1. Submit and route a request
- Email privacy@monisaenterprise.com with subject Data Request, or grievance@monisaenterprise.com with subject Privacy Grievance.
- State the account email, the right you want to exercise, the data or project concerned and your country/state of residence.
- Do not send identity documents initially. We will request proportionate evidence only if necessary.
MoniSa decides requests concerning account, workforce and its own business records. A request about personal data contained in client task content is securely forwarded to the client controller/fiduciary for decision, and MoniSa assists that client.
2. Available rights
Rights vary by law and may include access and a processing summary; correction, completion and updating; erasure; restriction; portability; objection; consent withdrawal; information about sharing; appeal or grievance; and nomination under Indian law. You may also complain to your EEA/UK supervisory authority or, when the relevant process is available, the Data Protection Board of India.
3. Timing and verification
We acknowledge a request promptly and normally answer within one month. Where another law applies, we use its statutory deadline. A complex request may take longer where law permits, and we will explain why. We verify identity and authority to protect the requester and other people.
4. Limits and appeals
We may withhold another person’s data, client-confidential information, security-sensitive material, privileged material, or records that law requires us to retain. We will explain any refusal and available appeal. A deletion request does not erase invoices, tax records or evidence under a valid legal hold, but those records are restricted to that purpose.
5. No retaliation
MoniSa does not deny service or retaliate merely because a person exercises a privacy right. If withdrawing data needed to provide an active service makes that service impossible, we will explain the operational consequence before acting.