Privacy Policy

1. Introduction

This Privacy Policy describes how Green Outdoors Global Private Limited (“Company”, “we”, “us”, or “our”), incorporated in Vadodara, Gujarat, India, collects, uses, stores, and protects information obtained through the WorkVisaCRM platform (“Service”), located at workvisacrm.com and related subdomains.

By accessing or using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the Service.

This Policy applies to all users of the Service, including agency administrators, team members, employer portal users, and visitors to our marketing website.

2. Data We Collect

2.1 Candidate Data

When your agency enters or imports candidate records into WorkVisaCRM, we store personal information about those candidates, which may include: full name, date of birth, passport details, contact information, employment history, medical examination results, visa documentation, photograph, and other recruitment-related data.

2.2 Employer & Client Data

We store information about employer companies and their authorised representatives, including company names, contact details, portal login credentials, and communication records.

2.3 Account Data

When you create a WorkVisaCRM account, we collect your name, email address, phone number, company name, country, and billing information.

2.4 Usage Data

We automatically collect information about how you interact with the Service, including IP addresses, browser type, pages visited, features used, and timestamps of actions. This data is used for security, analytics, and product improvement.

2.5 Cookies

We use cookies and similar technologies as described in our Cookie Policy.

3. How We Use Your Data

• Operating and maintaining the WorkVisaCRM platform and its features.
• Processing and fulfilling your subscription and billing requirements.
• Sending transactional notifications, deadline alerts, and service-related communications.
• Providing customer support and responding to enquiries.
• Analysing usage patterns to improve the Service.
• Detecting, preventing, and responding to security incidents and fraud.
• Complying with applicable legal obligations.

4. Legal Basis for Processing

We process personal data under the following legal bases:

• Contract Performance: Processing necessary to deliver the Service you have subscribed to.
• Legitimate Interests: Analytics, security monitoring, and improving the Service, where these interests are not overridden by your rights.
• Consent: Where required under the Digital Personal Data Protection Act 2023 (DPDPA 2023) or the EU General Data Protection Regulation (GDPR), we obtain your explicit consent before processing. You may withdraw consent at any time.
• Legal Obligation: Processing required to comply with applicable laws and regulations.

5. Data Sharing

We do not sell your personal data or candidate data to any third party, ever.

We may share data in the following limited circumstances:

• Service Providers: Cloud infrastructure providers, email delivery services, and analytics platforms who process data on our behalf under appropriate data processing agreements.
• Legal Disclosures: Where required by law, court order, or regulatory authority, we may disclose data to government bodies or law enforcement.
• Business Transfer: In the event of a merger, acquisition, or sale of assets, user data may be transferred as part of that transaction, subject to the same privacy commitments.

6. International Data Transfers

WorkVisaCRM is operated from India. Data may be processed on cloud infrastructure hosted in India and internationally. Where data is transferred outside India or the European Economic Area, we apply appropriate safeguards including Standard Contractual Clauses (SCCs) as required under GDPR, and follow the provisions of the DPDPA 2023 for cross-border transfers.

7. Data Retention

We retain personal data for as long as your account is active, or as needed to provide the Service. Upon account termination, we retain data for a period of 90 days to allow for account reinstatement, after which it is securely deleted or anonymised. Certain data may be retained longer where required by applicable law or for the prevention of fraud.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Correction: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data, subject to legal retention requirements.
• Right to Portability: Request your data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests.
• Right to Withdraw Consent: Where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint: File a complaint with your national data protection authority (for EU residents) or the Data Protection Board of India (for Indian residents under DPDPA 2023).

To exercise any of these rights, please contact us at crm@gogpl.in. We will respond within 30 days.

9. Cookies

Our use of cookies is described in detail in our Cookie Policy. You can manage cookie preferences through your browser settings.

10. Security

We implement industry-standard security measures to protect your data, including:

• AES-256 encryption for data at rest.
• TLS 1.3 encryption for all data in transit.
• Role-based access controls limiting data access to authorised personnel only.
• Audit logs for all user actions within the platform.
• Regular security assessments and vulnerability testing.

While we implement stringent security controls, no system can guarantee absolute security. We encourage users to use strong passwords and to report any suspected security incidents to crm@gogpl.in immediately.

11. Children

WorkVisaCRM is a business-to-business platform intended solely for use by organisations and their authorised adult employees. The Service is not directed at, and we do not knowingly collect data from, persons under the age of 18. If you believe a minor has provided personal data to us, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify registered users by email and update the effective date at the top of this page. We encourage you to review this policy periodically. Continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

13. Contact Us

For privacy-related enquiries, data subject requests, or to report a concern, please contact:

Green Outdoors Global Private Limited
Vadodara, Gujarat, India
Email: crm@gogpl.in