CPP Group India

Privacy Notice

1. Introduction

CPP Assistance Services Private Limited (“CPP India”, “CPP”, “we”, “our” or “us”) is committed to protecting the privacy of individuals whose personal data we process.

This Privacy Notice explains how we collect, use, store, share and otherwise process personal data collected through the CPP India website (“Website”) mainly www.cppindia.com, https://app.cppservices.in (“Customer Portal”), and related online interactions conducted through these channels (collectively, “Digital Platforms”).

This Privacy Notice applies only to personal data collected through the Digital Platforms and associated online interactions unless otherwise expressly stated.

For the purposes of applicable data protection laws, including the Digital Personal Data Protection Act, 2023 (“DPDP Act”), CPP Assistance Services Private Limited acts as the Data Fiduciary for the processing activities described in this Privacy Notice.

2. Personal Data We Collect
Information Provided by You
  • Name
  • Date of birth
  • Email address
  • Postal address
  • Mobile number
  • Information submitted through contact forms, enquiry forms or service requests
  • Details contained in complaints, requests, correspondence or communications submitted to us
  • Any other information voluntarily provided by you
Information Automatically Collected

When you access or use the Digital Platforms, we may automatically collect:

  • Internet Protocol (IP) address
  • Browser information
  • Device information
  • Operating system information
  • Digital Platforms usage information
  • Session information
  • Cookie information
  • Analytics information
  • Technical information relating to your interaction with the Digital Platforms

We collect only such personal data as is reasonably necessary for the purposes described in this Privacy Notice.

3. How We Use Personal Data

We may process personal data for one or more of the following purposes:

  • Managing customer enquiries and requests submitted through the Digital Platforms.
  • Responding to product-related, service-related or customer support enquiries.
  • Managing complaints, escalations and grievance redressal activities.
  • Providing information regarding products, services or assistance requested by you.
  • Operating, administering, monitoring and securing the Digital Platforms.
  • Diagnosing technical issues and supporting service continuity.
  • Performing analytics to understand Digital Platforms usage and improve their performance and user experience.
  • Complying with applicable legal, regulatory or contractual obligations.
  • Establishing, exercising or defending legal rights where necessary.

Personal data shall be processed only for lawful purposes and in accordance with applicable legal requirements.

4. Consent and Withdrawal of Consent

Where consent is relied upon as the basis for processing personal data, CPP India will seek such consent through a clear affirmative action and in accordance with applicable legal requirements.

You may withdraw your consent at any time by contacting us through the channels provided in this Privacy Notice.

Withdrawal of consent shall not affect the lawfulness of processing carried out prior to such withdrawal.

Please note that withdrawal of consent may affect our ability to provide certain products, services or functionalities where such processing is necessary to deliver the requested service.

5. Cookies and Similar Technologies

The Digital Platforms may use cookies and similar technologies to:

  • Support Digital Platforms functionality;
  • Enhance user experience;
  • Understand visitor preferences;
  • Monitor Digital Platforms performance;
  • Improve Digital Platforms content and services; and
  • Maintain Digital Platforms security.

You may manage cookie settings through your browser configuration. However, disabling certain cookies may affect the availability or functionality of parts of the Digital Platforms.

6. Sharing of Personal Data

CPP India may share personal data with:

Authorised Service Providers

Third-party service providers engaged to support:

  • Information technology services;
  • Website and Customer Portal hosting and maintenance;
  • Technical support services;
  • Customer support activities;
  • Professional advisory services; and
  • Other operational services required for the management of CPP India's business activities.
Legal and Regulatory Authorities

Where disclosure is required:

  • By applicable law;
  • By regulatory or governmental authorities;
  • To comply with legal obligations; or
  • To protect the rights, safety or property of CPP India or other persons.

Any third party processing personal data on behalf of CPP India is expected to process such personal data only in accordance with documented instructions, applicable contractual requirements and appropriate confidentiality and security obligations.

7. Retention and Erasure

CPP India retains personal data only for as long as necessary to fulfil the purpose for which it was collected, to meet contractual requirements, or to comply with applicable legal, regulatory and record-retention obligations.

Where personal data is no longer required for the relevant purpose and retention is not otherwise required by applicable law, CPP India will take reasonable steps to erase or anonymise such personal data.

8. Security of Personal Data

CPP India maintains technical and organisational security measures appropriate to the nature of the personal data processed and the risks associated with such processing.

Such measures may include:

  • Access controls;
  • Authentication mechanisms;
  • Monitoring and logging;
  • Security reviews;
  • Backup and recovery arrangements; and
  • Secure data storage practices.

While CPP India takes reasonable measures to protect personal data, no method of electronic transmission or storage can be guaranteed to be completely secure.

9. Your Rights

Subject to applicable law, you may have the right to:

  • Obtain information regarding the personal data being processed about you;
  • Request correction, completion or updating of inaccurate or incomplete personal data;
  • Request erasure of personal data where applicable;
  • Withdraw consent where processing is based on consent;
  • Seek grievance redressal relating to the processing of your personal data; and
  • Exercise other rights available under applicable law.

Requests relating to your rights may be submitted through the contact details provided below.

CPP India may request information reasonably necessary to verify the identity of the requester before responding to such requests.

10. Children's Personal Data

CPP India's Digital Platforms are not intended to knowingly collect personal data directly from children except where permitted by applicable law.

Where processing of children's personal data becomes necessary, CPP India shall process such data in accordance with applicable legal requirements.

11. Personal Data Breaches

CPP India maintains processes for identifying, assessing, managing and responding to personal data breaches.

Where required under applicable law, CPP India will take appropriate steps to notify affected individuals and relevant authorities in accordance with applicable legal requirements.

12. Contact Details and Grievance Redressal

For any questions, concerns, requests or grievances regarding this Privacy Notice or the processing of personal data, you may contact:

Grievance Officer

CPP Assistance Services Private Limited

P O Box No 826,
Kalkaji Post Office,
New Delhi - 110019 - Toll Free: 1800-419-4000

Email: escalations@cppindia.com

CPP India will endeavour to review and address grievances within a reasonable period and in accordance with applicable legal requirements.

Where applicable, Data Principals may also avail remedies available under the Digital Personal Data Protection Act, 2023, including raising complaints before the Data Protection Board of India in accordance with applicable law.

13. Changes to this Privacy Notice

CPP India may update this Privacy Notice from time to time to reflect changes in legal requirements, business operations, services or privacy practices.

Any revised Privacy Notice will be published through the relevant Digital Platforms together with the updated effective date.