India's first.
Italy's finest.

DATA PRIVACY & PROTECTION POLICY

Effective Date: 10.07.2025 Date of Last Change: 10.07.2025

Document Statistics

Document Title	Data Privacy & Protection Policy
Document ID	SG-IS-POL-12
Date of Release	10.07.2025
Template Version	1.0
Data Classification	Internal
Document Status	Final

Document History

Version	Change Description	Author	Reviewer	Review Date	Approver	Approval Date
1.0	First Release	Abhishek Rana / Niyati Malik	Neeraj K. Sharma	10.07.2025	Satyendra Tripathi	10.07.2025

Table of Contents

1. Scope
2. Objective
3. Document Responsibilities
4. Compliance
5. Exceptions
6. Review
7. Collection, Use, and Protection of Personal Data
• Safeguarding Your Privacy
• Purpose of Data Collection
• Methods and Technologies Used
• Types of Personal Data Collected
8. Information Sharing & Disclosure
9. Data Security
• Data Masking Techniques/Procedures
• Access Control
10. How We Use Your Personal Information
• Your Rights Under the DPDPA
11. Change / Modification

1. Scope

This Policy applies to all Signatureglobal employees, entities, and third parties involved in the collection, processing, or storage of personal data. It covers all personal data related to customers, employees, vendors, and partners across all business functions, systems, and locations.

2. Objective

Signature Global (India) Limited is responsible for maintaining and protecting the personal information under our control. We take your privacy seriously in compliance with the Digital Personal Data Protection Act, 2023 (DPDPA) and are committed to safeguarding your personal information.

3. Document Responsibilities

The Chief Information Officer (CIO) shall be responsible for implementation, incident response and approving all policies, including any subsequent updates or modifications.

4. Compliance

Employees shall comply with the policies and any failure to abide by the Policies by any employee may result in disciplinary action.

5. Exceptions

Any exception shall require explicit written approval of the CIO, including but not limited to legal, regulatory, or statutory compliances.

6. Review

The Policies shall be formally reviewed by CIO or a designated member of the IT or compliance team.

7. Collection, Use, and Protection of Personal Data

7.1 Safeguarding Your Privacy

We are committed to protecting the personal information of all individuals whose data we collect.

7.2 Purpose of Data Collection

We collect personal data to deliver services, improve user experience, and offer additional options that may be relevant to your needs.

7.3 Methods and Technologies Used

• Cookies
• Flash Cookies
• Web Beacons

7.4 Types of Personal Data Collected

• Name, gender, address, phone number, date of birth, email, etc.
• PAN, Aadhaar number, KYC status, signature, photograph, etc.

8. Information Sharing & Disclosure

We may disclose your personal information to entities within Signature Global and carefully selected third parties where required for service delivery or legal compliance.

9. Data Security

We implement reasonable security measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction.

9.1 Data Masking

Data masking techniques are applied to protect sensitive data wherever technically feasible.

Access Control

Access to sensitive data shall be restricted based on the principle of least privilege.

10. How We Use Your Personal Information

We employ industry-standard security protocols, including firewalls and Transport Layer Security, to protect your personal information.

10.1 Your Rights Under the DPDPA

• Right to Access
• Right to Rectification
• Right to Erasure
• Right to Object
• Right to Data Portability
• Right to Withdraw Consent

11. Change / Modification

The data privacy policy may be modified or amended from time to time. Updated versions will be published on this page.

Contact Us

If you have any queries or suggestions, please contact: Infosec@signatureglobal.in