This Compliance Policy outlines how Lumiotech Private Limited ("Lumiotech," "we," "us," or "our") maintains adherence to various regulatory requirements, legal obligations, and industry standards. It applies to all employees, contractors, partners, and users of our services, products, and lumioWhisper (also known as "Whisper"), an intelligent corporate agent platform.
1. Purpose and Scope
The goal of this Policy is to ensure that our operations comply with all applicable laws, regulations, and best practices. It reflects our commitment to conducting business ethically and responsibly.
2. Regulatory Framework
Lumiotech is committed to following all relevant laws and regulations, which specifically include, but are not limited to:
- Digital Personal Data Protection Act (DPDPA), 2023 and associated rules;
- Information Technology (IT) Act, 2000 and amendments;
- CERT-In Directions 2022 regarding cybersecurity incident reporting;
- Employment and labor laws;
- Health, safety, and environmental standards;
- Anti-corruption and anti-bribery laws.
3. Roles and Responsibilities
3.1 Management
Senior management is responsible for establishing and overseeing the Compliance Policy, ensuring that necessary resources are allocated, and promoting a culture of compliance throughout the organization.
3.2 Compliance Team
The Compliance Team monitors regulatory changes, conducts audits, provides training, and investigates potential violations of the Compliance Policy.
3.3 Employees and Contractors
All employees, contractors, and affiliates are required to comply with this Policy and all applicable regulations. They must report any suspected violations or concerns to the Compliance Team.
4. Code of Conduct
Lumiotech maintains a Code of Conduct that outlines acceptable behaviors and ethical guidelines for all personnel. Key aspects include:
- Respecting confidentiality and privacy;
- Promoting a safe and inclusive workplace;
- Avoiding conflicts of interest;
- Adhering to anti-bribery and anti-corruption policies;
- Reporting any illegal or unethical activities.
5. Training and Awareness
We provide ongoing training programs to ensure that all personnel understand their responsibilities under this Policy, relevant laws, and industry standards. Training covers areas such as data protection, anti-corruption, and general regulatory obligations.
6. Monitoring and Auditing
Lumiotech periodically reviews its processes, policies, and internal controls to identify and address potential compliance risks. Audits may be conducted by internal or external auditors, and findings are used to improve compliance measures.
7. Reporting and Whistleblowing
We encourage employees and third parties to report any compliance-related concerns or potential violations. Reports can be made anonymously, where permitted by local law. We are committed to protecting whistleblowers from retaliation.
8. Non-Compliance and Disciplinary Action
Any violation of this Policy or applicable regulations may result in disciplinary actions, including termination of employment or contractual agreements, as well as potential civil or criminal penalties in accordance with applicable laws.
9. Records Management and Retention
We maintain records of compliance activities, including training records, audit results, and reports of non-compliance. In addition, as a cloud service provider under CERT-In Directions 2022, we are mandated to register and retain accurate subscriber/customer information for a period of five (5) years post the cancellation or withdrawal of registration. This includes validated names, period of hire, allotted IP addresses, email addresses used at registration, and the purpose of hiring our services.
10. Policy Updates
We may update this Compliance Policy from time to time to reflect changes in laws, regulations, or industry standards. When we do, we will revise the "Effective Date" at the top of this Policy. We may also provide additional notification if the changes are significant.
11. Contact Information
If you have any questions, concerns, or wish to report a compliance issue, please contact us at:
Lumiotech Private Limited
New Delhi, India
[email protected]
By continuing to engage with Lumiotech, you acknowledge that you have read, understood, and agree to comply with this Compliance Policy.