Data Privacy and Security Policy for Spotshot Private Limited

1. Protection of Employee and Company Data:

Spotshot Private Limited is committed to ensuring the privacy and security of employee and company data. All personal and sensitive information collected and processed by the company will be handled with the utmost care and in compliance with the data protection laws of India.

2. Compliance with Data Protection Laws:

Spotshot Private Limited recognizes and adheres to the data protection laws of India, including the IT Act, the SPDI Rules, and any other applicable legislation. The company will implement reasonable security practices and procedures to safeguard personal data and prevent unauthorized access, disclosure, alteration, or destruction.

3. Consent and Notice:

The company will obtain appropriate consent from individuals before collecting and processing their personal data. Data subjects will be provided with clear and transparent notices regarding the purpose and extent of data collection and processing.

4. Data Integrity and Protection:

Spotshot Private Limited will ensure the integrity and protection of employee and company data by implementing technical, physical, and organizational measures to prevent unauthorized access or loss of data. This includes regular data backups, encryption, access controls, and employee training on data security best practices.

5. Breach Reporting:

In the event of a data breach, Spotshot Private Limited will promptly report the incident to the relevant authorities as required by law. The affected individuals will also be notified in a timely manner, providing them with the necessary information and guidance to mitigate potential harm.

6. Employee Responsibilities:

All employees are responsible for complying with this policy and must handle personal and sensitive data in accordance with established procedures. Spotshot Private Limited will provide regular training and awareness programs to ensure employees understand their responsibilities and the importance of data privacy and security.

7. Third-Party Data Processors:

When engaging third-party service providers that may have access to personal data, Spotshot Private Limited will ensure appropriate contractual safeguards are in place to protect the confidentiality, integrity, and security of the data.

8. Data Retention:

Employee and company data will be retained only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws and regulations. Spotshot Private Limited is committed to continuously reviewing and improving its data privacy and security practices to ensure compliance with the evolving legal and regulatory landscape.