Privacy Policy

Data fiduciary information and governance

• Data Fiduciary: Terrakraft India LLP
• Designated Representative: Managing Partner / Compliance Lead
• Registered Address: Soho, Panchshil, Kharadi, Pune, Maharashtra 411014, India
• Grievance Redressal Email: privacy@terrakraft.com

Categories of personal data processed

We collect and process digital personal data strictly necessary to fulfill technical, procurement, and commercial inquiries:

1. Directly Provided Identifying Data: Full name, corporate email address, direct contact phone number, company/organization name, and professional job title.
2. Technical and Operational Data Submitted in Inquiries: Facility physical location, 12-month utility electricity bills, contract demand (kVA) records, plant single-line diagrams, generator logbooks, roof drawings, and project comments submitted voluntarily via our contact or audit request panels.
3. Automatically Captured Device and Telemetry Data: IP addresses (anonymized at ingestion), browser type, operating system, network identifiers, referring URLs, time spent per technical page, and document download events.

Lawful grounds and specified purposes of processing

Under Section 4, Section 6, and Section 7 of the DPDP Act 2023, Terrakraft India LLP processes digital personal data solely on the basis of Informed, Specific, and Unconditional Consent or for Legitimate Uses:

Data minimization and collection mechanism

1. No Pre-Ticked Consent: In accordance with Section 6(1) of the DPDP Act 2023, consent is obtained through an affirmative, conscious user action (e.g., clicking “Submit Inquiry” beside an explicit consent statement). We employ no pre-ticked consent boxes.
2. Data Minimization: We request only the data parameters technically necessary to scope electrical capacity, evaluate tariffs, and return engineering advice.

Storage, security safeguards and incident notification

1. Technical Safeguards: Terrakraft India LLP implements reasonable security safeguards in accordance with Section 8(5) of the DPDP Act 2023 to protect personal data from accidental or unlawful destruction, loss, alteration, or unauthorized disclosure. These safeguards include:
   • Transport Layer Security (TLS 1.3) encryption across all web domains;
   • Encrypted database storage (AES-256) for CRM repositories;
   • Role-based access controls restricting data access to authorized project engineers;
   • Anti-malware, firewall protocols, and regular code reviews.
2. Breach Notification: In the event of a confirmed personal data breach affecting digital records, Terrakraft India LLP will notify the Data Protection Board of India (DPBI) and all impacted Data Principals in the form and manner prescribed under Section 8(6) of the DPDP Act 2023.

Data retention and erasure protocol

1. Retention Limits: Personal data submitted for technical assessments is retained only as long as necessary to fulfill the specified purpose of technical qualification and project execution.
2. Erasure Mandate: In compliance with Section 8(7) of the DPDP Act 2023, we will permanently delete or anonymize personal data when:
   • The Data Principal withdraws their consent; or
   • It is reasonable to assume that the specified business purpose is no longer being served, and retention is no longer required under applicable Indian statutory or taxation laws.

Sharing, third-party processors and data transfers

1. No Commercial Sale: Terrakraft India LLP does not sell, rent, trade, or monetize personal data under any circumstances.
2. Authorized Data Processors: We engage vetted Data Processors under formal contracts to support website operations:
   • Enterprise Cloud Infrastructure & Hosting Providers (servers located in Tier-4 Indian data centres);
   • Encrypted CRM and lead-routing database providers;
   • Web analytics processors operating under strict IP masking.
3. Cross-Border Transfers: Any international transfer of personal data for infrastructure management shall strictly conform with Section 16 of the DPDP Act 2023 and any restrictions, negative lists, or conditions notified by the Central Government of India.

Rights of data principals (under the DPDP Act 2023)

As a Data Principal under Indian law, you possess enforceable statutory rights:

• Right to Access Information (Section 11): You have the right to request a summary of your personal data processed by us and the identities of any Data Processors with whom it has been shared.
• Right to Correction and Erasure (Section 12): You have the right to correct inaccurate or misleading personal data, complete incomplete records, or request the permanent erasure of data no longer required for the specified purpose.
• Right of Grievance Redressal (Section 13): You have the right to accessible, timely grievance redressal through our designated Grievance Officer.
• Right to Nominate (Section 14): You have the right to nominate an individual who, in the event of death or incapacity, shall exercise your privacy rights.
• Right to Withdraw Consent: You may withdraw your consent at any time by emailing privacy@terrakraft.com. Upon receipt, we will cease processing your personal data within statutory timelines, unless processing is required under applicable law.

Processing of minor and children’s data

This website is a business-to-business (B2B) infrastructure platform intended for commercial enterprises, engineers, and procurement professionals. We do not knowingly collect, process, or track data belonging to individuals under the age of 18 (“Children”), in strict accordance with Section 9 of the DPDP Act 2023.

Statutory notice and grievance redressal mechanism

In compliance with Section 8(9) of the Digital Personal Data Protection Act, 2023 and Rule 5(9) of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, the designated contact details for data protection grievances and legal notices are set out below.

Designated Grievance Officer

• Name of Officer: Grievance Officer, Terrakraft India LLP
• Designation: Head of Legal & Data Governance
• Entity: Terrakraft India LLP
• Physical Office Address: Soho, Panchshil, Kharadi, Pune, Maharashtra 411014, India
• Dedicated Email for Privacy Grievances: privacy@terrakraft.com
• General Corporate Communications: info@terrakraft.com
• Telephone: +91 98810 65376
• Official Web Domain: www.terrakraft.com

Grievance resolution timelines and escalation

1. Acknowledgment: All formal privacy or data grievances submitted to the Grievance Officer will be acknowledged within 48 hours of receipt.
2. Redressal Window: The Data Fiduciary will investigate and resolve the grievance within 30 days of receipt.
3. Escalation to Regulatory Authority: If a Data Principal is unsatisfied with the resolution provided by our Grievance Officer, they may escalate their complaint to the Data Protection Board of India (DPBI) in accordance with the procedures established under Section 13 of the DPDP Act 2023.

Consent and acknowledgment statement for website forms