Privacy Policy

SHIFTLINK WORKFORCE SOLUTIONS LLP ("ShiftLink", "we", "us", or "our") is committed to protecting your privacy and managing your personal information with full transparency. This Privacy Policy details our protocols regarding data collection, processing, and storage across our digital properties.

1. Information We Collect

To enable on-demand shift staffing, we collect the following classifications of data:

• Identity & Profile Information: Name, commercial entity name, authorized signatory identity, contact phone number, official email address, and physical business premises address.
• Worker Verification Data: Government identification details, proof of residence, background verification documents, and relevant skill certifications.
• Transaction Records: Invoices generated, shift dates, settlement references, and payment IDs associated with platform services.

2. Payment Information & PCI-DSS Compliance

All digital payments and tokenization mechanisms are executed via Razorpay, an RBI-regulated Payment Aggregator compliant with global Payment Card Industry Data Security Standards (PCI-DSS). Financial information is handled exclusively through end-to-end encrypted payment rails.

3. Purpose of Data Processing

We process collected data solely for legitimate business purposes:

• To algorithmically connect businesses with verified local shift workers in real time.
• To generate transparent GST-compliant invoices and confirm payment settlements.
• To communicate automated shift confirmations, schedule alterations, and security alerts.
• To comply with regulatory audits under Indian corporate and tax legislation.

4. Disclosure & Data Sharing

We do not monetize, rent, or sell your personal information. Data sharing is limited to:

• Confirmed Shift Participants: Providing relevant worker contact details to the booking business to coordinate reporting time and duties.
• Banking & Gateway Partners: Transmitting necessary transaction IDs and amounts to Razorpay for processing and fraud prevention.
• Statutory Compliance: Where required by valid law enforcement requests, court orders, or state oversight agencies.

5. Data Security & Retention

We maintain strict administrative, technical, and physical safeguards—including SSL encryption, encrypted database storage, and restricted credential access. Data is retained only for the duration required to fulfill operational services and satisfy statutory legal retention mandates.

6. Grievance Officer & Inquiries

In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, you may address inquiries, access requests, or grievances to: