Privacy Policy & Data Protection

1. Introduction & Legal Framework

Welcome to Device Cares ("we", "our", or "us"). We respect your personal privacy and are committed to protecting all personal information you provide when using our website (devicecares.in), booking doorstep technician visits, purchasing hardware components, or interacting with our digital invoicing portals.

This Privacy Policy is formulated in strict compliance with:

• The Digital Personal Data Protection Act, 2023 (DPDP Act) of India.
• The Information Technology Act, 2000 (IT Act) and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI Rules).
• The Consumer Protection (E-Commerce) Rules, 2020.

2. Personal Data We Collect

When you book a doorstep repair appointment, request quotes, or purchase hardware, we collect only minimal information necessary to fulfill our service commitment:

Note: We do not store raw credit/debit card numbers, CVVs, or Netbanking passwords. All digital payments are processed through RBI-approved Indian payment gateways.

3. How We Use Your Information (Purpose of Processing)

Your data is processed strictly for legitimate business and fulfillment purposes:

• Doorstep Technician Dispatch: To assign the nearest certified mobile hardware engineer to your home or office within 45-60 minutes.
• Service & Warranty Tracking: To generate digital invoices and validate your 90-day parts warranty upon request.
• Direct Service Communication: To send appointment confirmations, technician live arrival alerts, and repair status updates via Phone Call or WhatsApp.
• Tax & Regulatory Compliance: To comply with Indian Goods and Services Tax (GST) invoicing standards and bookkeeping requirements.

4. Zero Data Selling & Third-Party Non-Disclosure

Your data is accessed only by authorized Device Cares staff and the designated field technician assigned to your service call. We may disclose personal data only when required by applicable Indian law, court order, or competent regulatory authority.

5. Security Safeguards & Reasonable Security Practices

In adherence to Rule 8 of the IT (Reasonable Security Practices and Procedures) Rules, 2011, we implement robust technical and operational controls:

• 256-Bit SSL/TLS Encryption: All web traffic between your browser and our servers is encrypted using modern HTTPS protocols.
• HttpOnly Secure Cookies: Administrative access is fortified with cryptographically signed tokens and HttpOnly session barriers to prevent XSS and CSRF attacks.
• Customer Hard Drive Privacy: Our engineers perform hardware diagnostics in front of you. Technicians are prohibited from copying, browsing, or transferring personal files, photos, or documents from customer storage drives.

6. Your Legal Rights (Under DPDP Act 2023)

As a data principal, you have the following rights under Indian law:

• Right to Access: You may request a summary of the personal data we hold about your service history.
• Right to Correction: You can ask us to correct incomplete or inaccurate contact numbers and addresses.
• Right to Erasure: Subject to statutory tax record retention requirements, you can request that your customer profile be purged from our active databases by emailing support@devicecares.in.

7. Statutory Grievance Redressal Officer

In accordance with Rule 5(9) of the IT SPDI Rules, 2011 and Section 13 of the Digital Personal Data Protection Act, 2023, the details of our designated Grievance Officer are published below:

8. Policy Updates & Consent

By accessing our website, booking an onsite technician, or engaging Device Cares for laptop, computer, or CCTV services, you acknowledge that you have read and agreed to this Privacy Policy. Any material modifications will be updated on this page with a revised date.