This policy explains what personal data Veritas HR Solutions (“we”, “us”) collects on veritashrsolutions.com, why, who sees it, how long we keep it, and what you can do about it. It is written to meet the Digital Personal Data Protection Act, 2023 and the rules made under it. Last updated: 2 September 2026.
Who is responsible
Veritas HR Solutions, South Bopal, Ahmedabad, Gujarat, India, is the data fiduciary for this site. Contact for privacy matters: [email protected].
What we collect
- Account data — your email address, a display name, a password (stored hashed, never readable by us), and the one-time codes we send to confirm your email. If you claim or submit a listing, your role at the business and any proof you provide.
- Review content — ratings, written text, project type, budget band, your role and company size. Reviews are public and shown with your display name.
- Enquiry details — when you contact a listed provider or vendor through the site: your name, email, phone number and message.
- Upvotes — which products your account has voted for.
- Technical data — a one-way hash of your IP address, kept for rate limiting and abuse prevention; the pages you request, in ordinary server logs; and the cookies described in our cookie policy: a login session cookie, small “veritas_” cookies that stop double-submission and repeat voting, a Cloudflare security cookie, and optional analytics that are off unless you turn them on.
We do not collect identity documents, payment card details, government identifiers or precise location. Business contact details shown on listings (company phone, email, address) are business data published by the company or taken from its own website and public records, not personal data about you.
Why we use it, and on what basis
- To run your account, publish your reviews and record your votes — with your consent, given when you register and confirm your email.
- To pass your enquiry to the provider you chose — with your consent, given when you send it. The form says who will receive it.
- To verify listings, claims and reviews, and to prevent spam, vote rings and abuse — as a legitimate use necessary to keep the directory honest and the service working.
- To send you service emails: one-time codes, confirmation that a listing or review was approved, and notice that an enquiry has arrived. We do not send marketing email.
- To comply with law, including responding to lawful requests from Indian authorities.
Who we share it with
- The provider or vendor you enquire with. Your enquiry, with your name, email, phone and message, is delivered to the listed business and shown to the account holder who has claimed that listing. From then on that business is responsible for how it handles your details.
- Data processors who work for us: Cloudflare (network security and caching), our hosting provider (servers and backups), and our transactional email provider (sending one-time codes and notifications). They act on our instructions and do not use your data for their own purposes. Some of them store data outside India; we transfer only what the service needs.
- Nobody else. We do not sell personal data, share it with advertisers, or give reviewer contact details to the businesses being reviewed.
How long we keep it
- Enquiries: 24 months from the date sent, then deleted.
- Accounts, reviews and votes: until you delete your account. When you do, your reviews are removed from the site or, if you prefer, kept with your name replaced by “Former member”.
- Claim, correction and removal requests: kept as an audit record of what was changed and why, with the requester’s email, for as long as the listing or its blocklist entry exists.
- IP hashes and server logs: 30 days. Backups: 30 days, then overwritten.
Your rights
Under the DPDP Act you can ask us for a copy of the personal data we hold about you, have it corrected or completed, have it erased, withdraw consent you gave earlier (which stops the processing that relied on it, without affecting what was done before), and nominate another person to exercise these rights for you if you die or become unable to. You can also delete your account yourself from your account page. To exercise any right, email [email protected] from the address on your account. We respond within 30 days.
Grievance officer
If you are unhappy with how we handled a request, write to our grievance officer: Rita Patel, [email protected], South Bopal, Ahmedabad, Gujarat, India. If the answer does not satisfy you, you may complain to the Data Protection Board of India.
Children
The site is for people acting for a business. You must be 18 or older to create an account. We do not knowingly collect data from anyone younger, and we delete such accounts when we find them.
Security
All traffic is encrypted over HTTPS. Passwords are hashed. Every form is protected against automated abuse by Cloudflare Turnstile, a hidden honeypot field and rate limits, and nothing you type is stored as raw HTML. Administrator accounts require two-factor authentication. Backups are taken daily and stored off-site for 30 days. If a breach affects your data we will tell you and the Data Protection Board without undue delay.
Visitors from the European Union or United Kingdom
The site is aimed at India, but if you use it from the EU or UK the GDPR and UK GDPR also apply. Our legal bases are consent (accounts, reviews, enquiries, optional analytics) and legitimate interests (security and abuse prevention). Your data is processed in India and by the processors named above; transfers rely on their standard contractual clauses. You have the rights of access, rectification, erasure, restriction, portability and objection, and may complain to your local supervisory authority. Requests go to [email protected].
Changes
When this policy changes we update the date at the top and, for changes that affect how your data is used, email account holders before the change takes effect.