Privacy policy

1. Who we are

2. Information we collect

3. Why we use personal information

• Create and maintain accounts
• Authenticate users through OTP
• Receive and manage service bookings
• Contact customers about bookings
• Coordinate service workers
• Provide requested services
• Manage booking status and service progress
• Generate invoices
• Process and reconcile payments
• Process refunds where applicable
• Review worker applications
• Conduct worker onboarding and verification
• Communicate with customers, workers and applicants
• Respond to enquiries and support requests
• Protect our website and systems from misuse
• Maintain business and transaction records
• Comply with applicable legal requirements
• Resolve disputes and enforce applicable terms
• Improve our website and services

4. Consent and lawful processing

Where consent is required by applicable law, RSK20 will request consent for the relevant processing activity in a clear manner. Where processing is based on consent, you may withdraw that consent through the method made available by RSK20. Withdrawal does not affect processing that was lawfully carried out before withdrawal.

Withdrawal may affect our ability to provide a service where the relevant information is necessary for that service.

5. Worker documents and Aadhaar/PAN information

Worker identity documents require additional care because they may contain sensitive personal information.

Where RSK20 requests Aadhaar or PAN information or documents, the information is collected only for the relevant onboarding, identity, compliance or verification purpose communicated to the applicant.

Access to worker identity documents is restricted to authorized RSK20 personnel and service providers who have a legitimate need to process the information.

Submitting an Aadhaar document to RSK20 does not by itself mean that RSK20 has performed UIDAI authentication or government verification. Any formal Aadhaar authentication or offline verification will depend on the applicable authorized process and legal requirements.

Where a verification process does not require the full Aadhaar number, RSK20 may use a masked or otherwise limited form of the information where appropriate.

6. Data minimisation

RSK20 aims to collect only information reasonably necessary for the relevant service, account, transaction, onboarding or verification purpose. We do not intend to collect personal information merely because it may be useful in the future.

7. Sharing personal information

RSK20 may share personal information with third parties where reasonably necessary to operate the service or comply with applicable law. These may include payment processors, SMS/OTP providers, email providers, cloud hosting and database providers, secure document-storage providers, technology providers, service workers involved in fulfilling a booking, professional advisers, and government authorities where legally required.

Third-party service providers processing information on behalf of RSK20 should receive only the information reasonably necessary for the relevant service.

RSK20 does not intend to sell personal information as a commercial product.

8. Service workers and booking information

Where necessary to fulfil a booking, relevant customer information may be shared with the worker or service personnel assigned to that booking. This may include the customer's name, service address, contact information and details necessary to perform the requested work.

Workers are expected to use customer information only for legitimate service-related purposes and to protect it from unauthorized use or disclosure.

9. Payments

Payments may be processed through third-party payment providers. RSK20 may receive information such as payment status, amount, transaction/reference identifiers, payment-method information made available by the provider, and refund status.

RSK20 does not intend to store full card numbers, CVV values or equivalent payment authentication credentials on its own systems where the payment provider handles those credentials directly.

10. Cookies and similar technologies

RSK20 may use cookies or similar technologies necessary for authentication, secure sessions, website functionality and security. If analytics, advertising or other non-essential technologies are introduced, RSK20 may provide additional notices or controls where required by applicable law.

11. Data security

RSK20 takes reasonable technical and organizational measures designed to protect personal information from unauthorized access, misuse, alteration, disclosure or loss.

• Access controls
• Authentication
• HTTPS/TLS encryption in transit
• Restricted administrative access
• Secure server infrastructure
• Private storage for sensitive worker documents
• Audit logging for sensitive administrative activity
• Security monitoring and operational controls

No internet service or storage system can be guaranteed to be completely secure.

12. Retention of personal information

RSK20 retains personal information only for as long as reasonably necessary for the purpose for which it was collected, or for longer where retention is required or permitted by applicable law.

Retention periods may vary depending on the type of information. Booking and invoice information, for example, may need to be retained for business, accounting, tax, dispute-resolution or legal purposes.

Worker identity documents will be retained only for as long as reasonably necessary for the relevant onboarding, verification, compliance or legal purpose, subject to applicable requirements.

When information is no longer required, RSK20 will take reasonable steps to delete it, securely destroy it, or otherwise dispose of it in accordance with applicable requirements.

13. Your privacy rights and requests

Subject to applicable law, you may contact RSK20 to request:

• Information about personal information we process about you
• Correction of inaccurate or incomplete information
• Erasure of personal information where applicable
• Withdrawal of consent where processing is based on consent
• Information about the purposes for which your information is being processed
• Resolution of a privacy-related grievance

Requests may be subject to reasonable identity verification to prevent unauthorized access to another person's information.

Some information may need to be retained where required for legal, accounting, security, fraud-prevention, dispute-resolution or other lawful purposes.

14. Privacy complaints and grievance handling

If you have a privacy-related concern, complaint or request, please contact RSK20 using the business contact details published on this website.

RSK20 will review and respond to privacy-related requests in accordance with applicable law and its applicable grievance-handling process.

15. Security incidents and data breaches

If RSK20 becomes aware of a personal-data security incident that is required to be notified under applicable law, RSK20 will take the required steps, which may include investigating the incident, containing the issue, taking remedial measures and providing notifications to affected individuals or authorities where legally required.

16. Children's information

RSK20 services are intended for adults. We do not knowingly seek to collect personal information from children for independent use of our services.

17. Third-party websites and services

The RSK20 website may contain links to third-party websites or services. This Privacy Policy does not govern the privacy practices of third parties. You should review their applicable privacy policies before providing information to them.

18. Changes to this Privacy Policy

RSK20 may update this Privacy Policy when its services, technology, business practices or applicable legal requirements change. The updated version will be published on this page with an updated effective date where appropriate.

19. Contact