PRIVACY POLICY

This Privacy Policy ("Policy") outlines Bharat eSign part of TeziPay Tech Solution Pvt. Ltd. ("Bharat eSign", "we", "us" or "our") practices in relation to the storage, use, processing, and disclosure of personal data that you have chosen to share when you access our website or mobile application ("Platform") or personal data that we may have access to in relation to your use of the Platform's offerings and features (the Platform and all offerings and services available through the Platform are collectively referred to as the "Services").

At Bharat eSign, we are committed to protecting your personal data and respecting your privacy. Please read the following terms of the Policy carefully to understand our practices regarding your personal data and how we will treat it. This Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us.

Capitalised words in the Policy shall have the same meaning as ascribed to them in the Master Terms and Conditions ("Master Terms"), available on Bharat eSign's Platform. Please read this Policy in consonance with the Terms.

By using the Platform, you consent to the collection, storage, use, and disclosure of your personal data in accordance with and are agreeing to be bound by this Policy.

BACKGROUND AND KEY INFORMATION

How this Policy applies:

We may process personal data of individuals on behalf of companies or other organisations that you work for or otherwise represent. In such cases, we act as such companies' or organisations' processor, and process your personal data on the basis of their instructions. Please review their respective privacy notices to understand how your personal data is handled. In this Policy, references to "you" and "your" are to you, an individual who is an end user of the Platform.

Review and Updates:

We regularly review and update our Policy, and we request you to regularly review this Policy. It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.

Third-Party Services:

The Services may include links to third-party websites, plug-ins, features, services, and applications ("Third-Party Services"). Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these Third-Party Services and are not responsible for their privacy statements. When you leave the Platform or access third-party links through the Services, we encourage you to read the privacy policy of such third-party service providers.

THE DATA WE COLLECT ABOUT YOU

The information generated during your use of the Services may be categorised in the following manner:

Personal data: This category includes data that can directly or indirectly (for example, in combination with other categories of data) identify you. It does not include aggregated or anonymised data or information.

Non-personal data: This category includes data that cannot directly or indirectly identify you. For example, we also collect, use, and share aggregated data such as statistical or analytical data solely for internal operations. Aggregated data could be derived from your personal data but is not considered personal data under applicable laws. For example, we may aggregate your usage data to calculate the percentage of users accessing a specific feature of the Services. Please note that this Policy does not apply to our use of any non-personal data.

We collect, including but not limited to, the following types of personal data:

Identity and Profile Data, such as your name, date of birth, gender, marital status, Aadhar number, PAN details, designation, payroll details and driving licence details.

Contact Data, such as your mobile number, email ID, residential address, and pin code.

Marketing and Communications Data, such as your address, email address, information posted in service requests, offers, wants, feedback, comments, pictures and discussions in our blog and chat boxes, responses to user surveys and polls, your preferences in receiving marketing communications from us and our third parties, and your communication preferences.

Technical Data, which includes your IP address, browser type, internet service provider, details of operating system, access time, page views, device ID, device type, frequency of use of the Platform, website and mobile application activity, clicks, date and time stamps, location data, and other technology on the devices that you use to access the Platform.

Transaction Data, such as details of the Services you have availed.

Usage Data, which includes information about how you use the Services, your activity on the Platform, user taps and clicks, user interests, time spent on the Platform, details about user journey on the mobile application, and page views.

HOW DO WE COLLECT PERSONAL DATA?

We use different methods to collect personal data from and about you including through:

Direct Interactions. You provide us your personal data when you interact with us. This includes personal data you provide when you:

use our Services or carry out other activities in connection with the Services;

enter a promotion, user poll, or online surveys;

request marketing communications to be sent to you; or

report a problem with the Platform and/or our Services, give us feedback, or contact us.

Automated Technologies or Interactions. Each time you visit the Platform or use the Services, we will automatically collect technical data about your equipment, browsing actions, and patterns. We collect this personal data by using cookies, web beacons, pixel tags, server logs, and other similar technologies. We may also receive such data about you if you visit other websites or apps that employ our cookies.

Third Parties or Publicly Available Sources. We will receive personal data about you from various third parties and public sources, including but not limited to our third party partners, Google analytics for advertising and user analytics purposes, and other publicly available sources.

What happens if I refuse to provide my personal data?

Where we need to collect personal data by law, or under the terms of a contract (such as the Terms), and you fail to provide that data when requested, we may not be able to perform the contract (for example, to provide you with the Services). In this case, we may have to cancel or limit your access to the Services, but we will notify you if this is the case at the time.

HOW DO WE USE YOUR PERSONAL DATA?

We collect, use, and transfer the personal data about you in accordance with the terms of this Policy to enable you to avail our Services.

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data where we need to provide you with the Services or where we need to comply with a legal obligation. We use your personal data for the following purposes:

to verify your identity in order to provide you Services;

to provide the Services to you;

to monitor trends and personalise your experience;

to improve the functionality of our Services based on the information and feedback we receive from you;

to improve customer service to effectively respond to your Service requests and support needs;

to send periodic notifications to manage our relationship with you including to notify you of changes to Services, send you information and updates pertaining to the Services you have availed, and to receive occasional company news and updates related to us or the Services;

to market and advertise our Services to you;

to comply with legal obligations;

to administer and protect our business and the Services, including for troubleshooting, data analysis, system testing, and performing internal operations;

to improve our business and delivery models;

to perform our obligations that arise out of the arrangement we are about to enter or have entered with you;

to enforce our Terms; and

to respond to court orders, establish or exercise our legal rights, or defend ourselves against legal claims.

You agree and acknowledge that by using our Services with us on the Platform, you authorise us, our associate partners, and affiliates to contact you via email, phone, or otherwise. This is to provide the Services to you and ensure that you are aware of all the features of the Services and for related purposes.

You agree and acknowledge that any and all information pertaining to you, whether or not you directly provide it to us (via the Services or otherwise), including but not limited to personal correspondence such as emails, instructions from you, etc., may be collected, compiled, and shared by us in order to render the Services to you. This may include but not be limited to our lenders, vendors, social media companies, third-party service providers, storage providers, data analytics providers, consultants, lawyers, and auditors. We may also share this information with other entities in the Bharat eSign group in connection with the above-mentioned purposes.

You agree and acknowledge that we may share data without your consent, when it is required by law or by any court or government agency or authority to disclose such information. Such disclosures are made in good faith and belief that it is reasonably necessary to do so for enforcing this Policy or the Terms, or in order to comply with any applicable laws and regulations.

COOKIES

Cookies are small files that a site or its service provider transfers to your device's hard drive through your web browser (if you permit it to) that enables the sites or service providers' systems to recognise your browser and capture and remember certain information.

We use cookies to help us distinguish you from other users of the Platform, understand and save your preferences for future visits, keep track of advertisements and compile aggregate data about site traffic and site interaction so that we can offer you a seamless user experience. We may contact third-party service providers to assist us in better understanding our site visitors. These service providers are not permitted to use the information collected on our behalf except to help us conduct and improve our business.

Additionally, you may encounter cookies or other similar devices on certain parts of the Platform that are placed by third parties. We do not control the use of cookies by third parties. If you send us personal correspondence, such as emails, or if other users or third parties send us correspondence about your activities or postings on the Platform, we may collect such information within a file specific to you.

DISCLOSURES OF YOUR PERSONAL DATA

We may share your personal data with third parties set out below for the purposes set out in Section 4:

Bharat eSign's affiliates.

External third parties such as:

third parties such as our associate partners, and service providers that provide services for us or on our behalf. This includes hosting and operating our Platform, providing marketing assistance, conducting our business, transmitting content, and providing our Services to you; analytic service providers and advertising networks that conduct web analytics for us to help us improve the Platform, etc. These analytics providers may use cookies and other technologies to perform their services;

third parties upon your request or where you explicitly consent to such disclosure; and

regulators and other bodies, as required by law or regulation, including but not limited to credit information companies.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

DATA RETENTION

You agree and acknowledge that your personal data will continue to be stored and retained by us for a reasonable period after termination of the registered profile on the Platform or access to the Services.

AUTHENTICITY OF INFORMATION

We have taken all reasonable steps to ensure that the information on the Platform is authentic.

You agree that the information and personal data you provide us with are true, correct, and accurate. We shall not be liable for any incorrect or false information or personal data that you might provide.

You may review the information and personal data that you have provided during your use of the Platform and choose to correct or modify such information if it is incorrect. You may do so by writing to us at support@bharatesign.com

DATA SECURITY

We implement certain security measures including encryption and firewalls to protect your personal information from unauthorised access. However, you agree and acknowledge that the above-mentioned measures do not guarantee absolute protection to the personal information and by accessing the Services, you agree to assume all risks associated with disclosure of personal information arising due to breach of firewalls and secure server software.

Where we have given you (or where you have chosen) a password or OTP that enables you to access certain parts of the Services, you are responsible for keeping this password or OTP confidential. We ask you not to share the password or OTP with anyone.

We will comply with the requirements under the Information Technology Act, 2000 and the rules made thereunder in the event of a data or security risk.

You agree and acknowledge that we shall not be liable for:

any information leaked due to computer virus, trojan and hacker attack;

any information divulged on account of you sharing your password, OTP or details of the registered account with others; or

any other such divulgence caused by any reason not directly/indirectly attributable to us.

BUSINESS TRANSITIONS

You are aware that in the event we go through a business transition, such as a merger, acquisition by another organisation, or sale of all or a portion of our assets, your personal data might be among the assets transferred.

CHANGE IN PRIVACY POLICY

We keep our Policy under regular review and may amend this Policy from time to time, subject to the services rendered.

The terms of this Policy may change and if it does, these changes will be posted on this page and, where appropriate, notified to you by email. The new Policy may be displayed on-screen, and you shall be prompted to read and accept the updated policy if you choose to continue using our Services.