Home / Privacy Policy

Data Governance & Compliance Framework

Privacy Policy.

Industry Pro Solutions LLP is committed to safeguarding personal, technical, and commercial data. This Privacy Policy details how we collect, process, secure, and retain your data in strict compliance with the Digital Personal Data Protection Act (DPDPA 2023) and international data protection standards.

Effective Date: October 2026 Version 2.4 Governing Law: India DPDPA Enterprise-Grade Security
POLICY GUIDE Version 2.4 • October 2026

Overview & Core Data Principles

Industry Pro Solutions LLP (“Industry Pro”, “IP”, “we”, “our”, or “us”) is committed to transparent, lawful, and secure handling of data collected through our digital interfaces and industrial lifecycle services.

As an industrial engineering, automation, repair, and technical services enterprise, we operate primarily in a Business-to-Business (B2B) environment. Our data governance principles are grounded in high integrity, ensuring that plant data, technical configurations, partner records, and customer contacts receive enterprise-grade protection.

Key Commitments at a Glance

  • Zero Data Selling: We never sell, lease, or monetize your personal or commercial data to third-party data brokers or marketing aggregators.
  • Confidentiality of Industrial & Plant OT Data: Machine drawings, PLC/SCADA logic files, parameters, and factory telemetry are handled under strict non-disclosure obligations and segregated technical controls.
  • Statutory Compliance: Fully aligned with India's Digital Personal Data Protection Act (DPDPA 2023), the Information Technology Act, 2000, and applicable global frameworks (including GDPR for international clients).
  • Robust Data Subject Rights: Seamless mechanisms for data principals to access, correct, erase, or withdraw consent for their personal records.

Data Processing Matrix

The table below summarizes the key categories of personal and operational information we handle, our primary processing purposes, and standard retention periods.

Category Types of Data Handled Processing Ground Jump
Customer Contact Name, Corporate Email, Phone, Company, Designation Used for RFQs, quotations, order execution, and technical updates. Contractual Necessity Details →
Plant / OT Data Machine Parameters, PLC Logic, Failure Diagnostics, Site Photos Required to diagnose, repair, program, and commission industrial equipment. Contractual Scope & NDA Details →
Service Providers Technician Profiles, Certifications, Banking Details, GST / PAN Used to onboard and verify repair associates under the ProVider network. Contract & Compliance Details →
Device & Web Logs IP Address, Browser Type, Page Telemetry, Timestamp Records Maintained for cyber security, load balancing, and performance diagnostics. Legitimate Interest Details →
SEC-1 Core Framework

Scope & Data Controller Information

PURPOSE & APPLICATION

Defines the legal entity responsible for data processing, the digital and operational surfaces covered by this policy, and the overarching jurisdictional framework.

The primary data controller responsible for personal and commercial data collected under this policy is Industry Pro Solutions LLP, a Limited Liability Partnership incorporated under the laws of the Republic of India.

When you interact with our website (https://industrypro.in), request repair or engineering services, submit inquiries via forms, or apply to join our ProVider network, Industry Pro Solutions LLP determines the purposes and technical means of data processing.

This Privacy Policy applies to all information processed through:

  • Our public website and any associated subdomains (including industrypro.in, customer portals, and inquiry portals).
  • Commercial interactions including Requests for Quotation (RFQs), Statements of Work (SOWs), Purchase Orders, and service agreements.
  • Partner and associate onboarding through the “Become a ProVider” portal and associated technical vetting forms.
  • Direct customer support channels, including corporate email exchanges, telephone communications, and verified WhatsApp Business channels.
  • Field service visits, workshop intake procedures, equipment diagnostics, and on-site commissioning reports.
SEC-2 Core Framework

Information We Collect

PURPOSE & APPLICATION

Specifies the direct, technical, and automated data categories collected to facilitate industrial operations, engineering assessments, and partner onboarding.

We collect information that you explicitly submit when communicating with us or executing service orders:

  • Contact & Corporate Identity: Full name, professional designation, corporate email address, business telephone/mobile number, company name, plant/facility location, and departmental role.
  • Commercial & Billing Data: Registered business address, GSTIN (Goods and Services Tax Identification Number), PAN (Permanent Account Number), tax exemption certificates, and banking details necessary for commercial invoicing and payments.
  • Equipment & Service Inquiries: Equipment make, model, serial numbers, part numbers, firmware versions, operational fault descriptions, service history, error codes, and associated machinery context.
  • ProVider & Partner Network Data: Technician resumes, technical skill sets, workshop testing capabilities, business licenses, bank account details for service payouts, government identification for site access clearances, and safety accreditation records.

When you navigate our website or portal, our web servers automatically log standardized diagnostic data:

  • Internet Protocol (IP) address, approximate geographical location (country/city level), internet service provider (ISP).
  • Browser user agent, browser engine, operating system version, screen resolution, and language settings.
  • HTTP referrer URLs, pages visited, time spent per page, click paths, and interaction telemetry.

Industry Pro does not collect or store sensitive personal consumer data, including credit card numbers, debit card PINs, CVV codes, net-banking login credentials, biometric data, or health records. Commercial payments are processed exclusively through authorized, RBI-regulated banking rails and payment gateways.

SEC-3 Processing Grounds

Purposes & Legal Grounds for Processing

PURPOSE & APPLICATION

Explains the legal justifications under Indian and global privacy laws that authorize our collection and use of corporate and personal information.

We process data primarily to perform our contractual obligations toward customers and partners:

  • Evaluating equipment failures and issuing commercial quotations and diagnostic estimates.
  • Deploying certified automation engineers and technicians to customer plant sites.
  • Conducting laboratory testing, component-level repairs, PLC programming, and system integration.
  • Dispatching repaired hardware, replacement modules, and industrial consumables via bonded logistics carriers.
  • Issuing Field Service Reports (FSR), calibration certificates, and post-repair warranty attestations.

We retain and process records to comply with applicable statutory laws in India, including the Central Goods and Services Tax Act, 2017, the Income Tax Act, 1961, customs and export/import regulations, factory safety disclosures, and court or regulatory directives.

We process diagnostic telemetry and anonymized operational feedback where justified by legitimate interests, such as safeguarding website cybersecurity, preventing fraudulent transactions, monitoring platform health, and optimizing system uptime for our customers.

SEC-4 Technical Confidentiality

Industrial, Operational Technology (OT) & Plant Data

PURPOSE & APPLICATION

Sets forth specialized confidentiality commitments governing plant control software, PLC/SCADA configurations, telemetry, and machine diagrams.

In the course of performing automation repairs, PLC/SCADA programming, and commissioning, Industry Pro may access or generate technical plant data. This includes ladder logic files, variable registries, industrial network configurations (EtherNet/IP, PROFINET, Modbus), drive parameters, electrical single-line diagrams, and operational alarm logs.

All such Operational Technology data is deemed Proprietary Confidential Information of the customer. Industry Pro covenants that:

  • OT data shall be used solely for the explicit purpose of diagnosing, servicing, programming, or commissioning the specified equipment.
  • No machine logic, configuration files, or proprietary process recipes will ever be shared with competing OEMs or unauthorized third parties.
  • Upon completion of the service engagement and expiry of the warranty tracing window, technical backups may be permanently deleted or securely archived per customer instruction.

Where remote diagnostic sessions (such as remote PLC programming or SCADA telemetry inspection) are authorized, sessions are conducted exclusively over encrypted VPN or customer-approved secure gateway software. All remote engineering sessions are logged, require customer oversight, and are immediately terminated upon task conclusion.

SEC-5 Data Disclosures

Sharing & Third-Party Disclosures

PURPOSE & APPLICATION

Clarifies the limited circumstances under which information is shared with vetted technical partners, cloud infrastructure vendors, and statutory authorities.

Industry Pro Solutions LLP maintains a strict policy: We do not sell, rent, trade, or commercially monetize personal data, enterprise contact lists, or customer plant information under any circumstances.

To fulfill service requests across diverse industrial clusters in India, we may share relevant operational details with:

  • Authorized Technical ProViders: Verified field technicians, specialized electronic repair workshops, and commissioning engineers bound by comprehensive non-disclosure agreements (NDAs) and service level agreements (SLAs).
  • Logistics & Freight Partners: Reputed freight and courier carriers (for transit tracking of repairable hardware, printed circuit boards, and replacement components).
  • Cloud & CRM Infrastructure: Enterprise-grade platform providers such as Zoho Corporation (secure web forms and customer communication hosted in certified data centers), Amazon Web Services (AWS), or Google Cloud.

We may disclose information if required to do so by applicable law, search warrant, subpoena, court order, or official request from government law enforcement agencies operating under legitimate Indian legal jurisdiction.

SEC-6 Storage Limitation

Data Retention & Disposal

PURPOSE & APPLICATION

Establishes rigorous retention timetables and secure destruction standards to ensure personal and technical data is not held longer than necessary.

We retain data in accordance with statutory guidelines, contractual limitation periods, and legitimate operational requirements:

  • Commercial Invoices & Tax Records: Retained for a minimum of 7 (seven) years from the end of the relevant financial year, as mandated by Indian GST and corporate tax laws.
  • Service Reports & Calibration Certificates: Retained for 5 to 10 years to support ongoing equipment warranty tracing, plant safety audits, and preventative maintenance history.
  • Unconverted RFQs & General Inquiries: Retained for 24 months from the date of submission to assist prospective repeat inquiries, after which they are purged.
  • ProVider & Associate Application Records: Retained for the duration of the active partnership plus 5 years following partnership dissolution.
  • Web Server Diagnostic Logs: Automatically rotated and purged within 90 to 180 days.

Upon the expiration of the applicable retention schedule, data is rendered permanently unrecoverable through cryptographic erasure, database de-identification, or secure hardware sanitization compliant with industry best practices.

SEC-7 Technical Safeguards

Security & Cross-Border Transfers

PURPOSE & APPLICATION

Details administrative, technical, and cryptographic controls implemented to safeguard systems against data breaches, unauthorized access, and international transfer risks.

Industry Pro implements robust cyber defense controls matching the criticality of industrial systems:

  • Encryption in Transit: All web and API traffic is enforced over HTTPS utilizing TLS 1.3 encryption with strict HTTP Strict Transport Security (HSTS).
  • Encryption at Rest: Customer records, service attachments, and diagnostic files stored in cloud databases are encrypted using AES-256 standards.
  • Role-Based Access Control (RBAC): Access to customer records is restricted strictly to authorized engineers and account managers on a need-to-know basis.
  • Multi-Factor Authentication (MFA): Administrative and technical portals require multi-factor verification.
  • Network Firewalls & Vulnerability Audits: Continuous perimeter monitoring, web application firewalls (WAF), and periodic vulnerability assessments.

Our primary operational infrastructure is hosted within the territory of India. Where cloud tools (e.g., global CRM or CDN nodes) process data internationally, we ensure transfers comply with Section 16 of the Digital Personal Data Protection Act, 2023, as well as Standard Contractual Clauses (SCCs) to ensure equivalent protection standards abroad.

SEC-8 Digital Telemetry

Cookies & Digital Tracking Technologies

PURPOSE & APPLICATION

Explains our use of cookies, local storage items, and web analytics, alongside instructions for browser-level cookie management.

We use lightweight, privacy-conscious cookies to deliver high performance:

  • Strictly Necessary Cookies: Essential for secure routing, load balancing, preventing cross-site request forgery (CSRF), and maintaining active sessions. These cannot be disabled in our systems.
  • Performance & Analytics Cookies: Aggregate, anonymized metrics (such as page speed diagnostics, broken link detection, and geographic traffic volume) that help us optimize user experience.
  • Functional Cookies: Retain user preferences such as navigation states or preferred language settings across visits.

You can configure your browser settings to decline or delete cookies at any time. Please note that disabling strictly necessary cookies may impact the proper rendering of certain website features and interactive quotation forms.

SEC-9 User Entitlements

Your Legal Privacy Rights

PURPOSE & APPLICATION

Outlines the specific rights afforded to data principals under India's DPDPA 2023, GDPR, and corresponding global frameworks, along with verification workflows.

Under the Digital Personal Data Protection Act, 2023, data principals located in India enjoy the following actionable statutory rights:

  • Right to Access Information: Obtain a summary of personal data being processed, identity of data fiduciaries, and categories of third parties with whom data was shared.
  • Right to Correction & Erasure: Request the rectification of inaccurate or misleading records, completion of incomplete data, and deletion of personal data no longer necessary for the original processing purpose.
  • Right to Grievance Redressal: Access our readily available, statutory grievance mechanism to address concerns regarding the handling of personal information.
  • Right to Nominate: Nominate an individual who, in the event of death or incapacity, shall exercise your rights as a data principal.

To exercise any of your statutory rights, please send an official request to our Data Protection & Grievance Desk at [email protected]. For security purposes, we may ask you to verify your corporate identity and authorized representation before processing your request.

All verified requests will be addressed without undue delay and strictly within statutory time limits (maximum 30 business days).

SEC-10 Commercial Scope

B2B Scope & Children's Privacy

PURPOSE & APPLICATION

Affirms the strictly commercial nature of Industry Pro's industrial offerings and disclaims any collection of minors' information.

Our website, industrial offerings, partner network, and technical services are designed and marketed strictly to commercial manufacturing enterprises, engineering teams, plant operators, and adult business professionals. We do not provide consumer goods or direct-to-consumer services.

We do not knowingly solicit, collect, or store personal information from children or individuals under the age of 18 years. If we become aware that any information relating to a minor has been mistakenly submitted, we will immediately take verifiable steps to delete such data from our databases.

SEC-11 Revisions

Policy Amendments & Updates

PURPOSE & APPLICATION

Explains how revisions to this policy are documented, published, and communicated to customers and site visitors.

Industry Pro reserves the right to periodically update this Privacy Policy to reflect changing legal requirements, operational expansions, or cybersecurity enhancements. Any amendments will be reflected on this page with an updated “Effective Date” and revised version number.

For material changes that substantively modify your privacy rights, we will provide prominent notification through our website homepage or direct corporate communication where appropriate.

SEC-12 Statutory Contacts

Grievance Officer & Contact Information

PURPOSE & APPLICATION

Statutory designation of the Grievance Officer in compliance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023.

In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, the contact coordinates of our designated Grievance Officer are set forth below:

Data Protection & Grievance Desk

Entity: Industry Pro Solutions LLP

Designation: Data Protection & Grievance Redressal Officer

Dedicated Privacy Email: [email protected]

Support Telephone: +91 9599851469

Corporate Inquiries: [email protected]

Official Address: Industry Pro Solutions LLP, Registered Office, India

Response Timelines: Our Grievance Desk will acknowledge receipt of your complaint or inquiry within 48 hours and provide a substantive resolution within 30 calendar days from the date of receipt, as prescribed by applicable Indian regulatory statutes.

Chat