1. Introduction and Purpose:
FlaggGRC is a leading provider of comprehensive GRC advisory and Tech-first GRC platforms. GRC encompasses Governance, Risk, and Compliance, which includes corporate, statutory, and regulatory compliance, as well as compliance with internal company SOPs and documents, both within the context of Indian and global laws. FlaggGRC includes FlaggGRC Ventures LLP and FlaggGRC Techlabs LLP, the entities which can be used interchangeably to represent FlaggGRC depending on the services being provided. The Privacy Policy outlines how we collect, use, store and disclose personal data in accordance with The Information Technology Act, 2000 (IT Act) and The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI Rules). By accessing and using our services, including but not limited to our website, tool and related applications, you hereby consent to the collection, use, storage, and disclosure of your personal information as described in this Privacy Policy.
2. Scope:
This Privacy Policy is applicable to our websites https://flagggrc.com/ and https://flagggrc.tech/ and FlaggGRC Tool (hereinafter together referred to as “Properties” operated by FlaggGRC. When you visit our website, you have the option to navigate its pages without providing any personal information. However, we may collect your personal information when you interact with our Properties, utilize our services, or communicate with us.
3. Collection of Personal information:
We may collect various types of personal information, including but not limited to:
- Contact Information such as name, work email address;
- Your contact number in case of such interaction as may be needed for reaching out to you and providing your with our services;
- Information through the use of cookies and similar technologies that help us understand your preferences and improve your experience;
4. How the personal information is used:
The personal information we collect may be used for various purposes, including but not limited to:
- For personalising and enhancing your experience when you use our services and provide information to FlaggGRC during the course of business.
- For communicating with you and responding to your inquiries, requests or feedbacks;
- For sending you updates, promotional materials, newsletters, or other relevant information to enhance your knowledge and keep you informed about our offerings;
- For research and analysis purposes, to improve our services, and to better understand market trends and customer preferences;
- For evaluating and considering your job application, if you choose to apply for a suitable position with FlaggGRC;
- For fulfilling our obligations if mandated by any courts of laws or legal / regulatory authorities.
5. Protection and Storage of personal information:
We employ reasonable security measures to safeguard your personal information against unauthorized access, loss, misuse, or alteration. The personal data described in clause 3 is stored and retained for the duration required by our business needs. Following that, we retain the data for a period of 3 years, in compliance with applicable laws and regulations. During this time, we ensure that your personal information is protected and stored securely.
6. Disclosure of personal information:
We may disclose personal information to third parties only in the following circumstances:
- If we have obtained your explicit consent or if you have specifically directed us to do so;
- If required to comply with applicable laws, regulations, legal processes, or governmental requests. This includes situations where we are legally obligated to disclose information to law enforcement agencies, regulatory authorities, or other government entities;
- If we believe it is necessary to protect the rights, property, or safety of our employees, customers, or the general public. This may include sharing information with legal authorities, legal counsel, or other parties involved in enforcing our rights or addressing potential threats or risks.
7. Your rights and choices:
As the data subject, you have certain rights and choices concerning your personal information. These rights, subject to applicable laws, may include:
- Right to withdraw Consent: You have the right to withdraw your previously given consent for the processing of your personal information by FlaggGRC;
- Right to request erasure: You have the right to request the erasure of your personal data from FlaggGRC's records, which includes opting out of services provided by FlaggGRC and unsubscribing from marketing materials;
- Right to update and rectify: You have the right to update, rectify, edit, or complete any inaccuracies in the personal information held by us;
- Right to data portability: You have the right to obtain information related to your personal information held by FlaggGRC in a structured, commonly used, and machine-readable format; subject to mutual discussion of such format;
- Right to restrict processing: You have the right to request the restriction of further processing of your personal information in certain circumstances, such as when there are accuracy concerns, the processing is no longer necessary, or it is unlawful.
- To exercise these rights or make any requests related to your personal information, please contact us using the contact information provided in the "Contact Us" section below.
- Please note that the availability and scope of these rights may be subject to specific legal requirements and exemptions.
8. Consent:
By accessing and using our Properties, you indicate your consent to the collection, use, and disclosure of your personal information as outlined in this Privacy Policy.
9. Updates to this Privacy Policy:
We may periodically update this Privacy Policy to reflect changes in our practices, legal obligations, or services. When there are significant updates, we will notify you by posting the revised policy on our Properties and update the "last updated" date. We encourage you to review this Policy regularly to stay informed about any changes.
10. Contact us:
If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:
FlaggGRC Ventures LLP
Office no. 35, 2nd floor, Patil Arcade
Off Karve Road, Pune 411003
Phone Number: +918530894440
Email Address: info@flagggrc.com
Last updated version : v1
