Data Privacy & GDPR

1 Data We Collect

We may collect: contact details, professional information, payroll data, EPF/UAN details, resumes, and technical usage data. For EU residents, we act as a data controller for client HR services and as a processor for recruitment.

2 Legal Basis for Processing

• Performance of a contract (employment, client agreement)
• Compliance with Indian labour laws and EPF regulations
• Legitimate business interests (improving services)
• Consent (for marketing or non-essential cookies)

3 Data Subject Rights

Individuals have the right to access, rectify, erase, or restrict processing of their data. EU residents also have data portability rights. Submit requests to privacy@fogsconsultants.com.

4 Data Security

We implement encryption, access controls, and regular audits. All third-party vendors are vetted for compliance. See our Information Security Policy for details.

5 International Transfers

Data is primarily stored in India. For clients requiring GDPR compliance, we use Standard Contractual Clauses (SCCs) for any transfer outside the EEA.

6 Data Retention

We retain data only as long as necessary for legal, compliance, and business purposes. EPF records are kept per statutory requirements.

7 Contact DPO

For privacy concerns, contact our Grievance Officer: Francis Thaliyacherry, dpo@fogsconsultants.com.