Data Privacy Policy

Personally Identifiable Information (PII) Data Privacy Policy

Care4Sign Safetec Limited (hereinafter referred to as "Care4Sign", "we", "us", or "our") is dedicated to protecting the privacy, confidentiality, and security of the Personally Identifiable Information (PII) of our subscribers, partners, and users. As a licensed Certifying Authority under the Controller of Certifying Authorities (CCA), Ministry of Electronics and Information Technology (MeitY), Government of India, we adhere strictly to the Information Technology Act, 2000, and all applicable digital trust regulations.

1. Information We Collect

To issue Digital Signature Certificates (DSC) and perform eKYC authentication, we collect PII in compliance with the CCA guidelines. This includes:

• Identity Information: Full name, date of birth, gender, photograph, PAN card, Aadhaar details (for eKYC verification).
• Contact Information: Residential/office address, email address, and mobile number.
• Organizational Details: Company registration certificate, authorization letter, and GST details (for organization-bound certificates).
• Technical Data: Video/audio recordings of applicant verification, IP address, and browser agent details.

2. How We Use Your Information

The PII collected is processed solely for the following purposes:

• Verification of subscriber identity as mandated by CCA regulations.
• Issuance, management, suspension, or revocation of Digital Signature Certificates.
• Responding to technical support, customer queries, and compliance inquiries.
• Conducting regulatory audits as required by the Government of India.

3. Data Protection and Security

We employ industry-leading technical and organizational security measures to protect PII, including:

• Encryption of sensitive data both in transit (SSL/TLS) and at rest.
• Secure storage of database backups inside highly secure, access-controlled environments.
• FIPS-compliant Hardware Security Modules (HSMs) for cryptographic operations.
• Strict role-based access control (RBAC) ensuring only authorized personnel have access to subscriber documents.

4. Retention Period

In accordance with Section 35 of the Information Technology Act and regulatory guidelines issued by the CCA, all verification files, application forms, and database records of issued certificates are securely archived for a minimum period of 7 years from the date of certificate expiry.

5. Contact and Grievance

If you have any questions or complaints regarding the processing of your PII data, you can reach out to our Grievance Officer:

Grievance Officer: Badri Narayan Pani
Email: grievance@care4sign.com
Office Address: Care4Sign Safetec Limited, Yelahanka New Town, Bengaluru, Karnataka, India.