Legal

Privacy Policy

Effective 16 October 2026. Prepared under the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.

1

Who we are

Secmont is a sole proprietorship based in Maharashtra, India. For the purposes of the Digital Personal Data Protection Act, 2023 ("DPDP Act"), we are the Data Fiduciary for the personal data described in this policy.

2

What we collect

  1. Inspection and contact forms: your name, phone number, site location, the service you need, the property type and your description of the problem.
  2. Messages: anything you send us by WhatsApp, phone, email or the chat window on our website.
  3. Project information: site address, photographs of the work area, measurements, quotations, invoices, payment records and, for businesses, your GSTIN.
  4. Technical information: our web server automatically records your IP address, browser type, the pages you request and the time of the request. This is used only to keep the website secure and working.

We do not collect financial account passwords, card numbers, Aadhaar numbers or other sensitive identifiers through this website.

3

Why we use it

  1. To respond to your enquiry and schedule a site inspection.
  2. To prepare quotations, carry out the work and issue invoices.
  3. To issue and honour your warranty.
  4. To meet our legal obligations, including tax and GST record-keeping.
  5. To keep our website and records secure.

We will only send you offers or updates if you have agreed to receive them, and you can ask us to stop at any time. We never sell or rent your personal data.

4

Legal basis

We process your data with your consent, which you give when you submit a form with the consent box ticked or contact us directly, and for the legitimate uses permitted under Section 7 of the DPDP Act, such as using information you have voluntarily given us for the purpose you gave it and complying with the law. You may withdraw your consent at any time (see section 8). Withdrawal does not affect processing already carried out, or records we must keep by law.

5

Who we share it with

We share personal data only as needed to run our business:

  • Our website hosting and email provider (Hostinger), which stores our website, form submissions and email.
  • Google, which supplies the fonts on our website. Your browser connects to Google's servers to load them, which shares your IP address with Google.
  • WhatsApp (Meta), only when you choose to contact us on WhatsApp.
  • Our own staff and supervisors who visit your site or handle your job.
  • Our accountant or chartered accountant, for tax and GST compliance.
  • Government authorities, courts or law enforcement, where the law requires us to.

Our service providers may store data on servers in India or abroad. We take reasonable steps to make sure they protect it.

6

How long we keep it

  • Enquiries that do not become a job: up to 24 months, then deleted.
  • Quotations, invoices and payment records: as long as GST and income-tax law require, currently up to eight years.
  • Warranty records: for the warranty period plus one year.
  • Server logs: up to 90 days.
7

How we protect it

Our website uses an encrypted connection (HTTPS). Access to form submissions and customer records is limited to people who need it to do their job. We follow reasonable security practices as required by the Information Technology Act, 2000 and its rules. No system is completely secure; if a breach affecting your data occurs, we will inform you and the authorities as the law requires.

8

Your rights

Under the DPDP Act you have the right to:

  1. get a summary of the personal data we hold about you and how we use it;
  2. have inaccurate or incomplete data corrected or updated;
  3. have your data erased once it is no longer needed, except where the law requires us to keep it;
  4. withdraw your consent;
  5. nominate another person to exercise these rights if you die or become unable to; and
  6. have your grievances addressed.

To use any of these rights, contact our Grievance Officer below. We will respond within 30 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

9

Children

Our services are meant for property owners and occupiers aged 18 or over. We do not knowingly collect personal data from children.

10

Grievance Officer

The proprietor of Secmont acts as Grievance Officer. Email hello@secmont.com, or write to us through the contact page.

11

Changes to this policy

We may update this policy as our services or the law change. The effective date at the top shows when it was last changed. If a change significantly affects how we use your data, we will tell you before it applies.