Privacy Policy.

Effective Date: April 1, 2026 · Last Updated: April 1, 2026

91 AT WORK LLP ("91 AT WORK", "we", "us", or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, share, and protect personal data when you visit our website (91atwork.com), engage with our services, or contact us.

This Policy is governed by the Digital Personal Data Protection Act, 2023 ("DPDP Act") of India, the Information Technology Act, 2000, and the rules made thereunder, as applicable.

1. Who We Are

91 AT WORK LLP is a Limited Liability Partnership registered in India, providing India GCC-as-a-Service, HR advisory, workforce management, payroll, and compliance services to startups, SMEs, and global firms.

• Registered Office: Gurugram, Haryana, India
• Operating Location: Bengaluru, Karnataka, India
• Email: clients@91atwork.com
• Phone: +91-8700799269

For the purposes of the DPDP Act, 91 AT WORK acts as the Data Fiduciary in respect of personal data we collect directly from you.

2. Personal Data We Collect

We collect personal data only when you voluntarily provide it to us. This includes:

Information you submit through forms or email

• Full name (first and last)
• Work email address
• Phone or mobile number
• Company name and team size
• Primary business location and country
• Service interest area
• Any free-text message or query you share

Information collected automatically

• Device, browser, and operating system information
• IP address and approximate location (city/country)
• Pages viewed, time spent, and referral source
• Standard server log data

We do not collect sensitive personal data (such as financial, biometric, health, or government-issued identifiers) through the website unless you voluntarily share it in correspondence with us.

3. How We Use Your Personal Data

We process your personal data for the following lawful purposes, with your consent or as permitted under the DPDP Act:

• To respond to your enquiries, demos, and consultation requests
• To deliver the services you engage us for
• To send you operational updates relevant to our engagement
• To send marketing communications about our services — only if you have opted in (you can unsubscribe at any time)
• To improve our website, services, and customer experience
• To comply with applicable laws, regulations, and lawful requests by authorities
• To detect, prevent, and respond to security incidents and fraud

4. Legal Basis for Processing

Under the DPDP Act, we process your personal data on the basis of:

• Your consent — clearly given through form submissions, ticked boxes, or email correspondence
• Legitimate use — where processing is necessary for performance of a service you have engaged us for, or for compliance with law

You may withdraw your consent at any time. Withdrawal will not affect the lawfulness of processing carried out before withdrawal.

5. Sharing of Personal Data

We do not sell your personal data. We share it only with:

• Service providers and Data Processors who help us operate our business — for example, Zoho Corporation (for CRM, email, web forms), Google Workspace (for email and collaboration), and our cloud hosting providers. These parties are contractually obligated to protect your data and process it only on our instructions.
• Professional advisors such as lawyers, auditors, and accountants under confidentiality obligations.
• Government, regulatory, or judicial authorities when required by applicable law, court order, or to enforce our legal rights.
• Acquirers or successors in the event of a merger, acquisition, or restructuring, subject to confidentiality.

6. Cross-Border Data Transfers

Some of our service providers (e.g., Zoho, Google) may store or process your data on servers located outside India. We ensure that such transfers are made in accordance with the DPDP Act and applicable rules, and that adequate safeguards are in place.

7. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, or as required by law. Specifically:

• Enquiry and lead data: up to 36 months from last contact, unless you request earlier deletion
• Client engagement records: for the duration of our engagement plus 7 years for legal, tax, and audit compliance
• Website logs and analytics: 12 months

8. Security of Personal Data

We implement reasonable security practices and procedures including encryption, access controls, secure storage, and periodic reviews to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Your Rights Under the DPDP Act

As a Data Principal under the DPDP Act, you have the following rights:

• Right to information — to know what personal data we hold about you and how we use it
• Right to correction and erasure — to request correction of inaccurate data or deletion of data we no longer need
• Right to nominate — to nominate another individual to exercise your rights in the event of your incapacity or death
• Right of grievance redressal — to raise a complaint with our Grievance Officer (see below)
• Right to withdraw consent — at any time, by emailing us

You may exercise these rights by writing to us at clients@91atwork.com. We will respond within the timeframes prescribed under the DPDP Act.

10. Cookies and Tracking

Our website uses minimal cookies for essential functionality and basic analytics. Third-party tools embedded on our website (e.g., Zoho web forms, Zoho SalesIQ for visitor tracking) may set their own cookies. You can disable cookies through your browser settings, although this may affect website functionality.

11. Children's Data

Our services and website are not directed to individuals under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has provided us personal data, please contact us so we can delete it.

12. Updates to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised "Last Updated" date. We encourage you to review this Policy periodically.

13. Grievance Officer

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please reach out at clients@91atwork.com.