Shramevjayate

This Privacy Policy is issued by the Labour Department, Government of Chhattisgarh, in alignment with the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025.

INTRODUCTION

This Privacy Policy explains how Shramev Jayate Portal ("We/Government") collects, uses, stores, shares, and protects your personal data. We are committed to protecting your privacy and maintaining transparency in all data processing activities. This policy applies to all users of the Portal and its mobile application.

This Privacy Policy explains how the Labour Department, Government of Chhattisgarh, acting as a Data Fiduciary under the Digital Personal Data Protection Act, 2023, processes digital personal data through the Shramev Jayate Portal and related mobile applications and digital services.

AUTHORITY & DEFINITIONS

Data Fiduciary:	Labour Department, Government of Chhattisgarh, which determines the purpose and means of processing personal data for Shramev Jayate services.
Data Principal:	You (the user providing personal data)
Personal Data:	Information that identifies or is reasonably linkable to you
Processing:	Collection, storage, use, sharing, or deletion of personal data
Data Processor:	Any entity engaged by the Department that processes personal data on its behalf (e.g., hosting, SMS gateway, payment gateway).
Child:	An individual under 18 years of age.
Grievance Officer:	Designated officer responsible for addressing grievances of Data Principals regarding personal data processing, as required under the DPDP Act, 2023.

DATA WE COLLECT

3.1 Information You Provide (different data for different services)

•Name, date of birth, gender, caste category, contact details (phone, email, address)
•Aadhar/ID proof numbers for verification
•Employment status, worker category, establishment details
•Banking/payment information for benefit disbursement
•Social security scheme enrollment data
•Application and registration documents
•Family information

3.2 Information Collected Automatically

•IP address and device information
•Pages visited, time spent, clicks made (server logs)
•Geolocation data – Mobile App
•Session identifiers and cookies
•Portal access timestamps
•Payment information during fees payment and cess.

3.3 Information about Third Parties

•Government databases (UID, income verification)
•Employer/establishment information
•Contractor details for worker verification
•Insurance and welfare scheme data

PURPOSE & LAWFUL BASIS FOR PROCESSING

4.1 We process your personal data for:

•Registering construction workers, organized and unorganized workers

•Delivering social security schemes (eg. health insurance, skill training, welfare benefits)

•Monitoring labour law compliance and workplace safety

•Generating labour statistics and policy research

•Processing claims and benefit applications

•Conducting inspections and enforcement actions

•Citizen support and grievance redressal

•Mandatory government reporting and transparency

Personal data will not be used for any purpose unrelated to the core functions of Shramev Jayate – such as delivery of labour-related services, enforcement, and welfare schemes – without providing you with an updated notice and, where required, obtaining your consent. Only data that is necessary and proportionate for these purposes will be collected and processed, in accordance with the principles of purpose limitation and data minimisation under the DPDP Act, 2023

4.2 Lawful Basis:

Processing is based on:

(a) Your explicit consent through registration(b) Legal obligation under labour laws(c) Performance of government functions(d) Protection of vital interests where necessary

DATA RETENTION

Personal data is retained only for as long as necessary to fulfil the purposes described in this Policy or as required under applicable labour, welfare and public records laws. Core service records, including worker registrations, benefit histories, and inspection records, may need to be preserved even after a worker ceases to be registered, for pension, audit, or legal purposes.

Once the legally mandated retention period ends and data is no longer required, it will be securely deleted or irreversibly anonymised. System logs are retained for a shorter period for security and audit purposes. Backup copies are stored in secure government-approved infrastructure and are rotated or destroyed as per the Department's Content Archival policy.

DATA SECURITY

6.1 Security Measures:

•SSL/TLS encryption for data in transit (HTTPS protocol)

•Role-based access control limiting employee access

•Firewalls and intrusion detection systems

•Regular security audits

•Secure password policies and multi-factor authentication

•Data stored in government-approved servers

Security safeguards are implemented in line with applicable government IT security policies, CERT-In and MeitY guidelines, and the obligations under Section 8 of the DPDP Act, 2023. These include technical, organisational and administrative controls to ensure confidentiality, integrity, and availability of personal data. While strong measures are in place, no system can be guaranteed to be 100% secure. Users are also responsible for protecting their credentials and following security advisories issued by the Department.

6.2 Breach Notification:

In event of data breach affecting your personal data, we will notify on website.

In the event of a personal data breach that is likely to cause significant harm, the Department will take steps to contain the incident and will notify affected individuals in clear and plain language, as well as the competent authorities, including the Data Protection Board of India, where required under the DPDP Act and Rules. Notifications will describe the nature of the breach, possible consequences, steps taken, and contact information for assistance.

YOUR RIGHTS AS DATA PRINCIPAL

Under DPDP Act 2023, you have the right to:

7.1 Right to Access

Request copy of personal data we hold about you

7.2 Right to Correction

Request correction of inaccurate or incomplete personal data

7.3 Right to Withdrawal of Consent

Withdraw consent at any time; however, legally mandated processing will continue

7.4 Right to Grievance

Lodge grievance with our Grievance Redressal Officer regarding data processing

7.5 Right to Erasure

Requests for erasure will be honoured where the purpose has been met and no legal or statutory requirement mandates continued retention. For many labour-related records, laws require longer retention even after service delivery, in which case data may be archived and access restricted rather than deleted.

7.6 Right to Nominate

You may nominate another person to exercise your rights in the event of your death or incapacity, in accordance with the DPDP Act, 2023 and applicable rules

DATA SHARING

8.1 We may share personal data with:

•Other government departments and section for scheme delivery and compliance
•Law enforcement agencies (when legally required)
•Data processors contracted for specific functions (hosting, analytics)

8.2 Data Sharing Protection:

All third parties are bound by confidentiality agreements and data processing agreements compliant with. We do not sell personal data to commercial entities.

All third parties (including IT service providers, hosting providers, analytics and support vendors) are bound by confidentiality and data processing agreements that require compliance with the DPDP Act, 2023 and applicable government security standards. They may only process data for the limited purposes and duration specified by the Department and are not permitted to use it for their own purposes.

COOKIES & TRACKING

Analytics information is used in aggregated or anonymised form to understand usage patterns and improve the Portal. It is not used to build individual profiles for advertising or marketing.

The Portal uses cookies for:

Session management and user authentication
Functionality and performance optimization
Analytics and usage patterns (anonymized)

You can disable cookies in your browser settings; however, certain Portal features may not function properly.

INTERNATIONAL DATA TRANSFER

Personal data is processed within India only, in compliance with DPDP Act 2023. Data will not be transferred outside India without explicit legal authorization. If in future any cross-border transfer becomes necessary (e.g., use of certain government-approved cloud services abroad), it will be done only in compliance with DPDP and notified safeguards.

POLICY CHANGES

We may update this Privacy Policy to reflect changes in law or our practices. Significant changes will be notified through:

Portal homepage notification

Continued use constitutes acceptance of updated policy.

GRIEVANCE REDRESSAL

For Privacy-Related Complaints:

Mr. S.S. Paikra (0771 2443515)

Grievance Redressal Officer:

Mr. S.S. Paikra (0771 2443515)

Government of Chhattisgarh, Labour Department

Website: www.shramevjayate.cg.gov.in

Email: cglc2012@gmail.com

Escalation

If you are not satisfied with the response to your grievance, you may have the right to escalate the matter to the Data Protection Board of India in accordance with the DPDP Act, 2023 and applicable rules.

For privacy-related complaints, please contact the Grievance Officer with detailed information.

This Privacy Policy is compliant with Digital Personal Data Protection Act, 2023 and Digital Personal Data Protection Rules, 2025

Last Updated: December 3, 2025 (Ver 1.0)