive information in all responses
- Escalation to specialized teams when required
- Follow-up communication to ensure satisfaction
15.5 Legal and Jurisdictional Information
Governing Law: This Privacy Policy and all related matters are governed by the laws of India, including but not limited to:
- The Information Technology Act, 2000 and rules thereunder
- The Digital Personal Data Protection Act, 2023
- The Indian Contract Act, 1872
- The Consumer Protection Act, 2019
Jurisdiction: Any disputes arising out of or in connection with this Privacy Policy shall be subject to the exclusive jurisdiction of the courts in [To be filled – Jurisdiction city], India.
Regulatory Oversight: Our operations are subject to oversight by:
- Controller of Certifying Authorities (CCA)
- Ministry of Electronics and Information Technology, Government of India
- Relevant consumer protection authorities
15.6 Accessibility and Language Support
Language Support:
- Primary communication in English
- Hindi language support available upon request
- Regional language assistance for specific queries
Accessibility Features:
- Website accessibility compliance with WCAG 2.1 guidelines
- Large print versions of documents available upon request
- Audio support for visually impaired customers
Special Assistance:
- Dedicated support for senior citizens and differently-abled customers
- Video calling support for complex technical issues
- Document pickup and delivery services in select locations
Important Note: This Privacy Policy reflects our commitment to protecting your personal information and providing transparent communication about our data practices. By using our services, you acknowledge that you have read, understood, and agree to be bound by the terms of this Privacy Policy as updated from time to time. Your continued use of our services constitutes acceptance of any modifications to this policy.