Privacy & Data Protection Policy
Privacy & Data Governance Policy
Effective Date: October 2026 • Version 6.0 • Governed by Indian IT Act 2000 & Digital Personal Data Protection Act 2023
1. Introduction & Company Overview
TC Smart Technology ("we", "us", "our", or "the Company") is an Indian engineering enterprise located at B-598, Pocket 11, DDA Janta Flat, Jasola Vihar, New Delhi – 110025. We specialize in Embedded Systems Design & Development, Industrial IoT Telemetry, Industrial Automation (PLC/HMI, LabVIEW & EOL Test Benches), Custom AI Agents, and smart electronic hardware products. This Privacy Policy discloses our privacy practices and describes how we collect, store, track, process, protect, and dispose of your personal and technical data when you access https://tcsmarttechnology.com, purchase hardware, or engage our engineering services.
2. User Consent & Revocation
By accessing this website, creating a customer account, checking the "I agree to the Terms & Conditions and Privacy Policy" checkbox on our checkout, registration, contact, or inquiry forms, you provide express, informed, and unambiguous consent to the collection, tracking, and processing of your information as outlined herein.
Right to Withdraw Consent: You have the absolute right to revoke your consent at any time. To withdraw consent or request complete erasure of your profile and data, you may email our Grievance Officer at tcsmarttechnology@gmail.com. Upon receiving your verified request, we will stop processing your data within statutory timelines, except where retention is mandated by law (e.g., GST invoice retention).
3. What We Track and Collect on Our Website
To maintain website security, prevent fraudulent transactions, compute regional courier charges, and provide engineering solutions, our platform automatically tracks and collects specific categories of data:
A. Automatically Tracked Information
- IP Address & Geolocation: Your device IP address, country, and state are recorded to detect fraudulent checkout attempts and calculate regional pincode courier delivery fees.
- Browser & System Data: User-agent header, browser type, device type (Mobile/Desktop), and operating system version.
- Browsing & Activity Logs: URLs visited, referral sources, session duration, and recently viewed products (temporarily stored in session).
- Reviewer Session ID: Encrypted browser session tokens associated with verified customer product reviews.
B. Voluntarily Submitted Information
- Customer Profile: Full name, verified mobile phone number, email address, and encrypted passwords.
- Shipping Addresses: Consignee name, street address, landmarks, city, state, postal PIN code, and alternate contact numbers.
- Orders & Payment Verification: Purchased items, quantities, transaction reference numbers (UTR), payment screenshot uploads, and delivery statuses.
- Project Inquiries: Technical specifications for embedded engineering, PLC/HMI automation requirements, or custom AI agent parameters.
4. Cookies and Web Tracking Policy
Cookies are small alphanumeric files placed on your browser or device storage. Our website uses strictly necessary and functional cookies to ensure secure operation and smooth commerce workflows:
| Cookie Name | Category | Purpose | Duration |
|---|---|---|---|
laravel_session |
Essential | Stores encrypted session data including active login authentication, shopping cart items, and recently viewed products. | Session (2 hours inactivity) |
XSRF-TOKEN |
Security | Protects forms and API endpoints from Cross-Site Request Forgery (CSRF) exploits. | Session (2 hours) |
remember_web_* |
Functional | Optional persistent authentication token created only if you select "Remember Me" during login. | 5 years (or until logout) |
google593c6f0cacafc57c |
Verification | Google Search Console indexing and webmaster domain ownership validation. | Permanent server asset |
Managing Cookies: You can configure your browser (Google Chrome, Mozilla Firefox, Safari, Microsoft Edge) to reject or delete cookies. Please note that disabling essential cookies will prevent authentication, cart retention, and checkout from functioning properly.
5. Age Restriction & Protection of Minors (Age Factor)
Our website, engineering consultation services, and hardware store are intended exclusively for individuals who are at least 18 years of age (or the legal age of majority in their jurisdiction) and capable of entering into legally binding contracts under the Indian Contract Act, 1872.
In strict compliance with the Digital Personal Data Protection (DPDP) Act 2023, we do not knowingly track, collect, or solicit personal information from children under 18 years of age. If a parent or legal guardian discovers that their minor child has registered an account or provided personal details without verified parental consent, please alert our Grievance Officer immediately. We will promptly delete such accounts and associated data.
6. Data Security & Technical Safeguards
We treat the security of your information with paramount importance. We implement multi-layered industry-standard technical, administrative, and physical controls, including:
- Encryption in Transit: 256-bit TLS/HTTPS cryptographic protocol enforced across all website connections and endpoints.
- Password Hashing: All customer passwords are encrypted using one-way cryptographic Bcrypt hashing with random salt factors; plain text passwords are never stored or accessible by staff.
- Access Governance: Role-Based Access Control (RBAC) isolates backend customer details, orders, and payment records exclusively to vetted administrators.
- Session & CSRF Protection: Automated CSRF token verification on all POST/PUT/DELETE requests preventing unauthorized session actions.
- Payment Privacy: We do not store sensitive bank account login credentials or payment card CVV numbers. Payment verification relies on customer-uploaded UTR transaction reference IDs and slips verified against bank statements.
- Security Incident Response: In the unlikely event of an unauthorized data exposure, we maintain strict incident mitigation protocols and will notify affected data principals and statutory agencies (such as CERT-In) in compliance with Indian cyber laws.
7. Industrial IoT Telemetry & Custom AI Agent Confidentiality
Client Data Sovereignty: For enterprises utilizing our Industrial IoT, OEE logging, or Auto-Purging systems, telemetry captured by industrial gateways (temperatures, cycle counts, pressure, power consumption) remains the strict intellectual property of the client. Telemetry is routed exclusively to client-authorized private databases or on-premise servers. We never sell, monetize, or publicly disclose proprietary machine telemetry.
Governed AI Workflows: Our Custom AI Agents (including RAG, Marketing, and Lead workflows) operate within strictly approved parameters. Client documents, trade secrets, and customer logs processed by these agents are never used to train public foundational AI models.
8. Data Sharing & Third-Party Logistics
We do not sell, rent, or trade your personal information. Information is disclosed solely in the following limited operational scenarios:
- Logistics & Courier Partners: Your recipient name, shipping address, and phone number are shared with authorized courier partners (e.g., Delhivery, BlueDart, DTDC, India Post) solely to fulfill shipping and provide live package tracking.
- Legal & Statutory Compliance: When required by Indian law, judicial summons, police investigations, or GST tax filing mandates.
9. Statutory Grievance Redressal Officer
In accordance with Rule 3(2) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and the Digital Personal Data Protection Act, 2023, the details of our designated Grievance Officer and Data Protection Lead are provided below:
Response Timelines: We acknowledge all submitted grievances within 24 hours of receipt and resolve verified complaints within 15 to 30 business days as required by law.
10. Policy Revisions
We may periodically update this Privacy Policy to reflect technical platform enhancements or amendments in applicable cyber laws. Any revisions will be published on this page with an updated version number and effective date. Continued usage of our website or services constitutes acceptance of the revised policy.