DPDP Act Notice

2. Data Fiduciary and contact

For personal data processed through this portal and TinCare services, TinCare Compliance Solutions determines the purpose and means of processing and acts as the Data Fiduciary where applicable.

Data Protection/Grievance Contact: info@tincare.in; +91 89520 19951; 1st Floor, Gordhan Plaza, Kotputli, Jaipur, Rajasthan – 303108.

3. Notice and specified purposes

At or before collection, we aim to present clear information about the data requested and its purpose. Core purposes include account creation and verification, requested tax/compliance processing, document handling, wallet and invoice administration, security, support and lawful recordkeeping. The detailed categories and recipients are listed in the Privacy Policy.

We do not request unrelated personal data merely as a condition of service. Optional fields are labelled where practicable.

4. Consent standard

• Consent-based processing should be free, specific, informed, unconditional, unambiguous and shown by a clear affirmative action.
• The registration checkbox is unticked by default and the linked notices can be opened before acceptance.
• Consent may be withdrawn through the contact below with comparable ease, subject to the consequences of stopping data essential to an ongoing service.
• Withdrawal does not affect processing lawfully completed before withdrawal or records that must be retained under law.

5. Data Principal rights

As applicable under the law in force, a Data Principal may request access information, correction, completion, updating or erasure; withdraw consent; nominate another individual; and use the grievance process. We will verify requests proportionately and respond within the legally applicable period.

A request may be limited where retention or processing remains necessary for law, a completed transaction, a legal claim, security or another permitted purpose.

6. Duties when providing data

You should provide authentic information, avoid impersonation, comply with applicable law and not suppress material information. When you provide a client's, employee's, party's or family member's data, you are responsible for having proper authority and for helping them understand the relevant notice.

7. Processors, authorities and safeguards

We may engage Data Processors for hosting, email, communications, storage, security or other operational support and may transmit data to relevant authorities or e-governance systems for the requested service. We use purpose limitation, role-based access, contractual controls and proportionate technical safeguards and require service providers to process data only on authorised instructions, subject to law.

8. Accuracy, retention and erasure

We take reasonable steps to keep data accurate where it is used to make a decision or disclosed. You can update portal information or request correction. We erase or anonymise data when its purpose is complete and retention is no longer necessary, subject to legal, tax, accounting, security, backup and dispute obligations.

9. Security and breach response

We maintain reasonable security safeguards designed to prevent unauthorised processing and personal-data breaches. If a breach occurs, we will contain and assess it, preserve necessary records, take remedial measures and make notifications to affected Data Principals and the Data Protection Board when and in the manner required by the provisions then in force.

10. Children and persons with lawful guardians

Independent portal registration is limited to adults. Where a requested service lawfully requires a child's data or data of a person with a lawful guardian, we will seek verifiable consent or authority and apply the restrictions required by the provisions then in force.

11. Grievance process

1. Email info@tincare.in from your registered address with the subject “DPDP Request” and describe the account, data and requested action.
2. We may ask for reasonable identity or authority verification and additional details needed to locate the record.
3. We will acknowledge, investigate and respond within the period required by applicable law and communicate any action or reasoned limitation.
4. If the grievance remains unresolved after using our process, you may approach the Data Protection Board of India when the relevant statutory remedy is available.

12. Updates

We will review this notice as additional provisions commence, official directions develop or portal practices change. The latest version and effective date will be posted here, and material changes will be communicated through appropriate channels.