MAHESHWARI AND COMPANY ADVISORY SERVICES PRIVATE LIMITED (hereinafter referred to as “MCO Advisory,” “we,” “us,” or “our”) hereby establishes its commitment to the protection and security of personal information. This Privacy Policy (“Policy”) sets forth the practices and procedures governing the collection, utilization, disclosure, and safeguarding of personal data in accordance with the Information Technology Act, 2000 (“IT Act”), the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“IT Rules“), and other applicable laws and regulations.
By accessing our services or website, you hereby consent to the practices delineated in this Policy.
1. Introduction
This Privacy Policy elucidates the methodologies employed by MCO Advisory in the collection, utilization, disclosure, and protection of personal information. It serves to inform you of your rights and our obligations pertaining to personal data.
Scope of this Policy:
- Categories of Personal Information Collected: This Policy identifies the types of personal data gathered from various sources.
- Purposes for Collection and Use: This Policy explicates the rationale underlying the collection and processing of personal information.
- Methods of Disclosure and Processing: This Policy details the procedures for sharing, processing, and safeguarding personal information.
By engaging our services or accessing our website, you hereby acknowledge that you have read, understood, and agree to be bound by the terms and conditions set forth in this Privacy Policy.
1.1. Compliance with Laws:
MCO Advisory hereby affirms its commitment to comply with all applicable data protection laws and regulations. This Policy is formulated to ensure that personal information is processed in a manner that is lawful, fair, and transparent, with due respect to privacy rights and implementation of safeguards against unauthorized access or breaches.
1.2. Definitions:
Personal Information: Any data that, directly or indirectly, can be utilized to identify an individual.
Sensitive Personal Data or Information: Specific categories of personal data necessitating heightened protection, as defined under the IT Rules, 2011.
Data Controller: The entity determining the purposes and means of personal data processing.
Data Processor: The entity processing personal data on behalf of the Data Controller.
1.3. Applicability:
This Policy shall apply to all personal information collected by MCO Advisory through its website, services, and other interactions with clients, prospective clients, employees, and other stakeholders.
1.4. Amendments:
MCO Advisory reserves the right to amend this Privacy Policy at any time. Any modifications shall be posted on our website with an updated effective date. Continued use of our services or website subsequent to such modifications shall constitute acceptance of the revised Policy.
1.5. Contact Information:
For any inquiries, concerns, or requests pertaining to this Privacy Policy, please refer to Section 5 herein.
2. General Provisions
2.1. Sources of Personal Information
MCO Advisory hereby collects personal information from the following categories of individuals:
- Clients and Prospective Clients: Individuals and entities who engage with our services or express interest in our offerings.
- Job Applicants and Interns: Individuals applying for employment, internships, or other professional engagements with MCO Advisory.
- Current Employees: Employees, contractors, and consultants currently engaged with MCO Advisory.
- Website Visitors: Any individual who accesses or interacts with our website, including prospective clients and other interested parties.
2.2. Nature of Engagements and Contractual Obligations
In the course of providing our advisory services or entering into any form of engagement or contractual relationship, MCO Advisory may collect and process additional personal information as necessary. The collection and processing of such information in these contexts are governed by the specific terms and conditions outlined in our service agreements, engagement contracts, or other relevant contractual documents. These agreements shall take precedence over this Privacy Policy concerning the handling of personal data related to the services provided or the contractual relationship established.
2.3. Legal Basis for Processing Personal Information
MCO Advisory processes personal information based on the following legal grounds:
- Consent: Where individuals have explicitly consented to the processing of their personal data for specific purposes.
- Contractual Necessity: Processing is necessary for the performance of a contract to which the individual is a party or to take steps at the request of the individual prior to entering into a contract.
- Legal Obligation: Processing is necessary to comply with a legal obligation to which MCO Advisory is subject.
- Legitimate Interests: Processing is necessary for the purposes of the legitimate interests pursued by MCO Advisory, provided such interests are not overridden by the individual’s rights and freedoms.
2.4. Data Minimization and Purpose Limitation
MCO Advisory adheres to the principles of data minimization and purpose limitation, ensuring that only personal data that is:
- Adequate, Relevant, and Limited: Collected is to what is necessary in relation to the purposes for which they are processed.
- Purpose-Specific: Processed solely for the purposes explicitly stated in this Privacy Policy or as required by law.
2.5. Data Accuracy and Integrity
MCO Advisory is committed to ensuring that the personal information collected is accurate, complete, and up-to-date. We implement reasonable measures to rectify or erase inaccurate or incomplete data without delay upon discovery or notification.
3. Collection of Personal Information
3.1. Collection of Personal Information
MCO Advisory hereby collects various categories of personal information in accordance with applicable laws and regulations for the purpose of providing services and fulfilling contractual obligations. The categories of personal information collected include, but are not limited to:
3.1.1. Identification Information:
- Full name
- Temporary and permanent addresses
- Telephone numbers
- Email addresses
3.1.2. Employment Information:
- Previous employment details, including job titles and names of previous employers
- Compensation history
- Financial statements related to previous employment
3.1.3. Online Activity Information:
- IP addresses
- Geolocation data
- Access times and frequency of website visits
3.1.4. Correspondence and Documentation:
- Prior correspondence with MCO Advisory
- Documents submitted during service provision or employment processes
3.2. Methods of Collection
MCO Advisory employs the following methods to collect personal information in compliance with applicable laws and regulations:
3.2.1. Direct Collection: Information provided directly by individuals through forms, applications, surveys, and other interactive tools on our website or during the provision of services.
3.2.2. Indirect Collection: Information is gathered through the use of cookies, web beacons, and other tracking technologies when individuals access our website.
3.2.3. Third-Party Sources: Information obtained from third-party service providers, partners, or publicly available sources, provided that such collection complies with relevant legal requirements.
3.2.4. Automated Collection: Data is collected automatically through interactions with our website, such as IP addresses, browser types, and usage patterns.
3.3. Legal Basis for Collection
The collection of personal information by MCO Advisory is conducted based on the following legal grounds, in accordance with the Information Technology Act, 2000 (“IT Act”), the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“IT Rules”), and other applicable data protection laws:
3.3.1. Consent: Obtaining explicit consent from individuals for the collection, use, and processing of their personal information for specified purposes.
3.3.2. Contractual Necessity: Collecting information necessary to fulfill contractual obligations and provide services as agreed upon with clients and employees.
3.3.3. Legal Obligations: Gathering information required to comply with legal and regulatory obligations imposed by laws, regulations, and court orders.
3.3.4. Legitimate Interests: Processing personal information to pursue legitimate business interests, provided such interests do not override the fundamental rights and freedoms of individuals.
3.4. Purpose of Collection
Personal information is collected for the following purposes:
3.4.1. Service Provision: To deliver, maintain, and improve our advisory services in alignment with client needs and expectations.
3.4.2. Communication: To communicate with clients, prospective clients, employees, and other stakeholders regarding inquiries, updates, and relevant information.
3.4.3. Compliance: To ensure compliance with applicable laws, regulations, and contractual obligations.
3.4.4. Internal Administration: For internal administrative purposes, including record-keeping, performance evaluations, and organizational planning.
3.4.5. Security: To enhance the security of our systems and protect against unauthorized access, fraud, and other malicious activities.
3.4.6. Marketing and Outreach: To send promotional materials, invitations to events, and other marketing communications, where consent has been obtained.
3.5. Consent Mechanism
MCO Advisory ensures that consent for the collection and processing of personal information is obtained in a clear and transparent manner:
3.5.1. Explicit Consent: Individuals are required to provide explicit consent before their personal information is collected, especially for sensitive personal data.
3.5.2. Informed Consent: Providing detailed information about the purposes of data collection, the types of data collected, and the rights of individuals to make informed decisions regarding their personal information.
3.5.3. Withdrawal of Consent: Informing individuals of their right to withdraw consent at any time, with instructions on how to exercise this right, without affecting the lawfulness of processing based on consent before its withdrawal.
3.6. Categories of Personal Information Collected
MCO Advisory collects various categories of personal information. This includes identification information such as names, addresses, phone numbers and email addresses; demographic details like age and date of birth; employment information such as job history, compensation, and financial statements; and biometric data like fingerprints (when applicable). Financial information, including bank details and payment methods, as well as health-related data covering physical, physiological, and mental conditions, are also collected. Sensitive personal information, such as sexual orientation and biometric data under IT Rules, 2011, may be gathered, alongside online activity information like IP addresses, geolocation, and website access patterns. Additionally, correspondence and documentation related to services or employment processes are maintained.
3.7. Methods of Collection
MCO Advisory employs various methods to collect personal information. These include direct collection through forms, applications, surveys, and other interactive tools provided by individuals on our website or during service provision. Indirect collection occurs via cookies, web beacons, and tracking technologies when individuals access our website. Information may also be obtained from third-party sources, such as service providers, partners, or publicly available platforms, provided it complies with legal requirements. Additionally, automated collection methods gather data like IP addresses, browser types, and usage patterns during website interactions.
3.8. Purpose of Collection
Personal information is collected by MCO Advisory for various purposes, including delivering, maintaining, and improving advisory services to meet client needs; facilitating communication with clients, employees, and stakeholders regarding inquiries, updates, and relevant information; and supporting internal administrative functions such as record-keeping, performance evaluations, and organizational planning. Additionally, personal data is used to enhance system security, protect against unauthorized access and fraud, and, with consent, send promotional materials, event invitations and other marketing communications.
3.9. Consent Mechanism
MCO Advisory ensures that consent for the collection and processing of personal information is obtained in a clear and transparent manner:
3.9.1. Explicit Consent:
Individuals are required to provide explicit consent before their personal information is collected, especially for sensitive personal data.
3.9.2. Informed Consent:
Providing detailed information about the purposes of data collection, the types of data collected, and the rights of individuals to make informed decisions regarding their personal information.
3.9.3. Withdrawal of Consent:
Informing individuals of their right to withdraw consent at any time, with instructions on how to exercise this right, without affecting the lawfulness of processing based on consent before its withdrawal.
3.10. Data Accuracy and Verification
MCO Advisory is committed to maintaining the accuracy and reliability of the personal information collected:
3.10.1. Verification Processes
Implementing verification mechanisms to ensure the accuracy of the information provided by individuals.
3.10.2. Correction of Inaccuracies
Providing individuals with the means to update or correct their personal information to maintain its accuracy.
4. Data Collection from Third Parties
In certain instances, MCO Advisory may collect personal information from third-party sources:
4.1. Authorized Third Parties
Obtaining personal information from third parties who have obtained such data in a lawful manner and with appropriate consent.
4.2. Purpose Limitation
Using data collected from third parties solely for the purposes stated in this Privacy Policy and not for any unrelated or unauthorized purposes.
4.3. Due Diligence
Conducting due diligence on third-party sources to ensure they adhere to comparable data protection standards.
5. Contact Information
5.1. Point Of Contact: Admin
5.2. Email: [email protected]
5.3. Phone No.:+91 9354 212601