Privacy Policy

How AMRU Consultancy collects, uses and protects personal information.

Draft for legal review. This Privacy Policy is a draft prepared for AMRU Consultancy and has not been reviewed by a lawyer. It must be reviewed and approved by qualified legal counsel before publication. Items in [square brackets] need to be confirmed by the company.

Privacy Policy of AMRU Consultancy

Last updated: [date to be added on publication]

1. Introduction

AMRU Consultancy ("AMRU", "we", "us", "our") provides background verification and screening services to employers, recruitment agencies and staffing companies in India. This Privacy Policy explains how we handle personal information when you visit our website, contact us, or when information is processed in the course of our verification services.

We process personal data in accordance with applicable Indian law, including the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the rules and notifications made under it, as and when they are in force and applicable to us. Depending on the context, we may act as a "Data Fiduciary" or as a processor acting on behalf of the client that requested the verification. [legal counsel to confirm AMRU's role for each service]

2. Information We Collect

Information you give us through this website

When you use the contact form, we receive your name, email address, phone number and the message you write. Please do not include sensitive candidate information (such as identity document numbers, certificates or criminal-record details) in the contact form.

Information collected automatically

Like most websites, our web server may process technical information such as IP address, browser type and pages requested, for security and to keep the site running. See "Cookies and Website Analytics" below.

3. Personal and Candidate Information

When a client engages us to verify a candidate, personal information about that candidate is provided to us by the client, by the candidate, or both. Depending on the checks requested, this may include:

  • Identification details such as name, date of birth, contact details and identity documents
  • Address details
  • Education details and certificates
  • Employment history and related documents
  • Information relating to criminal records, where such checks are requested and lawfully available
  • Details of professional references nominated by the candidate

This information is collected through our verification process, not through the public contact form on this website.

4. Purpose of Data Collection

We use personal data only for specified and lawful purposes, namely:

  • To respond to your enquiries and communicate with you about our services
  • To carry out the background verification requested by our client and report the results to that client
  • To maintain the security of our website and systems and to prevent misuse
  • To meet legal, regulatory and contractual obligations, and to establish or defend legal claims

We do not sell personal data.

5. Background Verification and Processing

In carrying out a verification, we may contact educational institutions, previous employers, referees, courts, police or other record-holding bodies, and may use other lawful sources, to confirm the information provided. We collect and share only the information needed for each check, and we report findings to the client that requested the verification. Verification results depend on the records that are available and legally accessible.

Before verification begins, we or the client obtain the candidate's consent or authorization for the checks to be carried out, together with a notice explaining the personal data involved and the purpose of processing. Where we rely on consent, it may be withdrawn at any time by contacting us using the details below; withdrawal does not affect the lawfulness of processing carried out before it, and we may be unable to complete a verification after consent is withdrawn.

Where processing is permitted without consent under applicable law, we will rely only on those lawful grounds. [legal counsel to confirm lawful grounds relied on]

7. Data Sharing and Disclosure

We may share personal data only as needed:

  • With the client that requested the verification
  • With institutions, employers, referees and record-holding bodies contacted to complete a check
  • With service providers who help us operate (for example, email delivery and website hosting), under appropriate confidentiality obligations
  • With courts, regulators or law-enforcement authorities where we are required to do so by law

[Confirm whether any personal data is transferred outside India and, if so, add details]

8. Data Security

We take reasonable security safeguards to protect personal data against unauthorised access, disclosure, alteration or loss. This website uses encrypted connections (HTTPS) where configured, and the contact form sends enquiries directly to our company email address; it does not store submissions in a database or on this website's server. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. [Add a description of organisational and technical safeguards actually in place]

If a personal data breach occurs, we will respond and notify the affected persons and the authorities as required by applicable law.

9. Data Retention

We keep personal data only for as long as needed for the purposes described in this policy, or as required by law or by our contract with the client, and then delete or anonymise it. Enquiries sent through the website contact form are held in our company email system for as long as needed to handle the enquiry. [Define retention periods for enquiries, verification records and reports]

10. Cookies and Website Analytics

This website uses a small session cookie that is needed for security (to protect the contact form against forged requests). It does not store your personal details and is deleted when you close your browser. [If analytics or other cookies are added later, describe them here and add a consent banner where required]

11. Third-Party Services

Our website uses the following third-party services, which may process technical information such as your IP address under their own privacy policies:

  • Google reCAPTCHA on the contact form, to protect against spam and abuse
  • Google Maps to display our location
  • Google Fonts and jsDelivr to load fonts and website code libraries
  • An SMTP email provider to deliver enquiries to us [name of email provider]

We are not responsible for the privacy practices of third-party websites linked from our site.

12. User Rights and Grievance Redressal

Under the DPDP Act, individuals (Data Principals) have rights that include:

  • The right to obtain a summary of their personal data being processed and the processing activities
  • The right to request correction, completion, updating and erasure of their personal data, subject to legal requirements
  • The right to withdraw consent
  • The right to readily available means of grievance redressal
  • The right to nominate another person to exercise rights in the event of death or incapacity

To exercise these rights or raise a concern, contact our Grievance Officer using the details below. We will aim to respond within a reasonable time and within any period prescribed by law. If you are not satisfied with our response, you may approach the Data Protection Board of India as provided under the DPDP Act, once it is operational. [legal counsel to confirm response timelines and complaint process]

13. Contact Information

Grievance Officer / Contact for privacy matters: [name and designation]
Email: info@amruconsultancy.com
Address: AMRU Consultancy, 404 Darshanam Capital, Vasna Bhyali Canal Road, Bhyali, Vadodara (Gujarat) - 391410, India

14. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices or in the law. The updated policy will be posted on this page with a new "Last updated" date. Please review it periodically.