PRIVACY POLICY — CLIENT INTERFACE
Effective Date: 11th October, 2026
Last Updated: 11th October, 2026
KronoLawgy Compliance Private Limited ("KronoLawgy," "we," "us," or "our") operates the KronoLawgy website and mobile application (the "App"), and acts as the Data Fiduciary for personal data processed through the App, in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and other applicable Indian laws.
This Privacy Policy explains how we collect, use, disclose, and safeguard your information ("you," "your," referring to the client entity and its authorized representatives, i.e. "Data Principals") when you use our App and the services provided through it, including but not limited to corporate compliance management, statutory audits, POSH and safety training, trademark registration, health checkups, and Online Dispute Resolution (ODR) or arbitration mechanisms.
Please read this Privacy Policy carefully. By accessing or using the App, you agree to the terms of this Privacy Policy. If you do not agree, please do not use the App.
 
1. Information We Collect
 
We collect information about you and your organization in three ways: information you provide directly, information collected automatically, and information from third parties.
A. Information You Provide Voluntarily
● Account and Profile Information: Name, email address, phone number, company name, corporate registration details, and job title of the authorized representative.
● Service-Specific Data:
  - Compliance & Audits: Employee details, payroll data, and safety records for executing Labour Code, POSH, or fire safety audits.
  - Health Checkups: Scheduling details, and where explicitly authorized, necessary coordination data for workplace medical health checkups.
  - Arbitration & Mediation (ADR): Dispute briefs, contract clauses, identity proofs, and evidence submitted for ODR proceedings.
  - Trademarks: Brand names, logos, ownership details, and priority documents.
● Customer Support and Communications: Any information you provide when contacting our support team or filling out inquiry forms.
B. Information Collected Automatically
● Device and Usage Data: IP address, device ID, operating system, browser type, app performance logs, and pages or features viewed within the App.
● Cookies & Marketing Technologies: We use cookies, web beacons, and similar tracking technologies for marketing and analytics purposes — including understanding app traffic, measuring campaign effectiveness, and personalizing promotional communications. You may manage cookie preferences through your browser or device settings.
 
2. How We Use Your Information
 
We process your data to deliver our professional services and maintain app security. Specifically, we use your information to:
● Set up, manage, and secure your corporate user account.
● Execute and deliver report outcomes for fire safety, POSH, and Labour Code audits.
● Administer, manage, and facilitate neutral ODR and arbitration proceedings.
● File and track trademark applications with regulatory registries.
● Send transaction receipts, compliance alerts, and administrative updates.
● Improve App performance, troubleshoot bugs, and design new features.
● Comply with statutory and legal obligations under applicable Indian laws.
● Send you marketing communications, where you have not opted out.
 
3. How We Share and Disclose Your Information
 
KronoLawgy does not sell your personal or business data. As the Data Fiduciary, we remain accountable for your data even when it is shared with the following parties:
● Network Partners: To deliver the services you request, we share the minimum necessary information with our verified independent Network Partners (advocates, CS professionals, HR experts, trainers, auditors) who act on our instructions as data processors. Network Partners are contractually bound to use your data solely for the assigned engagement and are prohibited from independently retaining or repurposing it.
● Third-Party Service Providers: We share data with verified vendors who perform services on our behalf, such as cloud hosting providers and secure payment gateways.
● Arbitration & Mediation Proceedings: For ADR services, relevant dispute data is strictly shared only with the appointed neutral arbitrators, mediators, and the opposing party involved in the specific case file.
● Regulatory Authorities: We submit data to government registries and portals when explicitly authorized by you (e.g., filing a trademark application or submitting statutory compliance forms).
● Legal Requirements: We may disclose your information if required by court orders, subpoenas, or valid statutory mandates from law enforcement authorities.
● Business Transfers: In the event of a merger, acquisition, or sale of company assets, your data may be transferred to the acquiring entity subject to standard confidentiality commitments.
 
4. Data Storage, Security & Retention
 
A. Data Storage & Security 
Your data is currently hosted on servers located within India. We implement industry-standard administrative, technical, and physical security measures — including encryption for sensitive data transfers and secure cloud environments — designed to protect your personal and corporate information from unauthorized access, alteration, or disclosure.
B. Data Retention
We retain your data for the duration of your active engagement with us, and for 7 (seven) years following completion of the engagement, to align with statutory record-keeping requirements under applicable Indian corporate, tax, and labour laws. Certain records may be subject to longer or shorter statutory retention periods depending on the specific service (e.g., EPF/ESI-related records); where applicable, the relevant statutory period will govern.
 
5. Your Rights and Choices
 
As a Data Principal under the DPDP Act, you and your authorized employees may exercise the following rights:
● Access and Portability: Request a copy of the personal data we hold about you.
● Correction: Request that we update or correct inaccurate or incomplete profile records.
● Erasure (Right to be Forgotten): Request the deletion of your personal account data, subject to legal or contractual retention restrictions (e.g., active arbitration records cannot be deleted mid-proceedings).
● Withdrawal of Consent: Withdraw your consent to process data at any time, noting that this may limit our ability to provide certain services through the App.
● Grievance Redressal: Raise a complaint regarding our data handling practices with our Grievance Officer (see Section 7).
To exercise any of these rights, please contact us using the information provided in the Contact Us section below.
 
6. Changes to This Privacy Policy
 
We may modify or update this Privacy Policy from time to time to reflect changes in our services or legal obligations. We will notify you of any material changes by posting the new policy within the App and updating the "Last Updated" date at the top of this page. Your continued use of the App after updates take effect constitutes acceptance of the revised policy.
 
7. Grievance Officer & Contact Us
 
If you have any questions, concerns, or grievances regarding this Privacy Policy or our data handling practices, please contact our designated Grievance Officer through conatct@kronolawgy.com.
 
8. Governing Law & Jurisdiction
 
This Privacy Policy shall be governed by and construed in accordance with the laws of India, including the Digital Personal Data Protection Act, 2023. Any disputes arising under this Policy shall be subject to the exclusive jurisdiction of the courts at Delhi only.