Privacy Policy

This Privacy Policy explains how Green Outdoors Global Private Limited (“GOGPL”, “Green Outdoors Global”, “we”, “us” or “our”) collects, uses, discloses, transfers, retains and protects your personal data when you visit our websites, submit an enquiry, or engage our recruitment, overseas-deployment, vocational-training or related services.

We are committed to handling your personal data lawfully, fairly and transparently, in accordance with the Digital Personal Data Protection Act, 2023 (“DPDPA”) and the Digital Personal Data Protection Rules, 2025, and, to the extent applicable, the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

1. Who we are

Green Outdoors Global Private Limited is an India-based international recruitment and overseas-manpower deployment company, with a vocational-training division and allied service verticals. For the purposes of the DPDPA, we act as a Data Fiduciary in respect of the personal data we determine the purpose and means of processing.

2. Scope of this policy

This policy applies to personal data we process about: visitors to our websites and anyone who submits a contact/enquiry form; employers, recruitment agencies, immigration advisers and agents who engage us; and candidates and trainees who use our recruitment, deployment or vocational-training services. It applies to personal data in digital form, consistent with the DPDPA.

3. Personal data we collect

We collect only the personal data reasonably necessary for the purposes described below.

a) When you submit an enquiry on our website

• Name, email address, phone number, country, and company/organisation
• The content of your message or requirement
• Your consent record and, where technically available, the source page of your enquiry

b) When you engage our recruitment / deployment / training services

Depending on the service, we may additionally process identity and eligibility information such as your identification and travel-document details, educational and professional qualifications, work experience, and other information required for visa, work-permit, embassy, MEA/eMigrate or employer processes. We collect such information directly from you and use secure channels; please do not send full passport, banking or other sensitive numbers through the website contact form.

4. How we collect it

• Directly from you, when you complete a form, email or message us, or engage our services;
• From employers, partner agencies or authorised agents, where you have engaged them in connection with our services;
• Automatically in limited technical form (see Section 14 on cookies and third-party embeds).

5. Why we use it (purposes)

Purpose	Examples
Respond to your enquiry	Contacting you about your message, sharing availability, timelines and next steps
Provide our services	Recruitment, screening, overseas deployment, vocational training and related consultancy
Legal & regulatory compliance	MEA / eMigrate / Protector of Emigrants, embassy, visa and work-permit requirements; statutory record-keeping
Communication	Service updates and responses to your requests
Security & integrity	Preventing fraud and misuse, and keeping our systems secure

We use your personal data only for the purpose(s) for which it was collected, or a purpose reasonably connected to it, in line with the DPDPA principle of purpose limitation.

6. Consent & its withdrawal

Where required, we process your personal data on the basis of your consent, which you give at the point of collection (for example, by ticking the consent box on our enquiry form). Your consent is free, specific, informed, unconditional and unambiguous, and limited to the purpose stated.

You may withdraw your consent at any time, and doing so is as easy as giving it. To withdraw consent, email [email protected]. Withdrawal will not affect the lawfulness of processing carried out before withdrawal, and certain data may be retained where the law requires (see Section 9).

7. Sharing & disclosure

We do not sell your personal data. We share it only as necessary for the purposes above, with:

• Data Processors who act on our instructions under contract — for example, our online form and data-collection provider (Zoho Forms, operated by Zoho, using its India data-region service) and IT/hosting providers;
• Prospective employers and partner recruitment agencies, where you have asked us to present your candidature or where necessary to provide the service;
• Government authorities, embassies/consulates and regulators (including in connection with MEA/eMigrate, visa and work-permit processes), where required;
• Professional advisers, and where disclosure is required by law or to protect our legal rights.

Where a Data Processor processes personal data on our behalf, it is bound by contract to appropriate security and confidentiality obligations. As a Data Fiduciary, we remain accountable for such processing.

8. Cross-border transfers

Because our services involve overseas employment, your personal data may be transferred to, or accessed from, countries outside India — for example, to prospective employers, partner agencies, or embassies/consulates in destination countries, including within the European Union. We make such transfers only as necessary to provide the service you have engaged us for, and in accordance with the DPDPA and any restrictions notified by the Central Government of India on transfers to specified countries.

9. Data retention & erasure

We keep your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required to comply with legal, regulatory, tax or contractual obligations. When the purpose is served, your consent is withdrawn, or you have not engaged with us for the applicable retention period, we will erase your personal data (and require our Data Processors to do so), except where retention is required or permitted by law.

10. How we protect your data

We implement reasonable security safeguards to protect personal data against unauthorised access, use, disclosure, alteration or loss. These include:

• Encryption in transit — our websites are served over HTTPS/TLS, and our form provider transmits submissions over encrypted connections;
• Web security controls — security headers, clickjacking protection, a content-security policy, and disabled directory listing at the server level;
• Access control & confidentiality — access to personal data is limited to authorised personnel on a need-to-know basis, subject to confidentiality obligations;
• Data minimisation & retention limits — we collect only what we need and retain it only as long as necessary;
• Trusted processors — we use reputable service providers and require appropriate safeguards by contract.

In the event of a personal data breach, we will act in accordance with the DPDPA and the DPDP Rules, 2025, including notifying the Data Protection Board of India and affected individuals within the timelines prescribed by law. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

11. Your rights

Subject to and in accordance with the DPDPA, you (as a Data Principal) have the right to:

• Access a summary of the personal data we process about you and the processing activities;
• Correction, completion and updating of your personal data, and erasure where applicable;
• Withdraw consent at any time (see Section 6);
• Grievance redressal in respect of our processing (see Section 12);
• Nominate another individual to exercise your rights in the event of death or incapacity.

To exercise any of these rights, email [email protected] with your request. We may need to verify your identity before acting. We will respond within the timelines required by applicable law.

12. Grievance redressal

If you have any concern or complaint about how we handle your personal data, please contact our Grievance Officer:

If your grievance is not resolved to your satisfaction, you may escalate it to the Data Protection Board of India in accordance with the DPDPA and the DPDP Rules, 2025.

13. Children's data

Our services and websites are intended for adults (18 years and older). We do not knowingly collect the personal data of children without verifiable consent of a parent or lawful guardian, and we do not undertake processing likely to cause any detrimental effect on the well-being of a child, consistent with the DPDPA. If you believe a child has provided us personal data, please contact us so we can take appropriate action.

14. Cookies & third-party embeds

Our websites are built to be lightweight and do not use advertising cookies of our own. We use Google Analytics (GA4) to understand site usage (such as pages visited and traffic sources) in aggregate; Google may set cookies and process technical data for this purpose, subject to Google's privacy terms. You can opt out of Google Analytics tracking using tools such as the Google Analytics Opt-out Browser Add-on. Our enquiry form is embedded from Zoho Forms; when it loads, Zoho may set cookies or process technical data necessary to operate and secure the form, subject to Zoho's own privacy terms. If we introduce additional analytics or cookies in future, we will update this policy accordingly.

15. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in law. The “Last updated” date at the top indicates when it was last revised. Material changes will be reflected on this page; please review it periodically.

16. Contact us

For any questions about this policy or your personal data, contact us at [email protected] or WhatsApp +91 77789 789 88.