Privacy notice
How RG Biocosmetic Private Limited handles the personal data of its employees, candidates and former employees, under the Digital Personal Data Protection Act, 2023.
Who is responsible
RG Biocosmetic Private Limited (CIN U74900DL2000PTC104589), registered office 307 Ashirwad Enclave, IP Extension, Plot 104, Patparganj, New Delhi – 110092, is the Data Fiduciary for the data described here.
Questions, requests and complaints about your data go to hr@qraaherbal.com.
What is held, and why
- To employ you. Name, contact details, date of birth, address, emergency contact, photograph, education and previous employment. Held because an employer cannot pay, insure or contact somebody it knows nothing about.
- To pay you and to meet statutory obligations. PAN, Aadhaar, bank account, UAN, ESIC number, salary, attendance and leave. Required by the Income Tax Act, the EPF scheme and the applicable wage legislation — not optional for either side.
- To run the employment. Performance reviews, goals, feedback, training records, assets issued to you, expenses, advances and helpdesk requests.
- To hire. For candidates: name, contact details and CV, and the record of the stages an application reached.
How long it is kept
| What | How long | Why |
|---|---|---|
| Identity and contact details of people who have left | 365 days | Aadhaar, passport, driving licence, voter ID, bank details, home addresses, emergency contacts and personal contact details. Once somebody has left these serve no continuing purpose, so they are erased. |
| Employment record | No fixed period | Who worked here, in what role, from when to when. Kept because the company must be able to answer a question about any period it has filed returns for, and to verify past employment when asked. |
| Payroll, tax and statutory filings | No fixed period | Salary sheets, payslips, TDS, PF and ESIC records. Retention here is set by the Income Tax Act, the EPF scheme and the applicable wage legislation, not by this policy — erasing them to satisfy a privacy window would breach a different law. |
| Candidates who were not hired | 180 days | Name, email, phone and CV. The application history is kept without them, so the company can still show that a decision was made and how many people were considered. |
| Audit log | 366 days | Who did what in the system. Kept so a question about a past decision can be answered, and archived rather than deleted when the window passes. The database itself refuses to delete an entry less than a year old, so this window cannot be configured shorter than that. |
Erasure runs on a schedule, not on request alone. When the period for a category passes, that data is overwritten automatically and the files behind it are deleted from storage.
Your rights
- To see what is held about you. If you have an account, there is a copy of your own record under your account settings. If you do not, write to hr@qraaherbal.com.
- To have it corrected. Most of it you can edit yourself; tell HR about anything you cannot.
- To have it erased. Within the limits above — data the company is required by law to keep cannot be erased on request, and we will say which parts those are.
- To complain. To hr@qraaherbal.com first, and to the Data Protection Board of India if you are not satisfied with the answer.
Who else sees it
The system sends email through a third-party delivery service and stores uploaded documents with a third-party storage provider. It does not sell personal data, does not use it for advertising, and does not transfer it outside India except insofar as those providers operate outside it.