Privacy Policy

Movavera Tech Solution Pvt. Ltd. ("Movavera", "we", "us", "our"), a company incorporated under the Companies Act, 2013, having CIN [CIN NUMBER] and its registered office at [FULL REGISTERED ADDRESS], Bengaluru, Karnataka, India, respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store, share, retain and protect personal data when you:

• visit www.movavera.com (the "Website");
• submit an enquiry, resume or application to us;
• engage us as a client, or are engaged by us as a candidate or deployed worker;
• otherwise interact with us by email, telephone, or in person.

This Policy is published in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules").

Please read this Policy carefully. By providing your personal data to us, you confirm you have read and understood it.

Because we are a staffing and workforce services business, our role differs depending on the context:

2.1 As Data Fiduciary — We act as a Data Fiduciary (determining the purpose and means of processing) in respect of:

• candidates and job seekers who share their data with us;
• workers deployed by us and carried on our rolls;
• client representatives and business contacts;
• Website visitors and enquirers.

2.2 As Data Processor — Where we process personal data on behalf of and under the instructions of a client (for example, employee data handled under a payroll or HR outsourcing mandate), we act as a Data Processor. In such cases the client is the Data Fiduciary, and that client's own privacy policy governs the processing. We process such data strictly per our written agreement with the client.

• Name
• Company or organisation name
• Email address
• Telephone number
• Service of interest and details of your requirement
• Any other information you voluntarily include in your message

• Full name, date of birth, gender, photograph
• Contact details — address, email, telephone
• Resume or CV, educational qualifications, certifications
• Employment history, skills, references
• Current and expected compensation
• Availability, preferred location and shift
• Government identification as required for verification, onboarding or statutory registration (such as PAN, Aadhaar, driving licence, passport, voter ID)
• Bank account details, for salary disbursement where you are deployed by us
• Provident Fund (UAN) and ESIC details
• Background verification outcomes, where a check is lawfully conducted
• Medical fitness information, only where a specific role or statute requires it

• Name, designation, business contact details
• Company details, GSTIN, and billing information
• Correspondence and records of your requirements

• IP address, browser type and version, device type, operating system
• Pages visited, time and duration of visit, referring URL
• Cookie and similar technology data (see Clause 9)

Some of the above — passwords, financial and bank details, health information, biometric information, and official identifiers — constitute "sensitive personal data or information" under the SPDI Rules. We collect these only where strictly necessary for onboarding, payroll, statutory compliance or verification, only with your consent, and we apply enhanced safeguards to them.

We do not knowingly collect personal data of any person below 18 years of age. In accordance with Section 9 of the DPDP Act, we do not process children's data for tracking, behavioural monitoring, or targeted advertising. If we learn we have inadvertently collected such data, we will delete it promptly. If you believe a child's data has been shared with us, contact our Data Protection Officer immediately.

• Directly from you — enquiry forms, email, telephone, WhatsApp, interviews, onboarding documentation
• From job portals and professional networks — where you have made your profile available for recruitment purposes
• From referrals — where a referrer confirms they have your consent
• From our clients — where they share data for a mandate we are executing
• From background verification agencies — only with your prior written consent
• Automatically — through cookies and server logs when you visit the Website

We process personal data only for the following specified purposes:

PurposeLawful basisResponding to your enquiryConsentAssessing candidate suitability and matching to rolesConsent / legitimate use for employment purposesSharing candidate profiles with prospective employersConsentConducting background verificationExplicit consentOnboarding, deployment and workforce managementContract performancePayroll processing and salary disbursementContract performance / legal obligationPF, ESI, TDS and other statutory filingsLegal obligationMaintaining statutory registers and recordsLegal obligationInvoicing, accounting and tax complianceLegal obligationService communications and updatesConsent / contract performanceWebsite analytics and improvementConsentFraud prevention and securityLegitimate useResponding to legal process and regulatory requestsLegal obligation 

We do not sell your personal data to any third party. We do not use your personal data for automated decision-making that produces legal effects without human review.

6.1 Where processing is based on consent, we obtain your free, specific, informed, unconditional and unambiguous consent by clear affirmative action, in accordance with Section 6 of the DPDP Act.

6.2 You may withdraw your consent at any time by writing to our Data Protection Officer. Withdrawal is as easy as giving consent.

6.3 Consequences of withdrawal — where consent is withdrawn, we will stop processing your data for the relevant purpose. This may mean we can no longer consider you for opportunities, progress your placement, or continue providing a service. Withdrawal does not affect the lawfulness of processing carried out before withdrawal, nor does it override our obligation to retain records required by law.

6.4 We will cease processing and erase your data within a reasonable time following withdrawal, except where retention is required under applicable law.

We share personal data only as set out below, and only to the extent necessary:

7.1 With prospective employers and clients — candidate profiles are shared with clients for the purpose of evaluating you for a role, with your consent.

7.2 With government and statutory authorities — including the EPFO, ESIC, Income Tax Department, Labour Department, and other regulators, as required by law.

7.3 With service providers and Data Processors — including payroll processors, background verification agencies, IT and cloud hosting providers, email and communication platforms, and professional advisors. All such providers are bound by written agreements requiring confidentiality and security measures at least as protective as those in this Policy.

7.4 Where legally compelled — in response to a court order, summons, statutory notice, or lawful request from law enforcement or a regulatory authority.

7.5 In a business transaction — in connection with a merger, acquisition, restructuring or sale of assets, subject to the recipient honouring this Policy.

7.6 To protect rights — where necessary to establish, exercise or defend legal claims, prevent fraud, or protect the safety of any person.

We do not share your personal data with any third party for that third party's independent marketing purposes.

Personal data is primarily stored and processed in India. Some of our service providers (such as cloud hosting, email and analytics providers) may store or process data on servers located outside India. Where this occurs, we ensure the transfer complies with Section 16 of the DPDP Act and that appropriate contractual safeguards are in place. We do not transfer personal data to any territory restricted by the Central Government.

9.1 The Website uses cookies and similar technologies to function correctly and to understand how visitors use it.

9.2 Types used:

• Strictly necessary — required for the Website to function; cannot be disabled
• Analytics — help us understand visitor numbers, popular pages and traffic sources
• Functional — remember your preferences

9.3 You can control or delete cookies through your browser settings. Disabling cookies may affect Website functionality. Where required, we will seek your consent before placing non-essential cookies.

We retain personal data only as long as necessary for the purpose for which it was collected, or as required by law:

CategoryRetention periodWebsite enquiries not converted12 months from last contactCandidate data — not placed24 months from last interaction, or until consent withdrawnCandidate data — placedDuration of deployment plus statutory retention periodEmployment and payroll recordsAs required under applicable labour and tax laws (generally 3 to 8 years)PF and ESI recordsAs mandated under the EPF Act, 1952 and ESI Act, 1948Financial and tax records8 years, per the Income Tax Act, 1961 and Companies Act, 2013Server and cookie logs12 months 

On expiry of the applicable period, data is securely deleted or irreversibly anonymised.

We implement reasonable security practices and procedures as required under Section 43A of the Information Technology Act, 2000 and Rule 8 of the SPDI Rules, including:

• encryption of data in transit using SSL/TLS
• access controls, so personal data is accessible only to personnel who need it
• confidentiality obligations binding on all employees and contractors
• secure storage of physical documents
• periodic review of security practices
• contractual security obligations imposed on all Data Processors
• incident response procedures

However, no method of transmission or storage is completely secure. While we take all reasonable steps to protect your data, we cannot guarantee absolute security, and transmission of data to us is at your own risk.

Breach notification — in the event of a personal data breach, we will notify the Data Protection Board of India and each affected Data Principal in accordance with Section 8(6) of the DPDP Act.

Under the DPDP Act, as a Data Principal you have the right to:

12.1 Access — obtain a summary of the personal data we process about you, the processing activities undertaken, and the identities of Data Fiduciaries and Processors with whom it has been shared.

12.2 Correction and erasure — have inaccurate or misleading data corrected, incomplete data completed, data updated, and data erased where it is no longer necessary for the purpose it was collected for.

12.3 Grievance redressal — register a grievance with our Data Protection Officer regarding any act or omission concerning your data. We will respond within the period prescribed by law.

12.4 Nominate — nominate another individual to exercise your rights in the event of your death or incapacity.

12.5 Withdraw consent — as described in Clause 6.

How to exercise your rights: write to our Data Protection Officer at the address in Clause 14. We may ask you to verify your identity before acting on a request. We will respond within 30 days. There is no charge for a reasonable request.

Your duties — under Section 15 of the DPDP Act you must not impersonate another person when providing data, suppress material information, or register a false or frivolous grievance.

Escalation — if you are not satisfied with our response, you may approach the Data Protection Board of India in accordance with the DPDP Act.

The Website may link to third-party sites. This Policy does not apply to those sites. We are not responsible for their privacy practices and encourage you to read their policies before sharing any data.

Data Protection Officer / Grievance OfficerName: Chetan,  Movavera Tech Solution Pvt. Ltd. Bengaluru, Karnataka, India. Phone: +91 76187 78233 

Working hours: Monday to Friday, 10:00 AM to 6:00 PM IST

Grievances are acknowledged within 24 hours and resolved within 15 days.

We may update this Policy from time to time to reflect changes in our practices or in law. The revised version will be posted on the Website with an updated "Last updated" date. Where changes are material, we will take reasonable steps to notify you. Please review this Policy periodically.

Movavera Tech Solution Pvt. Ltd.[FULL REGISTERED ADDRESS], Bengaluru, Karnataka, India Email: BDM@movavera.comPhone: +91 76187 78233 Website: www.movavera.com

This Policy forms part of, and should be read together with, our Terms and Conditions.