Privacy Notice & Cookie Policy

1. Scope & Corporate Identity

This Privacy Notice applies to all digital interactions on https://www.skjal.in/ and related digital properties operated by SK Jalrakshak Innovations Private Limited ("SKJAL", "we", "our", or "us"), an industrial IoT, embedded firmware, and electronics engineering enterprise incorporated in India with headquarters in Visakhapatnam, Andhra Pradesh.

We operate as an industrial B2B hardware and engineering solutions provider. We do not engage in consumer retail profiling, behavioral ad retargeting, or the sale of personal information to third parties.

2. Categories of Information We Collect

3. Legal Basis & Purpose of Processing

We process personal data only when lawful under applicable data protection laws, including the Information Technology Act, 2000 (and 2011 Rules) and the Digital Personal Data Protection Act, 2023 (DPDPA):

• Performance of Contracts & Pre-Contractual Steps: Processing commercial RFQs, delivering technical feasibility assessments, preparing engineering quotations, and fulfilling hardware manufacturing contracts.
• Legitimate Business Interests: Maintaining network and infrastructure security, preventing fraud or distributed denial-of-service (DDoS) attacks, and debugging server performance.
• Affirmative Consent: Where you provide explicit consent for non-essential performance cookies or direct communications.
• Statutory Compliance: Maintaining accounting, tax, and commercial corporate records under the Indian Companies Act, 2013.

4. Industrial Telemetry Data Confidentiality

SKJAL distinguishes strictly between public website visitor data and customer enterprise telemetry streams:

• Strict Ownership: Industrial clients retain exclusive ownership of all sensor metrics, water quality readings, power telemetry, and vehicle kinematics generated by SKJAL gateways.
• Multi-Tenant Isolation: Data pipelines are logically partitioned with authenticated API access, tokenized communication, and end-to-end TLS 1.3 encryption.
• No Data Monetization: SKJAL will never monetize, aggregate for external sale, or share client telemetry without written contractual authorization.

5. Cookie Policy & Analytics Controls

A cookie is a small text file stored on your browser. SKJAL maintains a minimal, transparent cookie posture:

7. Data Retention & Erasure Schedules

We retain information only as long as necessary for the specified operational and legal purposes:

• B2B Project Inquiries & Quotations: Retained for 24 months from the date of last correspondence to facilitate technical scope continuity. You may request earlier deletion at any time.
• Server Access Logs: Retained for 90 days for cybersecurity auditing and intrusion detection, after which they are automatically purged.
• Contractual Client Records: Retained for 8 years following contract termination as required under Indian commercial and corporate tax regulations.

8. Information Security & Technical Safeguards

SKJAL implements defense-in-depth cybersecurity controls across its digital infrastructure:

• HTTPS & HSTS: Mandatory encryption via TLS 1.3 with HTTP Strict Transport Security (HSTS) enforced across all subdomains (max-age=63072000; includeSubDomains; preload).
• Security Headers: Strict Content-Security-Policy (CSP), X-Content-Type-Options: nosniff, X-Frame-Options: DENY, and restrictive Permissions-Policy headers.
• Automated Backups: Daily automated, checksummed, AES-256 encrypted repository and database backups with tested multi-region rollback and restoration procedures.
• Access Governance: Multi-factor authentication (MFA) and least-privilege role-based access for all engineering infrastructure.

9. Your Data Subject Rights (DPDPA 2023)

Under the Digital Personal Data Protection Act, 2023 (DPDPA) and applicable privacy regulations, you are entitled to:

• Right to Access: Request a summary of personal data held about you and the processing activities undertaken.
• Right to Correction & Erasure: Request the rectification of inaccurate data or the erasure of personal data that is no longer required.
• Right of Grievance Redressal: Register a complaint regarding privacy handling directly with our designated officer.
• Right to Nominate: Designate an individual to exercise your privacy rights in the event of death or incapacity.

10. Designated Privacy & Data Protection Officer Contact

For privacy inquiries, data subject requests, or grievance redressal, contact our designated privacy desk directly: