Privacy Notice

As per our Privacy Policy, Arrka InfoSec Private Limited (herein after referred to as ‘Arrka’) collects, handles, uses and discloses Personal Data collected from individuals. Arrka’s Data handling practices are continually reviewed to ensure they comply with the The Digital Personal Data Protection Act, 2023”

Definition of Personal Data:

Personal Data means any data about an individual who is identifiable by or in relation to such data like name, email id, address, phone number, IP addresses, device identifiers, location identifiers, etc

Data Collection:

Arrka collects Personal Data either directly or indirectly from individuals.

When an individual uses the “contact us” facility on this website, Name and Email Address is collected.

When an individual visits our website Personal Data about him/her may be collected indirectly through the interaction with the website and may include their session statistics, approximate geolocation, browser and Device Data, device identifiers, browsing patterns (For eg- browser history, browser history events, page changes, scrolls, file downloads, form interactions, video engagement, etc) and sites visited or searched.

This website uses Google Analytics to enhance user experience and services offered by Arrka. For more Data on Personal Data collected by Google Analytics, please visit their website https://support.google.com/analytics/answer/11593727

Personal Data about individuals can also be provided by customers or other third parties when they use Arrka’s products and services or otherwise interact with Arrka.

Data Collection Purpose and Usage:

Arrka collects Personal Data from individuals either for:

1. Enhancing products and services offered by it or

2. Marketing and business development activities. This may be done directly by Arrka or by a party authorised by it for the purpose.

Arrka shall not share the Personal Data collected or any resultant/derived Data or profile built about an individual within Arrka with any third-party marketer or advertiser or data aggregator or any other such entity that may use the given Data for any purpose beyond the purpose of the individual’s interaction with Arrka unless the individual has specifically authorized it.

Disclosure:

Arrka shall not disclose any Personal Data of individuals to third parties. Exception to this is when such disclosure has been consented to by the individual or agreed upon in a contract between Arrka and the individual or where the disclosure is necessary for compliance of a legal obligation.

Disclosure for compliance of legal obligations shall cover agencies mandated under the law to obtain Data for the purpose of verification of identity, or for prevention, detection, investigation including cyber incidents, prosecution, and punishment of offences.

Arrka shall make every effort, where possible, that such mandated disclosures are communicated immediately to the individual.

Individual’s Rights:

· Right to Access of Personal Data:

Upon request by any individual whose Personal Data is processed by Arrka, it shall provide him/her with required Data/summary of Personal Data and other related Data.

· Right to Correction of Personal Data:

Arrka will provide an option to an individual to communicate any change or correction to the Personal Data that the individual has provided to Arrka and ensure that any Personal Data found to be inaccurate or deficient shall be corrected or amended as feasible. Arrka shall not be responsible for the authenticity of the Personal Data provided by an individual.

· Right to Erasure of Personal Data:

Arrka shall erase any Personal Data that the individual has provided, on a request of erasure made by the Individual. Exception to this is that the retention of the Personal Data is necessary for the specified purpose or for compliance with any law for the time being in force

· Right to of Grievance Redressal:

If any individual has any complaint against Arrka’s Personal Data handling practices or exercising Individual rights provided by Arrka under DPDPA, the individual can connect with us via ‘Contact Us’ form to address his/her grievance.

· Right to Nominate:

DPDPA provides individuals with the opportunity to nominate any other individual, who shall, in the event of death or incapacity of the Data Principal, exercise the rights of the Data Principal

To exercise any of the above rights, the individual can write to us via ‘Contact Us’ form.

Data Security:

To protect Personal Data from misuse, loss and authorised access, modification or disclosure, Arrka has implemented reasonable security practices and procedures through Data Security Policies.

Arrka retains and uses all data that is collected during or as a result of any of Arrka products and services for purpose and use as specified in ‘Data Purpose and Usage’ section of this Privacy Notice. Arrka shall take reasonable steps to destroy or permanently de-identify Personal Data that it no longer needs.

Notification of Changes:

Arrka reserves the right to amend its Privacy notice at any time. Any such amendment will be posted on the website. If, at any point, Arrka decides to use Personal Data for a purpose different from that stated at the time it was collected, Arrka will notify the concerned individuals by email. The individuals will have a choice as to whether or not Arrka can use their Data in this different manner. Simultaneously, Arrka reserves the right to discontinue the provision of a service to the individual on such a refusal if the service cannot be provided without the additional purpose requested.

Queries and Complaints:

For any further queries and complaints related to privacy, individuals could reach Arrka at: info@arrka.com.

Arrka will do it’s best to resolve any complaints as quickly as possible.

This policy was last updated on 14th August 2023