1. Objective
National E-Governance Services Limited (NeSL) has adopted this privacy policy aimed at protecting Information, including the individual’s / user’s Sensitive personal data or information as disclosed and/or submitted to NeSL. The privacy policy is in compliance with the Data Protection Laws which includes Digital Personal Data Protection Act, 2023(“DPDP Act”), the Information Technology Act, 2000 and rules/ regulations made thereunder such as the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information), Rules 2011 (the “IT Rules”), to the extent applicable.. NeSL is committed to protect its user’s personal information and/or Sensitive Personal Data and strives to maintain the privacy of Information submitted by a user. NeSL collects personal information for a variety of regulatory and business purposes. These include, but are not limited to:

• Provide core information utility (IU) services &other incidental services under Insolvency and Bankruptcy Code (IBC) and regulations thereunder.
• Respond to the request for service or assistance.
• Provide, maintain and improve NeSL products and services.
• Anticipate and resolve issues and concerns with NeSL products and services.
• Ensure adherence to legal and regulatory requirements for prevention and detection of frauds and crimes.

2. Definitions

In this privacy policy, unless the context otherwise requires, following expressions shall have the meanings as assigned to them below:

• “Financial information” shall have the same meaning as assigned to it under [sub-section (13) of section 3] of IBC 2016.
• “Information” shall have the meaning as assigned to it under [clause (v) of sub-section (1) of section 2][1] of IT Act or as may be amended from time to time;
• “Personal Information” shall have the meaning as assigned to it under [sub-clause (i) of clause (1) of Rule 2][1] of the ITRulesor as may be amended from time to time;
• “Personal Data” shall have the meaning as assigned to it under the clause 2(t) of the DPDP Act.
• “Sensitive personal data or information” shall have the meaning as assigned to it under Rule 3 of the IT Rules or as may be amended from time to time;
• “Digital personal data” shall have the meaning as assigned to it under the clause 2(n) of the DPDP Act.

3. Confidentiality of Personal Information

NeSL preserves the confidentiality of all information provided, by adhering to the following principles:

• NeSL collects the Personal Information or digital personal data that it is required to enable NeSL to establish communication with the visitor/ customer.
• NeSL will not disclose Personal Information or digital personal data to any external organization without the consent of the visitor/ customer, unless required by statutory laws and regulations, or required to be disclosed to Governmental or judicial bodies or quasi-government or agencies or regulators from time to time under proper authority.
• NeSL has put in place reasonable security practices and procedures designed to prevent unauthorized access to the personal information or digital personal data by anyone, including its own staff as per Data Protection Laws and also a grievance redressal mechanism in extending the IU service.
• NeSL, its staff and any agent or third-party service provider does not have access to customer information and in the event of being directed to access such information, they shall observe their confidentiality obligations.

4. Security Practices and Procedures

NeSL adopts reasonable security practices and procedures, to include technical, operational, managerial and physical security controls in order to protect all Information from unauthorized access, or disclosure while it is under NeSL control.

• NeSL’s security practices and procedures limit access to Information on a directed-only basis. Further, NeSL employees are bound by Code of Conduct which obligates them to protect the confidentiality of personal information or digital personal data.
• Necessary steps are taken to ensure that NeSL’s third parties adopt reasonable level of security practices and procedures to ensure security of the Information.
• NeSL may retain the Information so collected as long as required to provide customers/users with its services or if otherwise required under any law for the time being in force.
• While disposing of the Information, NeSL uses procedures to erase it or render it unreadable (for example, shredding documents and wiping electronic media).
• Internet use – NeSL maintains the security of internet connections, however for reasons outside the control of NeSL, security risks may still arise. Any personal information or digital personal data transmitted to NeSL will therefore be customer risk. However, NeSL will strive to ensure the security of customer information.
• NeSL observes reasonable security measures to protect the personal information or digital personal data against hacking and virus dissemination.
• NeSL adheres to the information security guidelines as provided by Insolvency and Bankruptcy Board of India (IBBI) in Guidelines for Technical Standards for performance of core services and other services under the IBBI (IU) regulations 2017.
• NeSL has adopted Information Security Management System (ISMS) as per International Organization for Standardization (ISO) Standards.

5. Feedback and grievances

NeSL is committed to safeguard all Information, collected and handled by NeSL. In case of any feedback or concern regarding protection of such Information, customers/users can contact NeSL through

Email helpdesk@nesl.co.in.

Alternatively, customers may also direct privacy-related feedback or concerns to the Grievance Officer whose details are as mentioned below:

Email: grievances@nesl.co.in

Working Days:
Monday to Saturday (Other than weekly holidays, declared holidays and public holidays)
Working hours: 9.00 AM to 6.00 PM