What this system holds

This application is used internally by Unitech Concrete and its affiliated entities (Unitech Automobile, Unitech Construction) to run plant operations. It holds several kinds of personal data:

• Employee records — name, employee code, designation, department, date of joining, and leave history, for everyone covered by the leave policy, including agency staff.
• Safety records — names of personnel involved in recorded unsafe-act warnings, kept as part of the plant safety process.
• User accounts — a username and a securely hashed password for anyone who logs into the system. Passwords are never stored or visible in plain text, including to administrators.
• Vehicle and machine records — registration numbers, chassis and engine numbers, and statutory compliance documents for the fleet.
• Operational and financial records — inventory, assets, diesel consumption, and AMC contracts, which may reference the employees or vendors involved in a transaction.

Who can see it

Access is restricted by role. Staff accounts see only their own plant. HR accounts see only the leave module. Maintenance accounts see only the maintenance module, scoped to the plant they have selected. Master admin accounts can see everything, because running the business requires it. Safety reporting is the one function open to every role. Nobody outside these roles — no external party, and no automated third-party service — is given access to this data.

Photographs are part of several records: a photo is required when a safety warning is issued, when a randomly selected daily checklist item is answered, and when a breakdown is closed. Checklist photos are deleted automatically after 60 days. Safety and repair photos are kept with the record they belong to.

How long it's kept

Operational and statutory records (compliance documents, safety warnings, financial records) are kept for as long as the underlying business or legal requirement applies. Leave records are kept per the retention period required for statutory compliance in West Bengal.

Personnel and leave records are retained for two calendar years after the year in which they arise, or after an employee leaves, whichever is later. Records that a statutory or audit requirement obliges Unitech Group to keep for longer are kept for that longer period.

Removal at the end of the retention period is carried out as a periodic review, not automatically by the software. Deleting a record in most modules marks it as deleted and keeps it out of normal views, while retaining it in the database so that past transactions referring to it remain readable.

Your data, if it concerns you

If you are an employee, driver, or other individual whose information is held in this system and you want to know what is recorded about you, have it corrected, or ask a question about this policy, contact:

The head office of Unitech Concrete, through your plant in-charge.

You can ask for a copy of what is recorded about you, ask for a factual error to be corrected, or ask why a particular record is held. Requests are answered within a reasonable period. Some records cannot be deleted on request where the law or an audit requirement demands they be kept.

How it is protected

The system is reachable only over an encrypted connection. Passwords are stored as one-way hashes, so nobody — including administrators — can read an existing password; an administrator can only reset one. Sessions expire after a period of inactivity and require logging in again. Deleting, exporting and importing data are restricted to master admin accounts, and significant actions are recorded with the account and time that performed them. The database is backed up regularly, and backups are held under the same access restrictions as the live system.

Changes to this policy

This page is part of the application's source code and changes only when the software is updated and redeployed, the same as any other page. There is no separate notification process for changes to this policy today.