1. Scope and applicability
This Privacy Policy applies to personal information and sensitive personal data or information (“SPDI”, as defined under the SPDI Rules) collected through our website, enquiry forms, email, phone, WhatsApp or other channels, and in connection with lift/elevator and escalator supply, installation, AMC, breakdown support, modernization, and related services in Andhra Pradesh and Hyderabad (Telangana), India.
We comply with applicable Indian law, including the Information Technology Act, 2000 (“IT Act”), the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“SPDI Rules”), and—where applicable—the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and rules notified thereunder. Until core DPDP operational provisions apply to your processing, the IT Act and SPDI Rules remain the primary framework for many obligations described here.
2. Data fiduciary / body corporate
DOTEC Elevators
Registered office: [Building name, street, area], Visakhapatnam, Andhra Pradesh – [PIN], India
Email: privacy@example-dotec.com
3. Information we collect
Depending on your interaction with us, we may collect:
- Identity and contact data: name, designation, company or society name, email, phone, billing/service address, building/site address.
- Service and technical data: lift/escalator details, AMC contract information, service logs, breakdown reports, photos or videos of equipment (with consent where required), access instructions for sites.
- Commercial data: quotations, orders, invoices, GSTIN, payment-related references (we do not intentionally store full card numbers on this website).
- Website usage data: IP address, browser type, device information, pages viewed, and cookies (see our Cookie Policy).
- Communications: content of emails, calls, and messages when you contact us.
4. Sensitive personal data or information (SPDI)
Under SPDI Rules, certain categories (such as passwords, financial information, biometric data, health information, or precise location in some contexts) are treated as SPDI when combined with identifying information. We collect SPDI only where necessary for a lawful purpose (for example, bank details for refunds or payments, or information you voluntarily provide for safety at a site), with your consent or other permitted basis, and with heightened safeguards.
5. Purposes and legal basis
We use personal data to:
- respond to enquiries and provide quotations;
- perform contracts for supply, installation, AMC, and repairs;
- comply with safety, tax, and regulatory obligations;
- improve our website and customer service;
- send service-related notices (not unsolicited marketing without consent);
- protect our legal rights and prevent fraud or misuse.
Processing is based on your consent, performance of a contract, compliance with law, or legitimate interests permitted under applicable Indian law, as relevant to each activity.
6. Disclosure and sharing
We may share data with trusted service providers (hosting, IT support, payment processors, logistics, OEM partners) under confidentiality obligations; professional advisers; courts or authorities when required by law; and affiliated entities involved in delivering your service. We do not sell personal data.
SPDI Rule 6 permits disclosure to third parties only with your consent unless disclosure is required for legal compliance or as otherwise permitted under the SPDI Rules.
7. Cross-border transfers
Where data is stored or processed outside India (for example, cloud hosting), we ensure appropriate contractual and security measures consistent with applicable Indian requirements and DPDP Act transfer rules when in force.
8. Retention
We retain personal data only as long as needed for the purposes above, including statutory limitation periods, tax records (typically as required under Indian tax law), and AMC/warranty documentation. When no longer required, data is securely deleted or anonymized.
9. Security practices
We implement reasonable security practices and procedures under SPDI Rule 8, including access controls, secure transmission where feasible, staff training, and vendor due diligence. No method of transmission over the internet is completely secure; you share information at your own risk beyond our reasonable controls.
10. Your rights
Subject to applicable law, you may:
- request access to personal data we hold about you;
- seek correction of inaccurate or outdated data;
- withdraw consent where processing is consent-based (without affecting prior lawful processing);
- raise grievances regarding our processing (see below);
- exercise rights under the DPDP Act when applicable to you as a data principal (including nomination and erasure in permitted cases).
To exercise rights, contact privacy@example-dotec.com or our Grievance Officer. We may verify your identity before responding.
11. Grievance Officer
In accordance with Rule 5(9) of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“SPDI Rules”), and in line with grievance redressal expectations under applicable Indian law (including the Digital Personal Data Protection Act, 2023, as and when fully effective for your processing activities), we have designated a Grievance Officer:
- Name: [Full name of Grievance Officer]
- Designation: Grievance Officer
- Email: grievance@example-dotec.com
- Phone: +91-XXXXXXXXXX
- Address: [Office address for grievance correspondence], Visakhapatnam, Andhra Pradesh – [PIN], India
Grievances relating to processing of personal information will be addressed within one (1) month from the date of receipt, as required under the SPDI Rules. We aim to acknowledge website and service-related complaints within fifteen (15) days for website-related complaints where practicable.
12. Children
Our services are directed at businesses and adults. We do not knowingly collect personal data from children under 18 without parental or guardian consent as required under the DPDP Act. If you believe we have collected such data, contact us for deletion.
13. Third-party links
Our website may link to third-party sites. Their privacy practices are not controlled by us; review their policies separately.
14. Changes
We may update this policy to reflect legal or operational changes. Material changes will be posted on this page with an updated “Last updated” date. Continued use after changes constitutes notice of the updated policy where permitted by law.
15. Governing law and jurisdiction
This policy is governed by the laws of India. Courts at Andhra Pradesh shall have exclusive jurisdiction, subject to applicable consumer protection forums where you qualify as a consumer under the Consumer Protection Act, 2019.