GDPR Compliance - eForm Seva

1. Introduction

One Shop Seva ("we", "us", or "our"), operating as eForm Seva, is committed to complying with the General Data Protection Regulation (GDPR) for our users in the European Union.

While we are an India-based company, we recognize the importance of GDPR for our EU users and have implemented measures to ensure compliance where applicable.

2. GDPR Principles

We adhere to the core principles of GDPR in our data processing activities:

Lawfulness, fairness and transparency: We process data lawfully and provide clear information about processing
Purpose limitation: We only collect data for specified, explicit purposes
Data minimization: We only collect data that is necessary
Accuracy: We keep personal data accurate and up-to-date
Storage limitation: We retain data only as long as necessary
Integrity and confidentiality: We implement appropriate security measures
Accountability: We demonstrate compliance with these principles

3. Your Rights Under GDPR

If you are in the EU, you have the following rights regarding your personal data:

Right to Access

You can request copies of your personal data that we process.

Right to Rectification

You can request correction of inaccurate or incomplete data.

Right to Erasure

You can request deletion of your personal data in certain circumstances.

Right to Restriction

You can request restriction of processing in certain circumstances.

Right to Data Portability

You can request transfer of your data to another service provider.

Right to Object

You can object to certain types of processing.

Note: Some rights may be limited when we process data as required by Indian law for government form submissions.

4. Lawful Basis for Processing

We process personal data under the following lawful bases:

4.1 Contractual Necessity

When processing is necessary for the performance of our service (e.g., form submission).

4.2 Legal Obligation

When processing is necessary for compliance with Indian laws (e.g., tax records).

4.3 Legitimate Interests

When processing is necessary for our legitimate business interests (e.g., security, analytics).

4.4 Consent

When we obtain explicit consent for specific processing activities (e.g., marketing emails).

5. Data Transfers Outside EU

As an India-based service, your data will be transferred to and processed in India. We ensure appropriate safeguards are in place:

Standard Contractual Clauses with third-party processors
Adequate data protection measures
Limited access to authorized personnel only

Important: Government form submissions may require data sharing with Indian authorities as mandated by law.

6. Data Protection Measures

We implement appropriate technical and organizational measures to protect personal data:

Encryption of data in transit (SSL/TLS)
Access controls and authentication
Regular security assessments
Data minimization principles
Staff training on data protection

7. Data Protection Officer

We have appointed a Data Protection Officer (DPO) to oversee compliance with data protection laws:

DPO Contact: help@eformseva.in

8. Changes to This Statement

We may update this GDPR Compliance Statement from time to time. We will notify you of any changes by posting the new statement on this page.

GDPR Compliance Statement