Privacy Policy

NMRC HRMS — Employee Self Service Mobile Application


At Noida Metro Rail Corporation Ltd. (“NMRC”, “we”, “us” or “our”), we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose and safeguard your information when you use the NMRC HRMS mobile application, our employee self‑service platform for serving employees of NMRC.

By installing and using the application, you agree to the practices described in this policy. This policy applies only to the NMRC HRMS mobile application — the NMRC website is governed by the privacy statement published on the Terms & Conditions page.

The application is for internal use only. It is not available to the general public. Access requires a registered NMRC employee account, and all information in the application relates to your employment with NMRC.

1. Information We Collect

The application does not ask you to create a new profile. The information shown to you already exists in NMRC’s human resource records and is made available to you through the application. The categories of information handled are:

Category What it includes Why it is needed
Identity & profile Name, employee code, date of birth, photograph, department, designation, grade, pay scale and reporting officers To identify you and display your official profile
Contact details Official email address, mobile number, residential address and emergency contact information To sign you in and to contact you regarding HR matters
Leave records Leave applications, balances, approval status and any supporting documents you attach To let you apply for leave and track its approval
Payroll & financial Salary details, pay slips, bank account and PAN details, income tax declarations and supporting proofs To display your salary information and process tax declarations
Reimbursement Claims raised, amounts, approval status and attached bills or receipts To process and track your reimbursement claims
Performance Annual Performance Appraisal Report (APAR) entries, self‑appraisal and officer ratings To allow you to complete your appraisal and view its status
Technical information Device type, operating system version, application version, network status and session tokens To keep you securely signed in and to diagnose technical problems

2. How We Use Your Information

Information handled through the application is used solely for legitimate human resource and administrative purposes, namely:

  • To authenticate you and maintain a secure session
  • To display your employment profile, leave balances and salary information
  • To process leave applications, reimbursement claims, income tax declarations and appraisals
  • To route requests to the appropriate reporting, sanctioning and approving officers
  • To send you notifications relating to approvals, announcements and HR communications
  • To comply with applicable Indian labour, payroll and tax regulations, including provident fund, income tax and TDS requirements
  • To meet NMRC’s statutory, audit and record‑keeping obligations

3. Employee Data and Our Role

NMRC is the data fiduciary (controller) for all employee information processed through the application. The information originates from, and continues to form part of, your official employment record maintained by NMRC.

The application is developed and maintained for NMRC by an authorised technology service provider, which acts solely as a data processor on NMRC’s instructions and under contractual confidentiality obligations. The service provider does not use your information for any independent purpose.

4. Application Permissions

The application requests only the permissions listed below, and each is used solely for the purpose stated. You may decline any permission — the rest of the application will continue to work, but the feature that depends on it will not be available.

Permission How it is used
Files & storage Used only when you choose to attach a document to a leave application, a reimbursement claim or an income tax declaration, and to save files you download such as pay slips and HR forms.
Network & Wi‑Fi state Used to detect whether your device is online, so the application can show a clear message instead of failing silently.

The application does not collect or process location data, and does not use your camera or microphone. It does not track your movements, and it does not read your contacts, messages, call logs or any other files on your device beyond the specific documents you choose to attach.

5. Data Sharing and Disclosure

We do not sell or rent your personal information. Access is restricted on a need‑to‑know basis, and your information may be shared only as follows:

  • You — your own records, through your account
  • Your reporting, sanctioning and approving officers — only the requests requiring their action, such as a leave or reimbursement approval
  • Authorised HR, payroll and administrative staff — to the extent required to perform their duties
  • NMRC’s authorised technology service provider — only as required to host, operate, support and maintain the system, under confidentiality agreements
  • Government or regulatory authorities — where disclosure is required by law, court order or a lawful request, including under India’s Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023

6. Data Security

We implement reasonable technical and organisational measures to protect your information, including:

  • SSL/TLS encryption for all communication between the application and our servers
  • Authentication using a one‑time password sent to your registered email address or mobile number
  • Time‑limited session tokens that expire automatically and require you to sign in again
  • Role‑based access controls restricting what each user may view
  • Secure, access‑controlled hosting infrastructure located in India

No method of transmission or storage over the internet is completely secure, but we take commercially reasonable measures to protect your information. Please keep your login credentials and one‑time passwords confidential, and inform us immediately if you suspect unauthorised access to your account.

7. Data Retention

We retain personal data for as long as necessary to fulfil the purposes described in this policy or as required by law. Because these records form part of your official employment record, they are retained for the duration of your employment with NMRC and thereafter in accordance with applicable statutory requirements and NMRC’s record‑retention policy. Payroll and tax records are retained for the periods prescribed under Indian law.

A limited amount of data — your session token and basic profile details — is stored securely on your device so that you do not have to sign in repeatedly. This local data is removed as soon as you sign out or uninstall the application.

8. Cookies, Analytics and Tracking

The application does not use cookies, analytics tools, advertising identifiers or any third‑party tracking software. No usage data is collected for advertising or profiling, and no information is shared with advertising networks or data brokers.

9. Your Rights

Under India’s Digital Personal Data Protection Act, 2023 and other applicable laws, and subject to NMRC’s service rules, you have the right to:

  • Access the personal information held about you
  • Request correction of information that is inaccurate, incomplete or out of date
  • Request erasure of information that NMRC is not required to retain by law
  • Withdraw a device permission at any time through your device settings
  • Nominate another individual to exercise your rights in the event of death or incapacity
  • Raise a grievance with us, and lodge a complaint with the competent authority if unresolved

Because the application reflects official employment records, corrections are made through the established HR process. Please contact the HR department or use the details in Section 12.

10. Account and Data Deletion

Accounts in the NMRC HRMS application are created and managed by NMRC and are linked to your employment. You cannot delete your account from within the application, as the underlying records form part of NMRC’s official employment and statutory records.

Access is deactivated when your employment with NMRC ends. To request deletion of information that NMRC is not required to retain by law, please write to us using the details in Section 12. You can remove all locally stored data at any time by signing out of the application or uninstalling it from your device.

11. Children’s Privacy

The application is intended solely for use by employees of NMRC and is not directed at children. We do not knowingly collect information from anyone under the age of 18, other than dependant details that an employee chooses to provide as part of their own official HR record.

12. Contact Us

For any question, request or grievance concerning this Privacy Policy or the handling of your personal information, please contact:

Noida Metro Rail Corporation Ltd.

Address: Block‑III, 3rd Floor, Ganga Shopping Complex,
Sector‑29, Noida 201301, Uttar Pradesh, India

Email: nmrc@nmrcnoida.com

Website: www.nmrcnoida.com

13. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in the application, our practices or legal requirements. We will notify you of significant changes by posting the revised policy on this page with an updated date, and where appropriate, through a notification within the application. Continued use of the application constitutes acceptance of the revised policy.

14. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of India. Any dispute arising in relation to it shall be subject to the exclusive jurisdiction of the courts at Noida, Uttar Pradesh, India.