Pynk Privacy Policy | Global HR & Payroll Platform
Effective date: 6 October 2026
1. Who We Are
Pynk Worldwide Private Limited ("Pynk", "we", "us") is a company incorporated in India, with its registered office at Alt.F Orchid Business Park, Badshahpur Sohna Road, Central Park II, Sector 48, Gurugram, Haryana 122018, India.
Pynk decides why and how your personal data is processed through pynkworldwide.com and the Pynk platform. Under India's Digital Personal Data Protection Act, 2023 ("DPDP Act"), Pynk is a Data Fiduciary. Under the EU and UK General Data Protection Regulation ("GDPR"), Pynk is a data controller.
Where a client engages Pynk to employ or pay workers on its behalf, Pynk and the client may each be responsible for parts of that processing. Our client agreements set out who is responsible for what.
2. Who This Policy Covers
This policy applies to personal data of:
- Website visitors to pynkworldwide.com, including people who book a demo or subscribe to updates.
- Client contacts — people at companies that use or consider Pynk.
- Workers — employees, contractors and freelancers engaged through Pynk on behalf of our clients.
- Candidates for roles with Pynk or our clients.
- Partner contacts — people at in-country employment partners, service providers and suppliers.
Workers employed through Pynk may receive an additional country-specific privacy notice at onboarding. Where that notice differs from this policy, the country notice applies to that employment.
3. Personal Data We Collect
We collect only what we need for the purposes in section 4.
| Category | Examples | Whose data |
|---|---|---|
| Contact and identity | Name, work email, phone, company, job title, country | All |
| Demo and enquiry details | Country you want to hire in, messages you send us | Website visitors, client contacts |
| Government identifiers | Passport, national ID, tax and social security numbers, right-to-work documents | Workers, candidates |
| Employment details | Role, start date, compensation, work location, contract terms, leave and attendance | Workers |
| Payroll and banking | Bank account details, salary, deductions, benefits elections, payslips | Workers |
| Background verification | Education, employment history, other checks permitted by local law, only with notice and where lawful | Workers, candidates |
| Sensitive data | Health data for benefits, sick leave or workplace adjustments, only where local law requires or permits it | Workers |
| Usage data | IP address, browser, device, pages visited, session data | Website and platform users |
| Communications | Emails, support requests, meeting notes | All |
We receive some data from clients (for example, a worker's name and proposed salary), from in-country partners, and from public professional sources such as company websites. Where we collect data from someone other than you, we tell you when we first contact you, unless the law says we do not have to.
4. How We Use Your Data and Why
| Purpose | DPDP Act basis | GDPR basis |
|---|---|---|
| Responding to demo requests and enquiries | Consent | Legitimate interests / steps before a contract |
| Providing EOR, contractor, payroll and benefits services | Consent; legitimate uses for employment purposes (s. 7) | Contract; legal obligation |
| Employing workers, running payroll, filing tax and social security | Legitimate uses, including employment and compliance with law (s. 7) | Legal obligation; contract |
| Onboarding, offboarding and background checks | Consent or legitimate uses, as local law allows | Legal obligation; legitimate interests |
| Invoicing and account management | Consent; legitimate uses | Contract |
| Security, fraud prevention and audit logs | Legitimate uses; compliance with law | Legitimate interests; legal obligation |
| Marketing emails and newsletters | Consent | Consent (or soft opt-in where permitted) |
| Improving the website and platform | Consent (analytics cookies) | Consent (analytics cookies) |
Where we rely on consent, we will ask for it with a clear notice in English and, on request, in any language listed in the Eighth Schedule to the Constitution of India. You can withdraw consent at any time, as easily as you gave it, by emailing askus@pynkworldwide.com or using the unsubscribe link. Withdrawal does not affect processing already carried out.
We do not sell personal data. We do not use worker data for marketing.
5. Who We Share Your Data With
We share personal data only when needed for the purposes in section 4, and under written contracts that require the recipient to protect it.
- In-country employment partners. In countries where Pynk does not have its own entity, a vetted local partner may act as the legal employer and run payroll. They receive the worker data needed to do so.
- Our clients. Clients receive the data about their workers that they need to manage day-to-day work, such as role, work schedule and cost.
- Service providers (Data Processors). These include Amazon Web Services (AWS), which hosts our data in its India region, Google Analytics for website analytics, and payment and foreign-exchange providers. A current list is available on request at askus@pynkworldwide.com.
- Authorities. Tax, social security, immigration and other government bodies, where the law requires it.
- Professional advisers. Lawyers, auditors and accountants, under confidentiality duties.
- Business transfers. A buyer or successor if Pynk is involved in a merger, acquisition or sale of assets, subject to this policy.
6. International Transfers
Global employment means your data may be processed outside the country where it was collected, including in India and the worker's country of employment. Our platform data is hosted with AWS in India.
- From India: transfers follow the DPDP Act and any restrictions the Government of India notifies on transfers to particular countries.
- From the EU, EEA or UK: we use an adequacy decision where one exists, or Standard Contractual Clauses (with the UK Addendum for UK data), plus additional safeguards where needed.
- Other countries: we follow local transfer rules where they apply.
You can ask for a copy of the safeguards we use at askus@pynkworldwide.com.
7. How Long We Keep Your Data
We keep personal data only as long as we need it for the purpose it was collected, or as long as the law requires. Then we erase it, or make it anonymous.
You can ask us to erase your data earlier. We will do so unless the law requires us to keep it.
8. Security and Breaches
We protect personal data with reasonable security safeguards, including encryption, access controls limited to people who need the data, logging and monitoring, and backups. We require our service providers and partners to do the same.
If a personal data breach occurs, we will inform affected individuals and the Data Protection Board of India without delay, and as required by law. Where GDPR applies, we will notify the relevant supervisory authority within 72 hours where required, and tell affected individuals when the breach is likely to pose a high risk to them.
9. Your Rights
Your rights depend on where you are and which law applies.
Under India's DPDP Act, you can:
- Get a summary of the personal data we process about you, and who we have shared it with.
- Ask us to correct, complete, update or erase your data.
- Withdraw consent at any time.
- Have your grievance resolved.
- Nominate someone to exercise your rights if you die or become unable to.
Under the EU or UK GDPR, you can also:
- Restrict how we process your data.
- Receive your data in a portable, machine-readable format.
- Object to processing based on legitimate interests, and to direct marketing at any time.
- Not be subject to decisions made only by automated means that significantly affect you.
Other countries' laws may give you further rights.
To use any right, email askus@pynkworldwide.com. We may need to verify your identity first. We aim to respond within 30 days. Grievances under the DPDP Act are resolved within 90 days at most. GDPR requests are answered within one month, extendable where the law allows.
If you are a worker employed through Pynk, some requests may need input from your client company or in-country employer. We will coordinate this for you.
10. Children's Data
Our website and services are for businesses and working adults. We do not knowingly collect personal data from anyone under 18. If we process data about a worker's dependants, for example to enrol them in benefits, we do so only as local law permits and with the consent required by law. If you believe we hold a child's data in error, contact askus@pynkworldwide.com and we will erase it.
11. Cookies
We use essential cookies to make the website work. With your consent, we also use analytics cookies to understand how the website is used. We use Google Analytics for this. Google processes this data on our behalf.
When you first visit our website, a cookie banner lets you accept or reject non-essential cookies, or choose which ones to allow. Analytics cookies are not set until you accept them. You can change your choice at any time through the cookie settings link in the website footer. You can also block cookies in your browser settings, though some features may then not work.
12. Contact and Complaints
Grievance Officer
Pynk Worldwide Private Limited
Alt.F Orchid Business Park, Badshahpur Sohna Road, Central Park II, Sector 48
Gurugram, Haryana 122018, India
Email: askus@pynkworldwide.com
Please contact us first so we can try to resolve your concern. If you are not satisfied:
- In India, you can complain to the Data Protection Board of India after using our grievance process.
- In the EU or EEA, you can complain to the data protection authority where you live, work, or where the issue arose.
- In the UK, you can complain to the Information Commissioner's Office (ico.org.uk).
- Elsewhere, you can contact your local data protection authority.
13. Changes to This Policy
We will update this policy when our services or the law change. The effective date at the top shows when the current version took effect. If we make significant changes, we will tell you by email or through a notice on our website before they take effect.