Privacy Notice Last Updated: 01-April-2026

We at Masoom Group ("us" or “our” or "we") respect your privacy and are committed to protecting your Personal Data in accordance with applicable laws.

This Privacy Notice outlines our practices in relation to the collection, storage, usage, processing, and disclosure of Personal Data that you have consented to share with us when you access, use, or otherwise interact with our websites. This Privacy Notice further describes the rights you have with respect to your Personal Data. At Masoom Group, we are committed to protecting your Personal Data and respecting your privacy.

We do collect your personal information and process your Personal Data in accordance with the Digital Personal Data Protection Act, 2023 and other national laws which relate to the processing of Personal Data.

If you are a visitor from another country, we acknowledge that you may have rights under your local data protection laws. We will make reasonable efforts to respect such rights where applicable.

1. Definitions and Key Terms

1.1. Child: means an individual who has not completed eighteen (18) years of age.

1.2. Cookies: A small file placed on your device by our websites or the Platform when you either visit or use certain features of our websites or the Platform. It allows the websites to remember your actions or preference for a certain period.

1.3. Data Fiduciary: means any person who alone or in conjunction with other person(s) determines the purpose and means of processing of Personal Data.

1.4. Data Principal: means the individual to whom the Personal Data relates and where such individual is a Minor or Person with Disability includes the parents or lawful guardian of such Minor or Person with Disability.

1.5. Data Processor: means any person who processes Personal Data on behalf of a Data Fiduciary.

1.6. Personal Data: means any data about an individual who is identifiable by or in relation to such data.

1.7. Processing: in relation to Personal Data means an automated operation or set of operations performed on digital Personal Data, and may include operations such as collection, recording, organisation, structuring, storage, adaptation, alteration, retrieval, use, alignment or combination, indexing, sharing, disclosure by transmission, dissemination or otherwise making available, restriction, erasure or destruction.

2. How we collect the data

2.1 Information that you provide to us: We receive and store any information you enter on our websites through job application form and subscribe to Masoom Newsroom.

2.2 Automatic Information We Collect: We use Cookies to run analytics whenever you interact with us through the websites.

3. Purpose of Data Collection and Processing

S. No.	Purpose/Activity	Data Elements
i.	To Process job applications.	Full Name, Mobile Number, Email ID, Resume, Cover Letter.
ii.	To provide updates about future job opportunities.	Email Id, Mobile Number.
iii.	To share updates via the Masoom Group newsroom subject to prior user consent.	Name, Email ID
iv.	To manage our relationship with you including notifying you about changes to our terms or Privacy Policy/Notice.	Email Id.
v.	To use data analytics to improve our websites, services, marketing, customer relationships and experiences.	Online Identifiers, Technical Data, Usage Data.

4. Lawful basis of Processing

Legitimate Use: We are dedicated to safeguarding individuals’ privacy and ensure that Personal Data is collected and processed for specific, legitimate uses as prescribed under Section 7 of DPDPA 2023. These include:

a) Voluntary sharing of Personal Data for specified purposes by the data principal.

b) Performance of functions by the state as per applicable laws or ensuring national security, sovereignty, and integrity of India.

c) For fulfilling any obligation under any law.

d) For compliance with any judgment or decree or order issued under any law.

e) For taking measures to provide medical treatment or health services to any individual during an epidemic.

f) Responding to health and other emergencies.

g) Employment related processing.

h) Processing during disasters and breakdown of public order.

Any changes to data processing purposes (mentioned in clause 3) will be communicated to individuals in advance.

5. Permissible to Children and Persons with disabilities

These websites are not intended for children under 18 years. We do not knowingly collect or process children’s Personal Data. Age-gating or self-declaration measures may be applied. If an accidental collection occurs, we will delete such data promptly.

6. Sharing of Data

We do not share your Personal Data with any third-party service providers. All internal data handling is conducted in accordance with strict data protection and confidentiality standards.

7. Rights and Duties as Data Principal

Depending on the laws of the country that applies to you, you may have different rights regarding the data we hold about you. You may be entitled to the following rights in relation to your data:

7.1 Right to Access Information: You can request access to your Personal Data anytime you want to from us.

7.2 Right to correction and erasure: You have the right to request corrections to any inaccurate or incomplete data we hold about you. You also have the right to request the erasure of your data in specific situations.

7.3 Right of grievance redressal: You have the right to access appropriate grievance redressal mechanisms to ensure timely and effective resolution of any complaints or concerns regarding the Processing of your Personal Data.

7.4 Right to Nominate: You may nominate an individual to exercise your data rights in case of your incapacity or death. This person can manage, access, or request changes to your Personal Data on your behalf, subject to proper verification.

If you are a resident of a country with specific data protection laws, you may have additional rights only to the extent your country seeks to protect your Personal Data

To exercise the above rights, you can either raise a request through e-mail to dpo@masoom.in.

Further if you are not satisfied with our redressal, you may lodge a complaint with the Data Protection Board of India, after exhausting the grievance redressal mechanism provided by our Platform.

Duties of Data Principals: You are expected to provide accurate, verifiable authentic and up-to-date information to us to facilitate proper data Processing. You should cooperate with us to ensure compliance with applicable data protection norms and exercise your rights responsibly, keeping in mind our legitimate uses and legal obligations. Where required by law, you must provide informed consent for the processing of your Personal Data.

8. Social Media

We manage channels, pages, and accounts on various social media platforms such as Facebook and Instagram to share information and engage with employees, vendors, clients, and the public. We may monitor and record comments and posts made about us on these platforms to help improve our products and services.

We advise you to use official and authorized channel only for communication purposes. Please be aware of communicating with us through publicly accessible social media sites with the following information:

8.1. Content that is inappropriate, offensive, or insulting toward individuals.

8.2. Any content that is unlawful, harmful, threatening, abusive, harassing, defamatory, obscene, vulgar, invasive of privacy or publicity rights, hateful, or otherwise offensive based on race, ethnicity, or other grounds.

8.3. Information that infringes on the rights of others, including intellectual property rights.

8.4. Confidential or Personal Data, such as financial details, bank account information, and transaction records.

8.5. Sensitive Personal Data, including:

· Special categories of information like racial or ethnic origin, political views, religious or philosophical beliefs, trade union membership, genetic or biometric data used for identifying individuals, health information, or details about a person’s sex life or sexual orientation.

· Other sensitive data such as criminal records and national ID numbers.

Masoom Group is not accountable for any content shared on third-party social media platforms unless it is officially published by our authorized representatives. Our responsibility is limited solely to the Personal Data we lawfully collect from these platforms, which is Processed only for legitimate business purposes in accordance with applicable data protection laws.

9. Data Security

We care about keeping your Personal Data safe and secure. We also ensure that any service providers we work with protect your data in the same way we do. Our security measures include, but are not limited to, encryption, data masking, and access control. If you think your data has been misused, lost, or accessed without permission, please reach out to us at dpo@masoom.in.

10. Data Retention

We retain your Personal Data only as long as necessary for operational purposes. You can request data deletion and data removal by contacting us at dpo@masoom.in as required by law and for the duration necessary to fulfil its intended purpose, in accordance with our internal data retention and disposal policy.

Your Personal Data is securely processed and stored only for as long as required for its purpose or as mandated by applicable laws. Once the retention period expires, your data will either be deleted or archived to meet legal retention obligations or in accordance with applicable statutory limitation periods.

11. Breach Notification

Although the Platform undertakes appropriate technical and organisational measures to ensure safety and protection of the Personal Data of Users, in the event of any data breach, we shall notify you as soon as possible about the breach, including its nature, extent and the timing and location of its occurrence, on your registered e-mail ID. In congruence with the Digital Personal Data Protection Act, 2023 (DPDPA), we shall also intimate the Data Protection Board of India within appropriate timelines.

12. Contact and Grievance Redressal

If you have any questions regarding this Privacy Notice or the protection of your Personal Data, you may reach out to our DPO:

Data Protection Officer (DPO)

Email: dpo@masoom.in

Phone: 6366914829

We aim to respond to all grievances within 90 days as per the DPDPA.

13. Changes in the Privacy Notice:

13.1 From time to time, we may need to update or make changes to our Privacy Notice to ensure it remains accurate and in compliance with applicable laws and regulations.

13.2 Whenever such updates or changes are made, we will promptly upload the revised Privacy Notice to our websites.

13.3 We encourage you to periodically visit the page for the latest information on our privacy compliance. Your continued use of our services after any updates to the Privacy Notice will be considered as your acceptance of those changes.

13.4 You understand that you have the option to access this Privacy Notice in English or in any of the languages specified in the Eighth Schedule to the Constitution of India (you can request for the same by reaching out to us at dpo@masoom.in. In the event of any inconsistency or conflict between the English version and a translated version, the English version shall prevail.