PRIVACY POLICY

Asire Consulting LLP (“Asire” or “we”) respects the privacy rights of our clients and personnel, and is committed to protecting all personal information in our possession or control. We have adopted this Privacy Policy to guide how we collect, use and disclose the personal information we require in the course of fulfilling our professional responsibilities and operating our business.

We take the privacy of our clients and our personnel very seriously. We have developed this Privacy Policy to clearly define our ongoing commitment to protecting the privacy rights of our clients and Asire personnel. Certain of the practices discussed in this Privacy Policy reflect requirements set out in Indian federal and/or provincial privacy legislation. Asire’s policy is to at all times adhere to the requirements of applicable law and professional responsibilities, and to be responsive to our clients and personnel who expect us to respect their privacy and to protect their personal information.

• Principle 2 – We are accountable for the personal information in our possession or control.
  • Asire is accountable for all personal information in our possession or control. This includes any personal information that we receive directly, for example, from individual clients and Asire personnel, as well as any personal information that we may receive indirectly, for example, through corporate and government clients. We have established policies and procedures aimed at protecting the personal information of our clients and Asire personnel.
  • Understanding the importance of our client’s data, Asire specifically designated a Data Handling Manager to ensure appropriate handling of the data and who looks after the implementation of the Asire’s Privacy Policy. Also on a monthly basis a report is also submitted with the top management that privacy policy is properly being implemented throughout the organisation.
  • We consistently educate / train the Asire personnel and the third parties engaged by us about our Privacy Policy and their role in protecting the personal information of our clients and personnel.
  • We also ensure that we are compliant with existing and any amendments / changes to the fast evolving Privacy laws and regulations, wherever applicable through appropriate trainings time to time in this regard.
  • Asire reserves the right to modify or amend this statement at any time. In case of any change, it will be marked on the top of the privacy policy page with a revised last updated date. In case of material changes, all the concerned persons are informed through email. 
  • Any third party engagement is subject to the necessary trainings of our Privacy Policy by the said party and strict adherence to the same. Raising awareness about threats to data privacy and information security is an ongoing and dynamic process. It is one that we take very seriously, and it is reflected not only in mandatory training updated regularly for professionals in each of the Asire service lines
• Principle 2 – Asire will collect, use or disclose personal information about you with your consent except where collection, use or disclosure without consent is permitted or required by law.
  • The terms and conditions of every Asire professional services engagement are documented in an engagement letter. These terms and conditions include a discussion about how Asire may collect, use and disclose client personal information. By signing the engagement letter, the client is providing its consent to the collection, use and disclosure of personal information described in the terms and conditions. If a client provides us with personal information relating to a third party, by signing the engagement letter the client represents and warrants that they have obtained consent from the third party to allow us to collect, use and disclose their personal information as described in the engagement letter.
  • Before the commencement of any project/ assignment, Asire’s top management/concerned team leader with the objective of the client data protection and privacy conveys a strict step plan along with responsibilities of each team member for the entire assignment and circulates with the concerned team / who will be involved in the project / assignment. The partner strictly monitors that the step plan is strictly followed and the sensitive data is restricted to only partner level and not shared with the junior team members. Also, in case of unexpected movement/activity in the email box of the team member, the partner gets a immediate security alert of any such instance.
• Principle 3- Asire protects your personal information with safeguards appropriate to the sensitivity of the information.
  • Asire will protect personal information by using physically secure facilities, industry standard security tools and practices, and clearly defined internal policies and practices. Security measures are in place to prevent the loss, misuse and alteration of the personal information under our control. Personal information is stored in secured environments that are not available to the public (e.g., restricted access premises, locked rooms and filing cabinets).
  • With respect to sharing of client data and our deliverables, all employees are mandated to share the same only through the official emails with the Asire domain and no sharing is permitted through any other media than such email. Also, in case an employee tries to share the data over his personal email id, immediate strict action is taken by the top management against such employee.
  • Also, we do not share the client’s personal data with anyone outside India via International transfer. Accordingly, we keep a track of email boxes of the employees in this regard.
  • Further, entire client data is not available to all team members and sensitive data can be accessed only by the partner and senior team member. Also, the entire data is on Google drive with level wise restricted access and it creates logs of the modifications made by any team member, which team leader/partner keeps a track at regular intervals.

Conclusion

We have implemented generally accepted standards of technology and operational security in order to protect personally-identifiable information from loss, misuse, alteration, or destruction. Only authorized personnel and third party vendors have access to your personal information, and these employees and vendors are required to treat this information as confidential.