Global Checks Background Verification Services
This document does not constitute legal advice. Consult legal counsel for jurisdiction-specific guidance.
1. What This Policy Covers
Global Checks AI Private Limited is a background verification services company. This policy explains what
personal data we collect, why, how we use it, who we share it with, and your rights over it.
It applies to all individuals whose data we process, including job candidates, employees of our client
organisations, and website visitors. Your data may reach us through your employer or directly from you.
2. Who We Are
For our own website, portals, and client relationships we act as a Data Fiduciary. For BGV services we act
as a Data Processor, handling candidate data on behalf of client organisations (the Data Fiduciaries under
DPDP Act 2023).
Company: Global Checks AI Private Limited
Service: Background Verification
Website: https://globalchecks.in/
Email: info@globalchecks.in
Phone: 08065325149
Registered Address: BYLD Group Private Limited, 2nd and 3rd Floor, Plot No. 48, Sector
44, Opp. EPF Regional Office, Gurugram, Haryana 122003
3. What Data We Collect
We follow data minimisation and collect only what the specific background check requires:
- Identity & Contact: Name, DOB, gender, mobile, email, address — all verifications
- Employment: Past employers, titles, dates, references — employment checks
- Education: Degrees, certifications, roll numbers, institutions — education checks
- Identity Documents: Aadhaar, PAN, Passport, Driving Licence, Voter ID — identity
verification
- Legal & Court: Criminal history, judgments, litigation records — criminal checks
- Financial: Credit history — explicit consent only, specific roles
- Social & Public: Public profiles and records — social media checks
- Communication: Marketing opt-in / opt-out preferences — when you interact with us
Sources: directly from you; your (prospective) employer; public sources such as
government and court records; and third-party verification partners.
4. Why We Use Your Data (Purpose Limitation)
Running background checks; legal compliance; reporting verified results to the commissioning employer;
improving our services; fraud prevention; record-keeping and audit trails; and marketing (only where
legally permitted or with your consent).
We will not use your data for an unrelated purpose without informing you first and, where required,
obtaining fresh consent.
5. Our Legal Basis for Processing
- Consent (Sec 6): free, clear, and informed for a specific purpose; you may withdraw
any time via the Grievance Officer or Consent Manager, and withdrawal does not affect prior lawful
processing.
- Legitimate Uses, no consent needed (Sec 7): employment background verification,
compliance with law or court orders, public interest and national security, and medical emergencies.
- Contractual necessity: processing needed to deliver BGV under our contract with your
employer, only to the extent the law permits.
6. How Long We Keep Your Data
We keep data only as long as necessary for its purpose or as legally required, then securely delete it.
Valid erasure requests are actioned within 30 days unless we are legally required to retain the data.
7. How We Protect Your Data
- Encryption at rest and in transit (AES-256 / TLS 1.2+).
- Access controls on a strict need-to-know basis.
- Regular audits and ISO 27001 compliance.
- Contracts binding all processors to equivalent security standards, plus an incident response plan.
- Secure cloud infrastructure with physical and logical controls under contractual security obligations.
8. When We Share Your Data
Only when necessary, with:
- verification partners, bound to process only on our instructions and to maintain equivalent security;
- your commissioning employer, with the report shared only to the extent needed for the employment
decision;
- legal and regulatory authorities, on court order or statute, and we tell you where permitted;
- registered Consent Managers under the DPDP Act.
9. International Data Transfers
We primarily process data within India. Any transfer abroad is made only to countries approved under
Section 16 of the DPDP Act. For EU/EEA individuals, transfers outside the EEA are protected under GDPR
safeguards such as Standard Contractual Clauses or adequacy decisions.
10. Cookies & Tracking
Essential cookies are required for the site to work and cannot be opted out of. Performance and analytics
cookies are used only with your consent. Manage choices via our cookie consent banner or your browser
settings.
11. Your Rights
As a Data Principal you may access, correct, and erase your data, withdraw consent, nominate a
representative, and raise grievances. Contact our Grievance Officer; we acknowledge within 48 hours and
respond within 30 days.
12. Children's Data
Our services are for adults only and we do not knowingly collect data from anyone under 18. If a child's
data is provided, we obtain verifiable parental or guardian consent, do not track, target, or harm
children, and delete the data promptly if consent cannot be obtained.
13. Data Breach Notification
If a breach is likely to affect your rights, we will notify the Data Protection Board of India promptly,
inform you of what happened and its likely impact, contain and investigate the cause, then remediate and
record the incident for regulatory review.
14. Grievance Officer
Data Protection Officer | dpo@globalchecks.in | BYLD Group Private Limited, 2nd and 3rd
Floor, Plot No. 48, Sector 44, Opp. EPF Regional Office, Gurugram, Haryana 122003 | 08065325149.
We acknowledge within 48 hours and resolve within 30 days (up to 45 days for complex cases, with written
notice). If unsatisfied, escalate to the Data Protection Board of India (www.dpb.gov.in).
15. Policy Updates
We may update this policy for legal or business reasons. We will post a notice on our website, email you
where we have your details, and seek fresh consent where the DPDP Act requires it.
Continued use after an update takes effect means you accept the revised policy, except where fresh consent
is legally required.
16. Dispute Resolution & Governing Law
Start with our Grievance Officer, where most issues are resolved within 30 days. If unresolved, file with
the Data Protection Board of India under the DPDP Act 2023 (orders are binding and appealable to the
Appellate Tribunal).
Commercial disputes with client-employers follow mediation or arbitration per the services agreement.
Courts of competent jurisdiction sit at Gurugram, Haryana, India.
This policy is governed by the laws of India, including the DPDP Act 2023 and the IT Act 2000.
Global Checks Background Verification Services · Compliant with DPDP Act 2023, IT Act 2000, IT (SPDI)
Rules 2011
