DPDP Act Notice
Your rights under India's Digital Personal Data Protection Act, 2023: what personal data Integritas HRMS processes, why, and how to access, correct, erase or complain.
Version 1 · Last updated 2 October 2026 · Print or save as PDF
What this notice is for
The Digital Personal Data Protection Act, 2023 (the "DPDP Act") gives you, as a "Data Principal", rights over your personal data and requires organisations that decide how it is used, "Data Fiduciaries", to be open about what they do. This notice tells you, in plain language, what personal data Integritas Global Services processes through the Integritas HRMS website, why, and how to use your rights. It works together with our Privacy Policy.
Our role: fiduciary or processor
| Situation | Who decides how data is used | Our role |
|---|---|---|
| You visit this website, request a demo or contact us | We do | Data Fiduciary. This notice and the Privacy Policy apply. |
| A company uses Integritas HRMS to manage its own employees, candidates or contractors | That company (your employer or prospective employer) | Data Processor, acting only on the company's documented instructions under our agreement with it. See section 14. |
Personal data we process and why
| Personal data | Purpose | Basis |
|---|---|---|
| Name, company, work email, phone, headcount, interests, preferred time, message | Arrange and run a demo, answer questions, send a quote | Your consent given on the demo form |
| Where you came from (campaign tags, referring site, first page) | Understand which marketing reaches people, and trace a request to its source | Your consent given on the demo form |
| Name, email, optional phone, request details | Handle your data-protection request or complaint and keep a record | Your request; legal obligation |
| IP address, browser and device data, security logs | Keep the site secure and prevent abuse | Legitimate use for security; your consent where cookies are optional |
| Analytics identifiers (cookies) | Understand how the site is used | Your consent, only if you accept analytics cookies |
We process only the data needed for these purposes.
Consent and withdrawing it
Where we rely on consent, we ask for it before we collect the data, with a clear statement of what it is for and a link to this notice. It is your free choice, specific to the purpose, and given by a clear action such as ticking a box. We keep a record of when you consented and to which version of our policy.
You can withdraw consent at any time, as easily as you gave it, using the data request form or by emailing info@integritas.in. If you withdraw, we will stop the processing that depended on it, and you accept that we may then be unable to continue the related service, for example a demo you asked for. Withdrawal does not make earlier processing unlawful.
Your rights as a Data Principal
- Know: ask for a summary of the personal data we process about you and what we do with it, and the identities of any other fiduciaries and processors we shared it with.
- Correct, complete and update: ask us to fix inaccurate or incomplete data.
- Erase: ask us to erase data we no longer need for the purpose it was collected for, unless the law requires us to keep it.
- Withdraw consent at any time (section 4).
- Grievance redressal: complain to us about how we handle your data, or how we treat your rights (section 8).
- Nominate: name another person to exercise your rights if you die or become unable to.
How to exercise your rights
Use the data request form, or email info@integritas.in, or call +91 70900 71900. Tell us which right you want to use and give enough detail for us to find your data. We will check that you are who you say you are before we act, usually by asking you to reply from the email address you used with us, so that we do not give your data to someone else.
How quickly we respond
We aim to acknowledge every request within 3 working days and to respond fully within 30 days, or any shorter period the law requires. If a request is complex or we need to verify your identity, we will tell you what is happening and why it is taking longer. If we decline all or part of a request, for example because the law requires us to keep the data, we will explain why. There is no charge for making a request.
Grievance officer and complaints
Grievance Officer, Integritas Global Services
Bengaluru, India
Email: info@integritas.in
Phone: +91 70900 71900
Please bring a complaint to us first so we can put it right. If you are not satisfied with our response, or we do not respond in time, you may complain to the Data Protection Board of India in the manner the DPDP Act and its Rules provide. The Board expects you to have used our grievance process first.
Your duties as a Data Principal
The DPDP Act asks you to follow the law, not impersonate anyone, not hide material information when giving data for official purposes, not make false or frivolous complaints, and give only verifiably authentic information when asking for correction or erasure.
Children
The DPDP Act treats anyone under 18 as a child and requires verifiable consent from a parent or guardian before their data is processed. This website is for businesses. We do not knowingly process children's data, and we do not track or monitor children's behaviour or target advertising at them. If you believe we hold a child's data, tell us and we will act.
Security safeguards and breaches
We protect personal data with reasonable safeguards: encrypted connections, access limited by role, two-step verification available for administrators, throttled sign-in, audit logs and backups. If a personal data breach occurs, we will inform the Data Protection Board of India and each affected person as the law requires, and take steps to contain and prevent it.
Retention and erasure
We keep personal data only as long as the purpose needs, or as long as the law requires, then erase it or make it anonymous. Our usual periods are in section 7 of the Privacy Policy. If you withdraw consent or ask for erasure and nothing requires us to keep the data, we will erase it, and we will ask any processor holding it for us to do the same.
Processors and transfers outside India
We use processors such as hosting, email and analytics providers, who may use the data only on our instructions and must protect it. Personal data may be processed outside India by such providers; the DPDP Act permits this except to countries the Government of India restricts by notification.
If your employer uses Integritas HRMS
If you are an employee or candidate of a company that uses Integritas HRMS, your employer is the Data Fiduciary for your HR data and decides how it is used. Please send your request (to see, correct or erase your data, withdraw consent or complain) to your employer's HR team or its grievance officer first. If you contact us directly, we will pass your request to your employer, because we are only allowed to act on their instructions, and we will help them respond to you within the time the law allows.
Language
This notice is in English. If you would like it in another language listed in the Eighth Schedule to the Constitution of India, write to info@integritas.in and we will arrange it.
Updates to this notice
We will update this notice when our processing or the law changes. The version and date at the top show the latest one, and we will ask for fresh consent where the law requires it.