Last updated: 16 May 2026 | Effective: 1 January 2024
1. Overview
First General Management Solutions Pvt. Ltd. ("FGMS", "we", "our", or "us") values your privacy and is committed to protecting the personal information you share with us while using our website (www.fgms.in) or engaging with our certification and compliance consulting services.
This Privacy Policy explains what personal data we collect, why we collect it, how it is processed and shared, how long we retain it, and what choices you have. By using our website or services, you acknowledge that you have read and understood this policy.
Scope: This policy applies to all personal data processed in connection with the FGMS website, client portal, contact forms, and service engagements, regardless of the country in which you are located.
2. Information We Collect
We may collect the following categories of personal information depending on how you interact with us:
a) Information You Provide Directly
- Full name, email address, phone number, and designation
- Company name, registered address, GSTIN, PAN/CIN
- Product details, technical specifications, test reports, and certification records
- Identity and address proof documents (for regulatory applications)
- Payment and billing information (processed securely through our payment gateway)
- Messages and communication history via contact forms, email, or chat
b) Information Collected Automatically
- IP address, browser type, device type, and operating system
- Pages visited, time of visit, links clicked, and referring URL
- Session cookies to maintain your login state on the client portal
c) Information from Third Parties
- Publicly available information such as company registry data (MCA, GST database)
- Information shared by referral contacts or business partners
3. How We Use Your Information
We use the information collected for the following purposes:
Provide Services
Process your certification applications, coordinate with regulatory bodies, and manage your case.
Communication
Send application updates, regulatory alerts, event invitations, and service-related notices.
Service Improvement
Analyse usage data to improve website functionality and client portal experience.
Legal Compliance
Meet our obligations under applicable Indian and international laws and regulations.
Customer Support
Respond to queries, complaints, and requests submitted through our contact channels.
Billing & Invoicing
Generate invoices, process payments, and manage financial records.
4. Legal Basis for Processing
We process your personal data based on the following legal bases:
- Contractual Necessity: Processing required to fulfil our service agreement with you (e.g., managing your certification application)
- Legitimate Interests: Processing necessary for our legitimate business interests such as client communication, service improvement, and fraud prevention
- Legal Obligation: Processing required to comply with applicable laws, government directives, or court orders
- Consent: Where you have given explicit consent to receive marketing communications or for specific uses of your data
5. Information Sharing & Disclosure
FGMS does not sell, rent, or trade your personal information. We may share your data in the following limited circumstances:
- Regulatory Authorities: BIS, DoT, MoEF, CPCB, FSSAI, and other relevant government bodies as required for your certification or licence applications
- Accredited Testing Laboratories: For product testing and sample evaluation required as part of the certification process
- Service Providers: Cloud hosting providers, email service vendors, and CRM tools who process data on our behalf under data processing agreements
- Legal Requirements: When required by law, court order, or government directive
- Business Transfers: In the event of a merger, acquisition, or sale of assets, subject to appropriate notice to you
All third-party service providers are bound by confidentiality obligations and are prohibited from using your data for any purpose other than providing the agreed service.
6. Data Retention
We retain personal data for as long as necessary to fulfil the purposes described in this policy, unless a longer retention period is required or permitted by law:
- Active client records: Duration of the service engagement plus 7 years (as required under Indian financial record-keeping laws)
- Certification documents: 10 years or as required by the relevant regulatory body
- Marketing consent records: Until you withdraw consent
- Website logs: 90 days rolling
Upon expiry of the retention period, we securely delete or anonymise your personal data.
7. Your Rights
Subject to applicable law, you have the following rights regarding your personal data:
Right to Access — Request a copy of the data we hold about you
Right to Correction — Request correction of inaccurate or incomplete data
Right to Erasure — Request deletion of your data (subject to legal retention obligations)
Right to Restriction — Request that we limit processing of your data in certain circumstances
Right to Portability — Receive your data in a structured machine-readable format
Right to Object — Object to processing based on legitimate interests or for direct marketing
Right to Withdraw Consent — Withdraw consent at any time for consent-based processing
To exercise any of these rights, email us at info@fgms.in. We will respond within 30 days.
8. Security Measures
We implement industry-standard technical and organisational security measures to protect your personal data, including:
- SSL/TLS encryption for all data transmitted to and from our website and client portal
- Role-based access controls limiting staff access to data on a need-to-know basis
- Regular security patching and vulnerability assessments
- Secure document storage with access logging
- Employee training on data protection and confidentiality obligations
While we maintain robust security practices, no method of data transmission or storage is 100% secure. You transmit data at your own risk but we will take all reasonable steps to protect it.
9. Cookies & Tracking
Our website uses the following types of cookies:
- Essential Cookies: Required for the website and client portal to function (session management, login state). These cannot be disabled.
- Analytics Cookies: Used to understand how visitors interact with our website (page views, navigation paths). These are anonymised and aggregated.
- Preference Cookies: Used to remember your settings such as language preference.
We do not use third-party advertising or behavioural tracking cookies. You can manage cookie preferences through your browser settings.
10. Third-Party Services
Our website may contain links to third-party websites, government portals (e.g., BIS Online Portal, MCA21, CPCB EPR Portal), or partner sites. This Privacy Policy does not apply to those sites. We encourage you to review the privacy policies of any third-party website you visit.
11. Children's Privacy
Our services are not directed at children under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us immediately and we will take steps to delete it.
12. Grievance Officer
In accordance with the Information Technology Act, 2000 and the applicable Rules, we have appointed a Grievance Officer for privacy-related complaints:
Grievance Officer — FGMS Data Privacy
Email:
info@fgms.in
Response Time: Within 30 days of receipt of complaint.
13. Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. The updated policy will be posted on this page with a revised "Last updated" date. For significant changes, we will notify registered users by email or through a prominent notice on our website.
14. Contact Us
For questions about this Privacy Policy, to exercise your rights, or to report a concern, please contact us:
Address
Corporate Office: Delhi NCR, India