Digital Signature Certificate Privacy Policy

Last Updated: August 2026

This Digital Signature Certificate Privacy Policy explains how iSaral Business Solutions Pvt Ltd collects, uses, protects and shares the personal information you provide when using our website and Digital Signature Certificate (DSC) services. It sets out what information we collect, how we use it, how we protect it, and the circumstances in which it may be shared.

1. Information We Collect

When you apply for a Digital Signature Certificate or use our services, we may collect information necessary to process and verify your application, including:

• Personal Information: Full name, date of birth, PAN details, Aadhaar details, passport or other government-issued identification information.
• Contact Information: Mobile number, email address, residential or business address, and other communication details.
• Business Information: Company or organization name, registration details, GST details, authorization documents, partnership documents, and other business-related information where required.
• DSC Application Information: Details required for Digital Signature Certificate registration, renewal, validation, and issuance.
• Payment Information: Transaction-related information required to process payments for our products and services. Payment credentials such as card numbers or banking passwords are not stored by us unless specifically required and legally permitted.
• Technical Information: IP address, browser type, device information, website usage information, and other technical data collected through standard website technologies.

2. How We Use Your Information

We use the information collected from you for legitimate business and service-related purposes, including:

• Processing and submitting your Digital Signature Certificate application.
• Verifying your identity and application information.
• Coordinating with authorized Certifying Authorities for DSC issuance and renewal.
• Providing DSC-related products and services.
• Processing payments and maintaining transaction records.
• Arranging delivery of USB tokens or other applicable products.
• Responding to customer enquiries and providing technical or application support.
• Communicating important updates regarding your application, certificate, renewal, or services.
• Improving our website, products, services, and customer experience.
• Maintaining records required for legal, regulatory, accounting, and compliance purposes.
• Preventing fraudulent, unauthorized, or unlawful activities.

3. Digital Signature Certificate and Private Key Security

The security of your Digital Signature Certificate and cryptographic credentials is important to us. Where applicable, the private key associated with a DSC is generated and stored according to the security procedures of the authorized Certifying Authority, which operate under the regulatory framework of the Controller of Certifying Authorities (CCA), Government of India, and the applicable certificate issuance process.

iSaral Business Solutions Pvt Ltd does not intentionally collect or retain your private cryptographic key or your DSC token PIN/password. You should never share your DSC token PIN, password, private key, or other confidential authentication credentials with anyone.

4. How We Share Your Information

We do not sell or rent your personal information to third-party marketing companies. Information may be shared only when necessary to provide our services or comply with legal and regulatory requirements under the Ministry of Electronics and Information Technology (MeitY) framework, including with:

• Authorized Certifying Authorities responsible for issuing or managing Digital Signature Certificates.
• Government authorities and regulatory bodies where disclosure is required by applicable law.
• Verification or compliance service providers involved in the DSC application process.
• Payment service providers for processing transactions.
• Courier and logistics partners for delivery of physical products such as USB tokens.
• Technology and service providers that help us operate, secure, and maintain our website and business systems.

Third parties receiving information are expected to handle it in accordance with applicable contractual, security, and legal requirements.

5. Data Security

We take reasonable technical and organizational measures to protect your personal information against unauthorized access, misuse, alteration, disclosure, or loss. Our security measures may include:

• SSL/TLS encryption for information transmitted through our website.
• Access controls for internal systems.
• Restricted access to customer information.
• Secure handling of application documents.
• Regular monitoring and maintenance of our website and systems.
• Appropriate security practices for information used during DSC processing.

However, no online transmission or electronic storage system can be guaranteed to be completely secure.

6. Data Retention

We retain personal and application information only for as long as reasonably necessary to:

• Complete the requested service.
• Maintain transaction and business records.
• Meet applicable legal and regulatory requirements.
• Resolve disputes and customer support matters.
• Maintain appropriate compliance and audit records.

When information is no longer required, we may securely delete, anonymize, or dispose of it in accordance with applicable requirements.

7. Cookies and Website Technologies

Our website may use cookies and similar technologies to improve website functionality, understand website usage, maintain security, and improve user experience. Cookies may help us understand which pages visitors use and how visitors interact with our website. You can manage or disable cookies through your browser settings. However, disabling certain cookies may affect some website functionality.

8. Third-Party Links

Our website may contain links to third-party websites, government portals, Certifying Authorities, payment providers, or other external services. We are not responsible for the privacy practices, content, security, or policies of third-party websites. We recommend reviewing the privacy policy of any external website before submitting personal information.

9. Your Rights

Depending on applicable laws and regulations, you may have the right to:

• Request access to personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request clarification regarding the use of your information.
• Raise concerns regarding the processing of your personal information.
• Withdraw consent where processing is based on consent and withdrawal is legally applicable.

Some requests may be subject to legal, regulatory, contractual, or record-retention requirements.

10. Children's Privacy

Our services are intended for individuals and businesses that are legally eligible to obtain and use the relevant products and services. We do not knowingly collect personal information from children where such collection is prohibited by applicable law.

11. Changes to This Privacy Policy

We may update this Digital Signature Certificate Privacy Policy from time to time to reflect changes in our services, technology, business practices, or applicable legal and regulatory requirements. The updated policy will be published on this page with a revised "Last Updated" date. We encourage visitors to periodically review this page for the latest information about our privacy practices.

12. Contact Us

If you have questions, concerns, or requests regarding this Digital Signature Certificate Privacy Policy or the handling of your personal information, please reach out to us.