Privacy & Data Protection Policy

Executive Statement & Commitment to Privacy

At Evidands Investigation ("Evidands", "we", "our", or "us"), we recognize that the cornerstone of professional investigation and corporate verification is absolute integrity, strict discretion, and uncompromising adherence to privacy rights.

We are dedicated to safeguarding the personal and corporate information entrusted to us by clients, enterprise partners, and subject individuals during the performance of our due diligence and investigative assignments, strictly adhering to the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and applicable digital personal data protection mandates in India.

Scope & Applicability

This Policy applies to all personal, financial, biometric, identity, and commercial data collected by Evidands through:

• Our official website (evidands.com) and digital client interaction portals.
• Direct service engagements with corporate entities, financial institutions, insurance carriers, legal practitioners, and private individuals.
• On-ground physical field inspections, discreet source inquiries, public repository checks, and authorized verification processes.
• Communication channels including email, phone consultations, WhatsApp verification desks, and physical document collections.

Information We Collect

Depending on the specific mandate authorized by our client, we collect and process the following categories of information:

A. Client & Inquiring Party Data

To establish a formal engagement and execute service level agreements (SLAs), we collect client contact details, corporate registration, tax IDs (GST/PAN), billing records, and written authorization letters stating the lawful purpose of inquiry.

B. Subject / Candidate Verification Data

When conducting employee screenings, KYC validations, field verifications, or loan checks, data received with lawful basis or candidate consent includes:

• Identity & Demographic Data: Full name, aliases, date of birth, government identity records (Aadhaar/PAN/Voter ID/Passport as permitted by law).
• Residential & Commercial Address Data: Physical address coordinates, photographic proof of residence, geo-tagged premises audit records.
• Professional & Academic Credentials: Employment history, reference statements, academic degrees, professional license validations.
• Financial & Solvency Records: Income tax filings (ITR), bank statement authenticity, court litigation records, civil dispute registers.
• Insurance Claim & Incident Records: Hospitalization receipts, treatment logs, accident site audits, claimant statements.

Lawful Grounds & Purpose of Collection

Evidands processes information strictly under lawful, ethical, and legitimate business grounds, specifically:

• Verification & Due Diligence: Confirming the truthfulness of credentials presented by candidates, business partners, or loan applicants.
• Fraud Prevention & Risk Mitigation: Protecting insurers and financial institutions against staged claims, identity fraud, and asset pilferage.
• Legal & Litigation Support: Gathering factual ground evidence for corporate disputes, trademark violations, and judicial arbitration.
• Contractual Compliance: Fulfilling client instructions under formalized Non-Disclosure Agreements (NDAs) and verification mandates.

Methodology & Discretion in Data Handling

We do not engage in unauthorized wiretapping, unlawful interception, or methods prohibited under Indian law. All information is sourced through:

• Direct consent and documentation submitted by the subject.
• Authorized physical ground verifications and neighborhood reputation reviews.
• Open-source public records, regulatory filings, court cause lists, and gazette notifications.
• Official reference interviews conducted with relevant institutional authorities.

Data Security, Encryption & Confidentiality Protocols

Evidands enforces strict multi-tier technical and organizational security controls to shield all collected evidence from unauthorized access, loss, or alteration:

• Cryptographic Security: All digital files, case dossiers, and transmission streams are secured using modern encryption standards.
• Role-Based Access Control (RBAC): Only primary investigative officers assigned to a specific file have restricted access to underlying case data.
• Secure Physical Storage: Our Physical Data Warehousing facility incorporates 24/7 CCTV surveillance, biometric access, fire suppression, and perimeter logging.
• Non-Disclosure Governance: Every staff member, ground agent, and field officer is bound by legally enforceable perpetual non-disclosure agreements.

Third-Party Disclosures & Statutory Sharing

Evidands never sells, trades, rents, or commercializes personal data to advertisers, data brokers, or unauthorized third parties.

Information is disclosed solely under the following defined parameters:

• To the Mandating Client: Comprehensive, confidential investigative reports are delivered directly and exclusively to the authorized corporate client or legal counsel.
• To Law Enforcement & Judicial Bodies: Where compelled by valid subpoena, court order, or official statutory notice under Indian law.
• To Technical Infrastructure Providers: Secure hosting and encrypted storage providers under strict binding data processing agreements.

Retention & Secure Purging Protocols

We maintain investigative dossiers and field recordings only for the duration necessary to satisfy the primary mandate, audit requirements, or statutory limitation periods.

Upon expiry of the designated retention cycle, digital files are subjected to cryptographic erasure and physical records are incinerated or cross-shredded following DIN-66399 security guidelines.

Data Subject Rights

Subject to statutory investigative exemptions and legal requirements, individuals may reach out to Evidands to:

• Inquire about the nature of verification checks conducted with their lawful consent.
• Request rectification of erroneous factual data presented in reference documents.
• Lodge questions regarding the lawful basis of background screening assignments.

Grievance Redressal & Statutory Officer

In accordance with the Information Technology Act, 2000 and applicable governance rules, the contact details of our Data Compliance & Grievance Officer are set forth below: