Privacy Policy & Data Protection (India)
In accordance with the Digital Personal Data Protection Act, 2023 (DPDPA) and the Information Technology Act, 2000
Foreword In compliance with the provisions laid down by the Digital Personal Data Protection Act, 2023 and the Information Technology Rules, the following policy outlines how LeghornGroup Pvt Ltd (acting as the Data Fiduciary) collects, handles, and protects the personal data of our Customers, Suppliers, and other business contacts (Data Principals) within India.
1. Source of Personal Data We collect personal data directly from you during the establishment and ongoing management of our contractual relationships. All data is handled with strict confidentiality and in full compliance with applicable Indian data protection regulations.
2. Purpose of Data Processing Your personal data is collected and securely stored for the following core purposes:
- To fulfill existing contractual obligations, including the processing, manufacturing, and delivery of high-security container seals and related assets.
- To comply with all associated legal, administrative, and tax obligations under Indian law (e.g., GST filings, corporate accounting).
- To ensure the effective management of our ongoing business and commercial relations.
3. Data Handling Practices & Security Your data is processed using manual, computerized, and digital systems. LeghornGroup Pvt Ltd implements “reasonable security practices and procedures” as mandated by Indian law to guarantee the utmost confidentiality and protection of your information against unauthorized access, loss, or disclosure.
4. Legitimate Use and Mandatory Collection Providing your basic business and personal data is necessary for entering into and performing contracts with us, as it allows us to meet strict legal and fiscal obligations. Under the DPDP Act, this is processed under the basis of “Legitimate Use” for the performance of a contract and compliance with the law. Consequently, refusing to supply this required data will make it impossible for LeghornGroup Pvt Ltd to establish or continue a business relationship with your company.
5. Data Sharing and Disclosure We respect your privacy and do not publicly disclose your data to unauthorized third parties. However, to execute our economic activities and legal duties, your data may be securely shared with trusted external Data Processors, including:
- Shipping, freight forwarding, and logistics management companies.
- Banking, insurance, factoring, and financial institutions within India.
- IT system managers and mailing services.
- Legal counsel and accounting professionals.
- Internally, your data is only accessible to formally delegated personnel, specifically within our purchasing and administration departments.
6. Your Rights as a Data Principal Under the Digital Personal Data Protection Act, 2023, you have the right to maintain control over your personal information. At any time, you may contact our Grievance Officer to:
- Access and obtain a summary of your personal data being processed.
- Request the correction, completion, or updating of your data.
- Request the erasure of your data (subject to our legal retention requirements).
- Nominate an individual to exercise these rights in the event of death or incapacity.
7. Data Fiduciary & Grievance Officer Information
- Data Fiduciary: LeghornGroup Pvt Ltd
- Registered Office: No 295/4, 8th Cross, 4th Phase, Peenya Industrial Area, Bangalore – 560058
- Contact Information: info@leghorngroup.in | +91 8041250046
- Data Manager / Grievance Officer: Mr. Giorgio Grapsa (Note: You can update this to your designated Indian grievance officer if different).