1. Summary of the Policy

1. Lifafa Tech Services Private Limited located at 175, Kagalwala House, 2nd Floor, Vidyanagri Marg, Kalina, Santacruz (E), Kalina, Mumbai 400098(hereinafter shall be referred to as “Company”, “We”, “Us”, “Our” and terms of similar meaning).
2. This Site is published and maintained by the Company. The Privacy Policy & Disclaimer (as defined hereunder), is applicable to the Site of the Company https://www.lifafa.com , https://www.workperx.co, related mobile applications and content. If you have any questions about this Policy or about privacy at the Company, please contact us at info@lifafa.com.
3. The Company is committed to respect your privacy while using our website and products. This Company Privacy Policy (“Policy”) defines how we ensure compliance with data privacy laws and regulations applicable to the Company – specifically with regards to collection, use, and transmission of Personal Data and Sensitive Personal Data collected by us about you, when you use our mobile applications (the “App”), our Web site (the “Site”) and other online products and services that link to this Policy (collectively, the “Service”). We refer throughout this Policy to our users as “User,” “you,” or “your,” and we also refer to users as, “Potential Users” to denote those visiting or site or requesting information regarding our Services, “Companies” to denote our organizational customer, and “Employee User” to denote individual employees of our Customers who are users of the App, the Site, and the Service through their employer.
4. By using the Service, you consent to our collection, use and disclosure of your personal information as described in this Policy. Protecting the privacy rights of data subjects and safeguarding their Personal Data is now being treated as a basic right of an individual and a legal requirement in many parts of world, being a global organization, respects the privacy of data subjects and is committed to complying with the applicable data privacy laws and legislations (including but not limited to EU General Data Protection Regulation 2016/679, California Consumer Privacy Act/California Privacy Rights Act, The Privacy Act 1988 (Australia) Data Protection Act 2018 (UK), Information Technology Act 2000 read along with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 and other applicable privacy laws to the extent that they apply to the Company (the “Data Privacy Laws”).
5. This Privacy Policy does not apply to the websites of our business partners, corporate affiliates or to any other third parties, even if their websites are linked to the Site. We recommend you to review the respective privacy statements of the other parties with whom you interact.
6. This privacy policy and disclaimer, as amended from time to time ("Privacy Policy/ Privacy Policy & Disclaimer") forms part and parcel of the Terms and Conditions of Use ("Terms") and is included therein by this reference. The capitalized terms which have been used herein but are not specifically defined shall have the same meaning as attributed to such term in the Terms. In the event of any inconsistency between the Terms and this Privacy Policy & Disclaimer, the Privacy Policy & Disclaimer will supersede solely in respect of the content contained herein and not in respect of any other clause, term or provision contained in the Terms.
7. By accessing the Service, you (hereinafter referred to as "You", "Your", "User", "Customer" as applicable) expressly consent to Our collection, storage, use and disclosure of the Information (as defined hereunder) in accordance with the terms of this Privacy Policy & Disclaimer.

8. This privacy policy describes:

   1. The information we collect, how we do so and the purposes of our collection.
   2. How We use and with whom We share such information.
   3. How you can access and update such information.
   4. The choices you can make about how We collect, use and share your information.
   5. How We protect the information we store about you.
9. If you access our Service from a third-party site, you may be required to also read and accept the third party’s terms of service and privacy policy.

2. Definitions

1. Personal Data :

   1. Any User information which can reasonably associate or link to an “Data Subject” directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, economic, cultural or social identity of that natural person.

2. Personal Information (applicable only to California residents) :

   1. Information pertaining to residents of California that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household, but does not include information that is lawfully made available from federal, state or local government records, nor does it include “deidentifed” or “aggregate customer information” as those terms are defined pursuant to the California Consumer Privacy Act/California Privacy Rights Act (CCPA/CPRA).

3. Sensitive Personal Data :

   1. Defined as any “Data Sets” information revealing an identified or identifiable natural person’s racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, and the processing of genetic information, biometric information for the purpose of uniquely identifying a natural person, data concerning health, or information concerning an individual’s sex life or sexual orientation, and data relating to offenses, or criminal convictions.
   2. With respect to California residents, in addition to the preceding, the term also includes national origin or ancestry, sexual orientation, sex (including, gender, gender identity, and gender expression), pregnancy, childbirth and medical conditions related to same, age, physical or mental disability, veteran status, genetic information and citizenship.

4. Process, Processes, Processed or Processing :

   1. Means any operation or set of operations which is performed on Personal Data or Personal Information or Sensitive Personal Data or on sets of Personal Data or Personal Information or Sensitive Personal Data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

5. Consent :

   1. Any freely given, specific, informed, and unambiguous indication of the Data Subject’s wishes by which the Processing of their Personal Data, Personal Information and/or Sensitive Personal Data via a statement or by a clear affirmative action, signifies agreement to the processing of their Personal Data, Personal Information and/or Sensitive Personal Data.

6. Data Subject :

   1. Relates to a particular natural person (i.e., an identified or identifiable natural person who may be represented by a legal representative (parent/ guardian) if required to whom the Personal Data relates. “Data Subject” only refers to current and previous employees, prospective candidates, current, prospective and previous customer personnel, current and previous partner/vendor personnel, website visitors, sub-contractors and visitors of the Company

7. Data Controller :

   1. Means a person or organization who (either alone, or jointly, or in common) determines the purposes for which and the manner in which any Personal Data are, or are to be, Processed. For the purposes of this Policy, references to Data Controller shall mean references to the Individual designated as the “Data Controller” in the Company from time to time

8. Data Processor :

   1. Is a person or organization who Processes the Personal Data on behalf of and under the instruction of the Data Controller.

9. Third Party :

   1. In relation to Personal Data or Personal Information or Sensitive Personal Data means any person other than the Data Subject, the Data Controller, or any Data Processor

3. Personal Information we collect and process and how we use it

1. Information we collect from Companies

   1. When a Customer Company indicates interest in our Service, we collect the following information through the lifecycle of Companies: The company name, company registration and tax information, billing information, payment information (including banking and credit card details), Authorised contact details (Including their email address, name, phone number, designation and cost centre)

2. Personal data we collect from Employee users, Users and Potential User

   1. We may collect the following information about Employee users, Users and Potential Users, depending on the Service and Companies preference: full name, email address, designation, address, phone number, cost centre, payment information gender, (including banking and credit card details), location, Tax identification information (such as PAN, NI number etc,), Unique identification IDs (such as driving license number, adhaar, social security etc.), Passport information, travel preferences (such as frequent flyer numbers) or any other information that may be required from time to time.
   2. This Data may be provided by you, you company’s HR (including other internal departments), third parties’ directly or indirectly to allow the Company to provide the Service requested by you, your Employer, or an authorised third party on your behalf. When you visit our Site, we use certain tracking data (“Tracking Information”).
   3. We use Google Analytics, Key Cloak, Drupal and our other in-house systems for Tracking Information.

3. Payment information

   1. If a third party is not paying for the service on your behalf, we will collect the billing and financial information necessary to process your charges for our services which require payment, which may include your postal and e-mail addresses.
   2. The Company may also receive the billing and payment information that you provide when your purchase is processed by another party, such as Razorpay, PayU, Paypal etc. Our Terms of Service explain our policies and terms relevant to our charges and billing practices.
   3. Please note that establishing an account with a third-party payment processor, like Razorpay, PayU, Paypal etc, may also be subject to additional policies.

4. Technical and usage information. When you access our websites or use our Services, we collect:

   1. Certain technical information about your mobile device or computer system, including IP Address and mobile device ID.
   2. The following Tracking Information is collected: phone number, email address, device ID, IP address. We collect your email address, IP addresses and device information, directly through inclusion of their sdk/pixel or any other information which may be required from time to time. Tracking Information is collected via the Site and our web-applications, as well as via our iOS and android implementations.
   3. Usage statistics about your interactions with the Service. This information is typically collected using server log files or web log files (“Log Files”), mobile device software development kits and tracking technologies like browser cookies to collect and analyse certain types of technical information. Some of the cookies the Service places on your computer are linked to your user ID number(s).

5. Cookies and automated information collection in order to:

   1. Analyse the usage of our sites and services.
   2. Provide a more personalized experience; and
   3. You can set your web browser to warn you about attempts to place cookies on your computer or limit the type of cookies you allow.

6. Other sources

   1. We may collect or receive information from other sources including third party information providers. This information will be used to supplement your profile - primarily to help you and your friends connect. It will be combined with other information We collect.

4. How we use the information we collect

1. In general, we collect, store, and use your information to provide you with a safe, smooth, efficient, and customized experience. For example, we may use information collected from you in any one or more of the following ways:

2. Provide, maintain, and improve our Service.

3. Provide and deliver our Service to our you, our customers and other stakeholders.

4. Investigate system issues that impact our ability to provide the Service to Users.

5. Updates, confirmations, security alerts and support and administrative messages.

6. Respond to your questions and requests and provide customer service.

7. Communicate to you about products, services, offers and promotions offered by us and others, we think may be of interest to you.

8. Monitor and analyse trends, usage, and activities in connection with our Service and improve and personalize the Service.

9. Personalize and improve the Service, content or features that match user profiles or interests.

10. We will not sell, rent, or share Personal Data with third parties outside of our company without your consent, except in the following ways:

    1. Law enforcement and internal operations

11. Personal Data may be provided where we are required to do so by law, or if we believe in good faith that it is reasonably necessary:

    1. To respond to claims asserted against the Company or to comply with the legal process (for example, discovery requests, subpoenas or warrants).
    2. To enforce or administer our policies and agreements with users.
    3. For fraud prevention, risk assessment, investigation, customer support, product development and de-bugging purposes; or
    4. To protect the rights, property, or safety of the Company, its users or members of the general public.
    5. We will use commercially reasonable efforts to notify users about law enforcement or court ordered requests for data unless otherwise prohibited by law.
    6. However, nothing in this Privacy Policy is intended to limit any legal defences or objections that you may have to any third-party request to compel disclosure of your information.

5. Data recipients, transfer, and disclosure of Personal Information

1. The Company does not share your Personal Information with third parties for their direct marketing purposes.

2. We reserve the right to use or disclose your Personal Information if required by law or if we reasonably believe that use or disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or comply with a law, court order, or legal process.

6. Business transfer

1. The Company may sell, transfer, or otherwise share some or all of its assets, including your Personal Data, in connection with a merger, acquisition, reorganization or sale of assets or in the event of bankruptcy.

2. Under such circumstances, the Company will use commercially reasonable efforts to notify its users if their personal information is to be disclosed or transferred and/or becomes subject to a different privacy policy.

7. Third – parties

1. We sometimes contract with other companies and individuals to perform functions or services on our behalf, such as software maintenance, data hosting, sending email messages, etc.

2. We necessarily have to share your Personal Data with such third parties as may be required to perform their functions. We take necessary steps to ensure that these parties take protecting your privacy as seriously as we do, including entering into Data Processing Addendum(s), EU Model Clauses and/or ensuring these third-parties have EU-U.S. and Swiss-US Privacy Shield certification.

8. Securing and protecting your data

1. We have implemented reasonable administrative, technical, and physical security measures to protect your personal information against unauthorized access, destruction, or alteration. For example:

   1. SSL encryption (https) where we deal with personal data. Personal Data is encrypted in transit using https/ssl/tls and encrypted at rest. Our database is encrypted, and data transferred using secure data transfer protocols.
   2. Additional OTP requirements for both our internal employees and for you when accessing our systems.
   3. Password protection on your account.
   4. Data is kept on secure, encrypted servers.
   5. Restricting staff access to Personal Data, protected by password logs and two factor authentications.
   6. Non-Disclosure Agreements with vendors
   7. Regular staff privacy and security training

9. Retention and Disposal of Personal Data or Personal Information

1. User Data: 7 Years from the date of termination of contract

2. Audit logs: 1 Year

3. Other records: 3 Years

10. Your rights in relation to your information

1. Access: You have the right to access information about the personal data we hold about you.

2. Right to be informed about the data that we collect, process and store.

3. Right to object to processing: You have the right to object to processing of your personal data.

4. Rectification: You have the right to request rectification of inaccurate personal data held about you.

5. Erasure: To the extent permitted by applicable data protection laws, you have the right to request erasure of personal data held about you.

6. Request to restriction of processing: This enables you to request to restrict the processing of your personal data in certain circumstances.

7. Rights in relation to automated decision-making, including profiling.

8. Portability: You have the right to obtain your personal data to enable you to reuse it.

9. To exercise any of these rights, please email us at info@lifafa.com

11. Access

1. You have the right to request certain information about our collection and use of your Personal Data over the past 12 months. We will provide you with the following information:

   1. The categories of Personal Data that we have collected about you.
   2. The categories of sources from which that Personal Data was collected.
   3. The business or commercial purpose for collecting or selling your Personal Data.
   4. The categories of third parties with whom we have shared your Personal Data.
   5. The specific pieces of Personal Data that we have collected about you.

2. If we have disclosed your Personal Data for a business purpose over the past 12 months, we will identify the categories of Personal Data shared with each category of third-party recipient as per CCPA/CPRA.

12. Deletion of your personal data

1. You have the right to request that we delete the Personal Data that we have collected from you. Under the California Consumer Privacy Act of 2018/California Privacy Rights Act (“CCPA/CPRA”), this right is subject to certain exceptions. For example, we may need to retain your Personal Data to provide you with the Services or complete a transaction or other action you have requested.

2. If your deletion request is subject to one of these exceptions, we may deny your deletion request.

13. Exercising Your Rights

1. To exercise the rights described above, you must send us a request as outlined below:

   1. Provide sufficient information to allow us to verify that you are the person about whom we have collected Personal Data (this will require you to send an email from the account in question or login credentials).
   2. Describe your request in sufficient detail to allow us to understand, evaluate, and respond to it. Each request that meets both of these criteria will be considered a “Valid Request.” We may not respond to requests that do not meet these criteria. We will only use Personal Data provided in a Valid Request to verify you and complete your request.
   3. You may submit a Valid Request by emailing info@lifafa.com

2. We will not discriminate against you for exercising your rights under applicable law. We will not deny you our goods or services, charge you different prices or rates, or provide you a lower quality of goods and services if you exercise your rights under applicable law.

3. However, we may offer different tiers of our Services as allowed by applicable data privacy laws (including the CCPA/CPRA) with varying prices, rates, or levels of quality of the goods or services you receive related to the value of Personal Data that we receive from you.

14. Complaints and Grievances

1. Any complaints or grievances received about our use of Personal Data, Personal Information or Sensitive Personal Data and any communications regarding enforcement of your privacy rights should be promptly directed to our Data Protection Officer Complaints. On info@lifafa.com

15. Severability

1. The invalidity or unenforceability of any part of this Policy shall not prejudice or affect the validity or enforceability of the remainder of this Policy.

2. If any provision of this Policy is held to be illegal, invalid or unenforceable in whole or in part in any jurisdiction, this Policy shall, as to such jurisdiction, continue to be valid as to its other provisions and the remainder of the affected provision; and the legality, validity and enforceability of such provision in any other jurisdiction shall be unaffected.

16. Updates to Our Policy

1. As We update, improve and expand the Site, this Privacy Policy & Disclaimer may change at Our sole discretion without notice, so please refer back to it periodically as You will be deemed to be governed by the terms of such modified Privacy Policy & Disclaimer, as it comes into effect from time to time.

2. By using our Service, you are deemed to have read, acknowledged and accepted all the provisions stated herein this Privacy Policy & Disclaimer, including any changes that we may make from time to time.