DPDP Compliance
FollowHire is committed to compliance with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the rules issued under it. This page summarises how we apply the Act in practice. For the full picture, read this alongside our Privacy Policy.
1. Role under the Act
Syncfinite Technologies Private Limited operates FollowHire as a Data Fiduciary within the meaning of s.2(i) of the DPDP Act. Service providers we engage to process personal data on our written instructions act as Data Processors under s.2(k).
2. Lawful basis for processing
We process personal data on one or more of these lawful grounds:
- Consent (s.6) — for processing tied to discretionary features (e.g. marketing emails, optional profile fields).
- Certain legitimate uses (s.7) — including: (a) the user voluntarily providing data and not indicating they object (e.g. you applying to a job); (b) compliance with court orders or legal obligations; (c) responding to a medical emergency; (d) employment-related obligations of the Data Fiduciary.
Where we rely on consent, it is informed, specific, free, and withdrawable at the same level of friction as it was granted.
3. Notice of processing
At every point of collection (signup, profile completion, job application) we make a plain-language notice available describing: (a) the categories of personal data collected; (b) the purpose; (c) the manner of exercising rights; and (d) how to lodge a complaint with the Data Protection Board of India. The full version is in our Privacy Policy.
4. Your rights as a Data Principal
You may exercise the following rights at any time:
- Right to information about processing (s.11) — a summary of personal data processed and the activities undertaken with it.
- Right to correction, completion, updating and erasure (s.12) — most fields are self-service in /account/profile; for the rest, write to the Grievance Officer.
- Right to grievance redressal (s.13) — see section 8 below.
- Right to nominate (s.14) — you may designate a representative who may exercise these rights on your behalf in the event of your death or incapacity.
5. Consent management
Consent prompts are role-aware and feature-specific (we do not bundle consents). Where consent has been provided, withdrawal is supported via:
- The notification preferences panel in /account/settings.
- The one-click unsubscribe link in every marketing email.
- Email to info@followhire.in stating the consent withdrawn.
Withdrawal does not invalidate processing already lawfully performed. Where the processing is necessary for the Service, withdrawal may require closing the affected feature or the account.
6. Data Fiduciary duties
- Accuracy & completeness (s.8(3)) — we provide editable profile, contact, and application fields and act on correction requests within 7 business days.
- Reasonable security safeguards (s.8(5)) — password hashing, transport encryption, role-based access, audited backups, principle-of-least-privilege production access.
- Breach notification (s.8(6)) — in the event of a qualifying personal data breach, we will notify the Data Protection Board and each affected Data Principal within the timeframes prescribed by the rules.
- Retention discipline (s.8(7)) — personal data is retained only for the purposes set out in our Privacy Policy and deleted on account closure (subject to statutory retention for billing and tax records).
- Contractual safeguards with Processors (s.8(2)) — every vendor that processes personal data on our behalf is bound by a written agreement restricting use to our instructions.
7. Children's data
FollowHire does not knowingly process personal data of individuals below 18 years of age. We do not engage in tracking, behavioural monitoring, or targeted advertising directed at children. Accounts identified as belonging to minors are disabled and the data deleted per s.9 of the Act.
8. Grievance Officer
For DPDP-related queries, requests, and grievances:
Grievance Officer, Syncfinite Technologies Pvt Ltd
Email: info@followhire.in
Postal: 931–932, Sun Gravitas, Radio Mirchi Road, Vejalpur, Ahmedabad, Gujarat – 380015
Acknowledgement: within 2 business days · Resolution target: within 15 days.
If you are not satisfied with our response, you may approach the Data Protection Board of India.
9. Changes
As the DPDP rules evolve and the Data Protection Board issues guidance, we will update this page and our Privacy Policy. Material changes will be announced via the platform and email.