Privacy Policy
This Privacy Policy explains how FSSAI Consult collects, uses, stores, shares, and protects your personal data when you interact with our website www.fssaiconsult.com or engage our food regulatory consultancy services.
Data Fiduciary Commitment
Under the Digital Personal Data Protection Act, 2023 (DPDP Act) and DPDP Rules 2025, FSSAI Consult acts as a Data Fiduciary. We collect only necessary personal data for regulatory filing purposes and implement reasonable security safeguards to prevent data breaches.
1. Who We Are
FSSAI Consult("we," "us," "our," or "the Company") is a food regulatory consultancy providing FSSAI licensing, compliance, product approval, labeling advisory, and related regulatory services to Food Business Operators (FBOs) across India.
Registered Office: F-2, 1st Floor, Noida Sector-3, Near Metro Station Noida Sector 16, Uttar Pradesh – 201301, India
Email: info@fssaiconsult.com | Helpline: +91 93111 17064 / +91 72338 11034
2. Personal Data We Collect
We collect only such personal data as is necessary to provide our services and comply with legal obligations:
2.1 Contact & Identity Data
- Full Name & Contact Designation
- Mobile / WhatsApp Phone Number
- Email Address & Official Correspondence Address
2.2 Business & Regulatory Data
- Business Name & Constitution Type
- FSSAI License / Registration numbers
- GSTIN, IEC (Import Export Code), APEDA/MPEDA IDs
- Turnover declarations & product formulations
2.3 KYC & Identity Verification
- Aadhaar / PAN / Passport / Voter ID (as required for FoSCoS portal)
- Partnership deeds, Incorporation documents
- Applicant photographs & premise proof
2.4 Payments & Digital Logs
- Payment transaction logs (processed via Razorpay / PayU)
- Note: We do NOT store card numbers or bank passwords
- IP address, browser type & timestamp logs
3. How We Collect Your Personal Data
- Directly from you: when you fill website forms, query forms, or communicate via WhatsApp, email, or telephone.
- During onboarding: during CA consultation calls, document collection, and FoSCoS portal application staging.
- Automatically: via essential cookies and analytics tools when browsing www.fssaiconsult.com.
- From authorized representatives: such as your Chartered Accountant, Company Secretary, or business partners upon your authorization.
4. Purposes for Processing Personal Data
We process your personal data strictly for lawful, specified purposes:
- Filing FSSAI Form A, Form B, Form D1, Form D2, and ePAAS Product Approval dossiers.
- Drafting custom Food Safety Management Systems (FSMS) & HACCP plans.
- Coordinating NABL laboratory water and food testing on your behalf.
- Communicating application status, inspection queries, and compliance deadline reminders.
- Fulfilling legal obligations under the FSS Act 2006, Income Tax Act, and GST laws.
5. Legal Basis under DPDP Act 2023
Under Section 6 of the Digital Personal Data Protection Act, 2023, we process personal data based on:
a) Free & Informed Consent: Given by you when submitting forms or engaging our consulting services.
b) Legitimate Uses: Processing necessary for fulfilling a contract entered into with us or complying with statutory requirements issued by government regulatory bodies (FSSAI, Ministry of Health & Family Welfare).
6. Sharing of Personal Data
We share personal data strictly on a need-to-know basis with:
- Government Authorities: FSSAI, State Licensing Authorities, FoSCoS portal, ePAAS portal, DGFT, APEDA, MPEDA solely to complete regulatory filings.
- Contracted Data Processors: Payment gateways (Razorpay/PayU), cloud storage (Google Workspace/Microsoft 365), and NABL accredited testing labs.
- Statutory Authorities: When required by court order, subpoena, or Indian law enforcement agencies.
We do NOT sell or rent your personal data to any third party for marketing purposes.
7. Your Rights as a Data Principal (DPDP Act)
Under the DPDP Act 2023 and DPDP Rules 2025, you hold the following statutory rights:
| Statutory Right | Description |
|---|---|
| Right to Information (Section 11) | Obtain a summary of personal data being processed and identities of Data Processors shared with. |
| Right to Correction & Erasure (Section 12) | Correct inaccurate data, update incomplete records, or erase data no longer required. |
| Right to Grievance Redressal (Section 13) | Have grievances resolved by our designated Grievance Officer within DPDP timelines. |
| Right to Nominate (Section 14) | Nominate a representative to exercise rights in case of death or incapacity. |
8. Data Retention Period
Client engagement records and FSSAI application filings are retained for 7 years in accordance with Income Tax and statutory audit obligations. Invoice logs are retained for 8 years under GST law. Unrelated inquiries without engagement are deleted after 12 months.
9. Security Safeguards
We implement role-based access control, SSL/TLS encryption in transit, encrypted database storage, strict internal confidentiality agreements, and regular vulnerability audits as required by Section 8(5) of the DPDP Act.
10. DPDP Grievance Officer Contact Details
If you have any questions, concerns, or wish to exercise your Data Principal rights under the DPDP Act 2023, please contact our designated Grievance Officer:
Grievance Officer: Compliance Officer (FSSAI Consult Desk)
Company: FSSAI Consult
Email: info@fssaiconsult.com
Helpline: +91 93111 17064 / +91 72338 11034
Address: F-2, 1st Floor, Noida Sector-3, Near Metro Station Noida Sector 16, Uttar Pradesh – 201301, India
Requests are acknowledged within 24 hours and addressed within 30 days. If unresolved, you may appeal to the Data Protection Board of India.
11. Governing Law & Jurisdiction
This Privacy Policy is governed by the laws of India. Any disputes arising hereunder shall be subject to the exclusive jurisdiction of the courts at Noida, Uttar Pradesh, India.