Privacy Policy
Serinity ("we", "us", "our") is committed to protecting the privacy of visitors to www.serinity.co.in (the "Website") and of the personal data processed through our HRMS and payroll outsourcing services. This Privacy Policy explains what data we collect, why, and how it is protected, in line with India's Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Information Technology Act, 2000 and associated rules, including the Sensitive Personal Data or Information (SPDI) Rules, 2011.
1. Data we collect
From website visitors
- Contact details submitted through demo, quote or contact forms (name, company, work email, phone number, city).
- Technical data such as IP address, browser type and pages visited, collected via cookies and analytics tools (see our Cookie Policy).
From HRMS and payroll outsourcing customers
- Employee personal data entered into the platform by the Customer, which may include name, contact details, date of birth, bank account details, PAN, and Aadhaar or other government ID where required for statutory compliance.
- Attendance, leave, salary, performance and recruitment records.
2. Purpose of collection
We use this data to: provide and improve the Website and services; respond to demo and quote requests; process payroll and statutory filings on behalf of Customers who use our outsourcing service; comply with legal and regulatory obligations; and communicate service updates.
3. Legal basis and consent
Where our services process employee personal data on behalf of a Customer, the Customer acts as the data fiduciary/employer and is responsible for obtaining necessary consents from its employees. Serinity processes such data as a service provider, strictly for the purposes instructed by the Customer.
4. How data is stored and secured
Personal and payroll data is encrypted in transit and access is restricted on a role-based basis, so only authorised personnel can view salary, bank and identity information. We apply reasonable technical and organisational security practices consistent with the SPDI Rules, 2011.
5. Data retention
We retain personal data for as long as necessary to provide the services and to meet statutory record-keeping requirements under Indian labour and tax law, after which it is securely deleted or anonymised, unless a longer retention period is required by law.
6. Sharing of data
We do not sell personal data. Data may be shared with: payment processors for billing; statutory authorities (e.g., EPFO, ESIC, tax authorities) strictly for compliance filings on a Customer's instruction; and sub-processors who support our infrastructure, under confidentiality obligations.
7. Cross-border data transfer
Where any data is processed or stored outside India, we take steps to ensure it receives a comparable level of protection, consistent with applicable Indian law.
8. Your rights
Subject to applicable law, you may request access to, correction of, or deletion of your personal data, and may raise a grievance regarding its handling. Employees of our Customers should generally direct such requests to their employer (the data fiduciary), who can coordinate with us as needed.
9. Grievance Officer
In accordance with Indian law, grievances regarding this Privacy Policy or data handling may be directed to our Grievance Officer at support@serinity.co.in, C-20, Military Rd, Marol, Andheri (E), Mumbai, Maharashtra, India. We aim to acknowledge grievances promptly and resolve them within a reasonable timeframe.
10. Cookies
The Website uses cookies to operate correctly and to understand usage. See our Cookie Policy for details and how to manage your preferences.
11. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be notified via the Website. The "Last updated" date above reflects the most recent revision.
12. Contact us
For privacy-related questions, contact support@serinity.co.in or +91 85919 95571.
This is template content for reference and should be reviewed by a qualified lawyer familiar with the DPDP Act, 2023 and applicable Indian data protection law before publication.