GMMCO vendor portal — privacy notice

[PLACEHOLDER — to be replaced by GMMCO's approved wording before relying on it.] GMMCO Limited uses this portal to work with its vendors. This notice explains what personal data we collect about you when you use it, and why.

Your name, the email address and mobile number you sign in with, the vendor code you act for, when and from where you sign in, and what you send us through the portal: invoices and their documents, acknowledgements of purchase orders, and changes to your company's details.

To let you sign in securely, to show you your purchase orders and payments, to receive and check your invoices (including against GST returns), to keep your company's records correct, and to keep the portal secure.

Your sign-in details are kept while your account is open. When you close your account, we erase your name, email and mobile from it. Business records you sent us — invoices, payment advices, tax certificates — are kept for as long as tax and accounting law requires, typically eight years.

Service providers that act for GMMCO: our email and SMS providers, a GST and PAN verification service, secure file storage, and Connecticons, who operate this portal. They may use your data only to provide that service to us.

You may ask for a summary of the personal data we hold about you, have it corrected or erased, withdraw your consent by closing your account from your profile page, and raise a grievance with us. If we do not resolve it, you may complain to the Data Protection Board of India.