Akriti Precision Systems Private Limited ("Akriti", "we", "us", or "our"), accessible from https://akriti.tech, respects your privacy and is committed to protecting your personal data. This Privacy Policy outlines the types of information we collect, how we process and store it, and your statutory rights under the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, and other applicable Indian laws.
Legal Basis and Consent
We process your personal data in accordance with Indian data protection laws under the following legal grounds:
- Consent: We will obtain your free, specific, informed, unconditional, and unambiguous consent before processing your personal data, except where permitted by law.
- Legitimate Uses: In certain instances, we process personal data for legitimate business uses permitted under Section 7 of the DPDP Act (such as fulfilling purchase contracts or legal obligations).
- Consent Withdrawal & Consent Managers: You may withdraw your consent at any time. You also have the right to manage or withdraw consent through a registered Consent Manager as recognized under the DPDP Act.
Information We Collect
We may collect the following personal data during your interactions with our website or services:
- Contact Information: Name, business name, email address, phone number, and mailing address.
- Order & Billing Information: Tax identification numbers (GSTIN), billing and shipping addresses, and transaction verification details.
- Technical & Usage Data: IP address, browser specifications, device details, and site usage data collected via cookies or analytical tools.
- Communication Data: Message content, inquiries, and technical support attachments sent via contact forms, email, or WhatsApp.
Purpose of Processing
Your personal data is collected and processed strictly for specified, lawful purposes:
- To manufacture, fulfill, ship, and deliver your product orders.
- To issue GST-compliant invoicing and manage customer accounts.
- To provide technical support, customer service, and order status updates.
- To detect, prevent, and address security incidents, fraud, or legal non-compliance.
- To optimize website performance and enhance user experience.
Data Security
We implement technical and organizational measures to safeguard personal data against unauthorized processing, accidental loss, damage, or destruction. Security practices include encrypted data transmission (SSL), secure cloud infrastructure, role-based access controls, and regular vulnerability audits.
Data Retention and Erasure
We retain personal data only as long as necessary to fulfill the purposes for which it was collected, including compliance with tax, statutory, or accounting requirements under Indian law. When retention is no longer required, data is securely erased or anonymized.
Your Statutory Rights as a Data Principal
Under the DPDP Act, 2023, you possess the following statutory rights:
- Right to Access: Request a summary of your personal data processed by us and processing activities undertaken.
- Right to Correction & Completion: Request correction of inaccurate, misleading, or incomplete personal data.
- Right to Erasure: Request deletion of your personal data when it is no longer necessary for the purpose collected, unless retention is mandated by law.
- Right to Withdraw Consent: Withdraw consent for data processing at any time.
- Right to Grievance Redressal: Seek prompt redressal of grievances regarding personal data processing.
- Right to Nominate: Nominate an individual to exercise your data principal rights in the event of death or incapacity.
- Language Accessibility: Request access to this privacy notice in English or any of the 22 languages specified in the Eighth Schedule of the Constitution of India.
Children's Privacy
We do not knowingly collect or process personal data from individuals under 18 years of age. If we discover that a child has provided us with personal data without verifiable parental consent, we will take immediate steps to delete it.
International Data Transfers
Where personal data is transferred outside India to third-party service providers (such as cloud analytics or infrastructure), we ensure such transfers comply with the provisions of the DPDP Act and maintain appropriate protection standards.
Grievance Officer & Contact Information
In compliance with the Information Technology Act, 2000 and the DPDP Act, 2023, the details of our Grievance Officer are:
Grievance Redressal SLA: We acknowledge grievances within 48 hours and resolve them within 15 business days. If you remain dissatisfied, you have the right to file a complaint with the Data Protection Board of India.
