Privacy & Data Protection Policy

2. Regulatory & Statutory Data We Collect

In our role as corporate compliance facilitators and government departmental liaisons, we collect only the documentation and data strictly required by competent government authorities to process prescribed approvals, licenses, consents, and statutory registrations:

• Corporate & Entity Credentials: Certificates of Incorporation, MoA & AoA, LLP Agreements, GSTIN registrations, PAN/TAN records, Director/Partner KYC (Aadhaar/PAN/DIN), and registered office utility proof.
• Technical & Plant Documentation: Factory building plan drawings, plant layout blueprints, structural stability certificates, electrical single-line diagrams (CEIG), machinery horsepower schedules, and chemical inventory sheets (MSDS).
• Environmental & Pollution Dossiers: Manufacturing process flowcharts, water balance charts, effluent treatment plant (ETP/STP) design reports, emission stack profiles, and capital project investment cost statements for CTE/CTO filings.
• Labour & Payroll Records: Employee muster rolls, wage registers, PF & ESI numbers, BOCW worker tallies, and contractor establishment records required for compliance returns.

3. Purpose of Processing & Departmental Filings

Client data is processed exclusively for legitimate statutory purposes, including:

1. Preparing and filing formal application dossiers on state and central government portals (e.g., AP Single Desk Portal, TS-iPASS, MoEFCC PARIVESH, DISH portal, PESO, CEIG).
2. Conducting technical compliance audits, safety inspections, and gap analysis required prior to official scrutiny.
3. Liaising with designated statutory inspectors and competent authorities to resolve departmental queries or site inspections.
4. Generating statutory registers, return filings, and compliance audit certificates under Factories Act, Pollution Control Acts, and Labour Codes.

4. Non-Disclosure & Industrial Trade Secrets (NDA)

Every consultant, liaison engineer, and statutory auditor representing Harveni Group is bound by legally enforceable Non-Disclosure Agreements (NDAs). Where requested, we execute mutual or tripartite corporate NDAs prior to dossier handover.

5. DPDP Act 2023 & Information Technology Act Compliance

Harveni Group aligns its digital workflows with the provisions of the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000 (including Reasonable Security Practices and Procedures and Sensitive Personal Data or Information Rules).

All digital records transmitted via our advisory portal are encrypted using industry-standard Transport Layer Security (TLS 1.3) protocols. Stored data is maintained in access-controlled environments accessible only by authorized compliance caseworkers assigned to your clearance file.

6. Data Retention & Secure Archival

Statutory clearances and licenses carry mandatory multi-year validity and audit periods under Indian law (e.g., Factories Act registers must be maintained for 3 years; corporate audit documentation for 8 years). Harveni Group retains records only for:

• The operational duration of the active advisory engagement.
• The statutory validity period of the clearance, license, or consent granted.
• The mandatory statutory limitation period required by tax, labour, and industrial authorities.

Upon expiration of statutory retention mandates or upon verified written instruction from an authorized client officer, records are securely expunged from digital systems or returned to the client entity.

7. Client Rights & Grievance Redressal

As an enterprise client or data principal, authorized client representatives possess the right to:

• Request a complete summary of data files maintained on record.
• Submit corrections or updates to corporate or technical information.
• Request revocation of representation on government portals upon engagement conclusion.
• Lodge an inquiry or grievance with our designated Compliance Officer.

8. Grievance Officer & Contact Coordinates

In accordance with the Information Technology Act and DPDP Act, the coordinates for our Compliance Secretariat and Grievance Officer are: