Privacy Policy

DSC Digital Signature Certificate ("we", "us", "our") operates as an authorized Registration Authority (RA) for eMudhra, Capricorn CA, vSign and SpeedSign, issuing Class 3 Digital Signature Certificates under the Information Technology Act, 2000 and applicable rules of the Controller of Certifying Authorities (CCA). This Privacy Policy explains what information we collect, why, and how it is handled when you use dscdigitalsignature.in or apply for a DSC through us.

1. Information we collect

To issue a Digital Signature Certificate, Indian law requires identity verification. Depending on the certificate type, we may collect:

• Identity information: full name, PAN, Aadhaar number (for eKYC only, see Section 3), passport details (for foreign applicants), photograph, and video recorded during your identity verification call, as mandated by CCA guidelines.
• Contact and delivery information: phone number, email address, and postal address for USB token delivery.
• Business information: company name, CIN, IEC, GSTIN, authorization letters or board resolutions, where the certificate is issued to an organization.
• Communication data: messages you send us via WhatsApp, our contact form, or phone, including any details you share while discussing your requirement.
• Technical data: standard information your browser sends when visiting our website (such as browser type and general location), collected via third-party services we use to run the site (see Section 5).

We do not collect payment card details through this website, payments are arranged directly with our team and are not processed or stored by dscdigitalsignature.in.

2. How we use your information

• To verify your identity and submit your application to the relevant Certifying Authority (eMudhra, Capricorn CA, vSign or SpeedSign) for certificate issuance.
• To communicate with you about your application, delivery, renewal reminders, or support requests.
• To arrange delivery of your USB token through our courier partners.
• To comply with CCA regulations, which require Certifying Authorities and their RAs to retain certain KYC records for specified periods.
• To improve our services and respond to feedback, including reviews you choose to leave publicly on Google.

3. Aadhaar and video KYC data

Where Aadhaar-based eKYC is used, your Aadhaar number and biometric/demographic authentication are processed solely to verify your identity for certificate issuance, in line with UIDAI and CCA requirements. We do not use your Aadhaar data for any purpose beyond this verification, and we do not sell or rent this data to any third party. Video KYC recordings are retained only as long as required under applicable CCA record-retention rules, and access is restricted to authorized personnel involved in the verification and issuance process.

4. Sharing your information

We share personal information only where necessary to provide the service:

• Certifying Authorities (eMudhra, Capricorn CA, vSign, SpeedSign), to whom we submit your KYC details as part of certificate issuance. Each CA has its own privacy and data-handling obligations under CCA regulation.
• Courier partners, your name, phone number and delivery address, solely to deliver your USB token. For urgent deliveries you choose to arrange yourself via Borzo, Porter or Uber, that booking is directly between you and the courier provider.
• Form and communication tools, our website's contact and enquiry forms are processed via Formspree; messages sent through our WhatsApp links are handled via WhatsApp (Meta Platforms, Inc.), subject to their own privacy terms.
• Legal and regulatory bodies, where required by law, court order, or CCA/government directive.

We do not sell your personal information to third parties for marketing purposes.

5. Cookies and third-party services

This website loads fonts from Google Fonts and uses Tailwind CSS via a content delivery network, both may set minimal technical cookies or log standard request data (such as IP address) as part of normal web delivery, independent of us. We do not currently run advertising trackers or third-party analytics beyond what these services inherently require to load.

6. Data retention

We retain KYC and application records for as long as required under CCA and IT Act rules for Certifying Authorities and RAs, and for as long as reasonably necessary to support renewals, warranty claims on tokens, and legal compliance. Contact form submissions and communication records are retained only as long as needed to resolve your enquiry, unless a longer period is required by law.

7. Your rights

You may ask us to access, correct, or delete personal information we hold about you, subject to our regulatory obligation to retain certain KYC records for the periods mandated by the CCA. To make a request, contact us using the details in Section 9.

8. Security

We take reasonable technical and organizational measures to protect your information, including restricting access to KYC data to personnel directly involved in verification and issuance. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Grievance officer & contact

For any privacy-related questions, requests, or complaints, please contact:

DSC Digital Signature Certificate
Unit 524, Neelkanth, Lal Bahadur Shastri Marg, Nityanand Nagar, Ghatkopar West, Mumbai, Maharashtra 400086
Phone: +91 93213 28744
WhatsApp: wa.me/919321328744

10. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page will reflect the most recent revision.