Privacy Policy

We at BAXY Limited (hereinafter ‘BAXY or ‘us’ or ‘we’) respect your privacy and are committed to the protection of your personal data. The protection of your privacy and personal data is an important concern to which we pay special attention in our business processes. This privacy policy is to bring to your knowledge the nature of personal data collected by BAXY, the purpose of collecting such data and its use, subsequent processing of such data and your rights pertaining to such personal data shared with BAXY.

What personal data does BAXY collect?

For the purpose of this Policy, ‘Personal Data’ means any data about an individual who is identifiable by or in relation to such data, that BAXY may hold about you.

BAXY collects personal data about you when you use our websites, use our servers, visit our physical offices, events or contact our customer care. The information that we may collect includes some or all the following:

  • Contact information: Name, phone number, email, address, date of birth, age, marital status, government Ids (such as Aadhar, PAN, driving license), company details.
  • Employment details: Resumes, Contact information along with employment history and educational details.
  • Healthcare Details: Details of any relevant healthcare information of you and your dependents such as Name and DOB which would be required to avail healthcare related benefits.
  • Other details: This encompasses vendor related data handled over Email/applications, manpower contract data, and any project-specific data encountered during the course of project execution.

BAXY processes your Personal Data for specified and lawful purposes only and in accordance with the Digital Data Protection Act 2023.

BAXY processes your personal data when-

  • You have given a consent to process your personal data for specific purposes.
  • You have voluntarily provided your personal data to BAXY for specific purposes.
  • Processing is necessary to fulfil BAXY’s legal obligations.

BAXY processes your personal data for some or all of the following purposes-

Specific Purpose Description
Recruitment of Full-time Employees (FTEs) When you apply for a full-time position with us, we collect your resume, contact information, employment history, and educational details to evaluate your qualifications and suitability for the role. This information is essential for our recruitment process and to communicate with you throughout the hiring process.
Manpower Contractors When you engage with us as a manpower contractor, we collect your contact information, employment history, and relevant contractual details to manage and facilitate your engagement with our projects. This data is necessary to ensure proper coordination, compliance, and execution of contractual obligations.
BGV (Background Verification) During background verification (BGV), we collect and process your personal and professional information, including identification details, employment history, and educational background, to verify the accuracy and authenticity of the information provided. This is crucial for maintaining a trustworthy and secure work environment.
Healthcare Benefits To provide healthcare benefits, we collect relevant healthcare information about you and your dependents, such as names and dates of birth. This data is required to facilitate the administration and provision of healthcare-related benefits and services.
Visitor Management In visitor management, we collect your contact information and identification details when you visit our physical offices. This information is used to ensure the security of our premises and to manage and track visitor access.
Vendor Data For vendor communications, we collect and process your contact information and any relevant communication data exchanged over Email. This is necessary to facilitate effective communication, coordination, and management of our vendor relationships.

How does BAXY process your data?

What are your rights and how you can exercise them?

You have certain data privacy rights in relation to your personal data which can be exercised by you as per the applicable data protection law.

  • Right to access your personal information- You have the right to obtain information about your personal data being processed by us, post authentication of your request we will share all the personal data along with the purpose and third parties with whom data is shared.
  • Right to correction and erasure- You have the right to correct/update and erase your personal data being processed by us. Post authentication of your request BAXY will erase your personal data unless retention is necessary for the specific purpose or compliance with law.
  • Right to withdraw consent- You have the right to withdraw consent when you have given your consent to process your personal data.
  • Right to nominate - You have the right to nominate any individual who will in the event of your death or incapacity may exercise data principal rights on your behalf.
  • Right of grievance redressal- In case you have any grievance related to your rights or any complaint about how your personal data is processed by us, you can raise your grievance with us by contacting the grievance officer.

You may exercise your rights by contacting us on cybersecurity@BAXY.com

In relation to most of the rights, we will ask you for information to confirm your identity. Except in rare cases, we will respond to you within 15 days after we have received any request from you.

Manner in which data principal make complaint to the board. (To be updated once the rules for DPDPA 2023 are published).

How long does BAXY retain your personal data?

BAXY retains your personal data for as long as it is necessary to fulfil the purposes for which it was collected, or longer if required to fulfil our legal obligations.

How does BAXY share your personal data?

BAXY may, where applicable and if relevant, share your information with companies or organizations to whom we have passed the responsibility to manage services on our behalf such as background verification, employee healthcare, direct marketing communications, market research or market analytics, organising specific events/surveys to specific category of individuals.

In certain circumstances, we may share your personal data with our affiliates/subsidiaries in or outside India to fulfil requests, transactions or provide you with a service or information that you have requested.

We may also share your personal data with government agencies for the purpose of verification of identity of criminal, or for prevention of crimes, detection of crimes and investigation including cyber incidents, prosecution, and punishment of offences, or any other legal obligations.

We ensure that any third-party partners who processes your personal data on our behalf comply with applicable data protection laws and have appropriate safeguards to protect your personal they are undertaking on our behalf.

How does BAXY safeguard your personal data?

BAXY is committed towards the safety and protection of your personal data. We use a range of security measures to protect your personal data from unauthorized or unlawful access, loss, disclosure, or alteration, including technical, organizational, and physical measures. BAXY has formulated adequate security measures to regulate the information security controls across the organization as per industry practices and standards.

Children’s privacy

BAXY does not aim any of its products or services directly at children under the age of eighteen (18). This Website is not directed at children under the age of 18 and BAXY cannot distinguish the age of persons who access and use our website. If a minor (according to applicable laws) has provided BAXY with Customer Data without parental or guardian consent, the parent or guardian should contact BAXY to remove the relevant Customer Data. If we become aware that Customer Data has been collected from a person under the age of 18 without parental or guardian consent, we will delete this Customer Data.

Changes to the Privacy Policy

BAXY may amend this Privacy Policy from time to time. If we materially change our Privacy Policy, we will update the “Effective Date” at the top of the Privacy Policy and we may provide Policy prior to the update taking effect by posting a Policy on our website or, where required by law, by providing you with Policy of such updates.

This Privacy Policy was last updated on 12 December 2024, Ver 1.0

Contact us.

If you have any questions related to this privacy policy, you can contact the BAXY’s Grievance Officer at cybersecurity@BAXY.com

You can raise your grievance with below mentioned designated Grievance Officer

Grievance Officer

Name – Sindhu Uthappa

Email Id - sindhu.uthappa@BAXY.com

* The grievance officer is identified above pursuant to the provisions of applicable laws including but not limited to the information Technology Act, 2000, Digital Personal Data Protection Act, 2023 and the Consumer Protection Act, 2019 and the rules enacted under those laws.