Privacy Policy

Procor Compliance Solutions LLP ("Procor", "we", "us") respects your privacy. This policy explains what personal data we collect through procor.co.in and in the course of our business, why we collect it, how we protect it, and the rights you have over it.

It is written to meet the requirements of the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 as their provisions come into force.

1. Who we are

For personal data you share with us directly (for example, through our website), Procor is the Data Fiduciary: we decide why and how that data is processed.

2. Personal data we collect

Information you give us

• Consultation and callback requests: your name, work email, company, phone number, the service you are interested in, and anything you write in your message.
• Free resource downloads: your name, work email, company and, if you choose to give it, your phone number; and whether you opted in to receive compliance updates.
• Calls, emails and WhatsApp messages: the contact details and information you choose to share when you contact us.
• Client relationships: the names, roles and contact details of people at our clients and prospective clients, and the information needed to agree, deliver and invoice our services.

Information collected automatically

When you visit our website, our hosting server records standard technical data such as your IP address, browser type, the pages you request, and the date and time of the request. We use this to operate and secure the website.

Cookies. Our website does not itself set advertising or analytics cookies. Some embedded third-party features may set their own cookies or collect technical data when you use them (see section 6). If we introduce analytics or similar technologies, we will update this policy first and ask for your consent where the law requires it.

Children. Our services are meant for businesses. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, please contact us and we will delete it.

3. Why we use your personal data

We use personal data only for the purposes below, and only to the extent necessary for them:

We do not sell personal data, and we do not use it for automated decision-making that produces legal or similarly significant effects on you.

4. Personal data we process on behalf of our clients

To deliver payroll, statutory compliance, HR operations and accounting services, our clients share with us personal data about their employees and other individuals. This can include names, contact details, identity and tax identifiers (such as PAN and UAN), attendance and salary records, bank account details for salary payments, and statutory filing information.

For this data, our client is the Data Fiduciary and Procor acts as a Data Processor under a written contract. We process it only on our client's documented instructions and for the purpose of delivering the agreed services, keep it confidential, protect it with the safeguards described in section 8, and return or delete it when the engagement ends, unless the law requires us to keep it.

If you are an employee of one of our clients and want to access, correct or erase your data, please contact your employer first. We will assist them in responding to your request. You may also write to our Grievance Officer (section 11).

5. Sharing personal data

We share personal data only when necessary, and only with:

• Service providers who help us run our business, such as website hosting, email and IT providers, and scheduling tools. They may process data only on our instructions and must keep it secure.
• Government authorities and statutory portals, when filing returns or registrations on a client's behalf, or when required by law, court order or a lawful request.
• Professional advisers such as auditors and lawyers, under a duty of confidentiality.
• A successor business, if Procor is involved in a restructuring, merger or sale, subject to this policy.

6. Third-party services on our website

Some features of our website are provided by other companies, which process data under their own privacy policies:

• Calendly: if you choose to book a meeting through our calendar link, your booking details are collected by Calendly.
• Google Maps: our contact page links to Google Maps for directions; Google processes data when you open it.
• Google Fonts: our website's fonts are loaded from Google's servers, which receive your IP address.
• WhatsApp: if you message us on WhatsApp, the conversation is handled through WhatsApp (Meta).
• Procor HRMS: links to procorhrms.com take you to the website of Procor Digital Solutions Pvt Ltd, a Procor group company, which has its own privacy policy.
• Social media: links to our LinkedIn, Facebook, Instagram and YouTube pages take you to those platforms.

7. International transfers

Some of our service providers may store or process data outside India. Where this happens, we transfer personal data only as permitted under Indian law, including any restrictions notified by the Central Government, and take reasonable steps to ensure it remains protected.

8. How we protect personal data

We maintain reasonable security practices and procedures appropriate to the nature of the data, including:

• access to personal data limited to people who need it to do their work, and bound by confidentiality;
• encrypted connections (HTTPS) for our website and forms;
• access controls, passwords and secure storage for systems holding client data;
• documented processes for handling, retaining and deleting data; and
• regular review of our safeguards.

No method of transmission or storage is completely secure. If a personal data breach occurs, we will act promptly to contain it and will notify affected individuals, our clients, and the Data Protection Board of India or other authorities as the law requires.

9. How long we keep personal data

We keep personal data only for as long as we need it for the purposes described above:

• Enquiries and resource downloads: for as long as needed to respond and follow up, or until you ask us to delete it or withdraw consent, subject to the minimum period below.
• Client and contract records: for the duration of the relationship and afterwards for as long as required under tax, accounting, corporate and other applicable laws.
• Data processed for clients: as instructed by the client and as required by law.

Where the law requires a minimum retention period (for example, the one-year period for personal data and related logs under the Digital Personal Data Protection Rules, 2025, once in force), we retain the data for at least that period before deletion.

10. Your rights

Subject to applicable law, you have the right to:

• access a summary of the personal data we hold about you and how we process it;
• correct, complete or update inaccurate or incomplete personal data;
• erase personal data that is no longer needed, unless we must keep it by law;
• withdraw consent at any time where we rely on consent, as easily as you gave it. This does not affect processing already carried out;
• nominate another person to exercise your rights in the event of your death or incapacity; and
• grievance redressal, as described in section 11.

To use any of these rights, email info@procor.co.in with the subject line "Privacy request". We may need to verify your identity before acting on your request. To stop receiving compliance updates, reply to any update email or write to us.

11. Grievance Officer

If you have a question, concern or complaint about how we handle personal data, please contact our Grievance Officer:

We will acknowledge your grievance promptly and resolve it within the time required by law: currently one month under the Information Technology Rules, 2011, and in any case within 90 days under the Digital Personal Data Protection Rules, 2025. If you are not satisfied with our response, you may complain to the Data Protection Board of India once the relevant provisions are in force.

12. Changes to this policy

We may update this policy from time to time, for example when the law changes or we change how we process data. The date at the top of this page shows when it was last updated. If we make significant changes, we will highlight them on this page and, where appropriate, notify you directly.