🛡️ Data Protection Policy

1. Commitment to Data Protection

Solartrix Power Solution is committed to protecting the personal data of our customers, employees, and business partners in accordance with the Digital Personal Data Protection Act, 2023 (DPDPA) of India and other applicable regulations.

2. Data Protection Principles

We adhere to the following core principles:

• Lawfulness & Transparency: Data is collected and processed with clear, lawful purpose and informed consent.
• Purpose Limitation: Data is used only for the specific purpose for which it was collected.
• Data Minimization: We collect only the minimum data necessary for our services.
• Accuracy: We take reasonable steps to ensure data is accurate and up to date.
• Storage Limitation: Data is retained only for as long as necessary.
• Integrity & Confidentiality: Technical and organizational measures protect data from unauthorized access.

3. Technical Security Measures

• SSL/TLS Encryption: All data transmitted between your browser and our servers is encrypted using HTTPS.
• Database Security: Customer data is stored in password-protected MySQL databases with restricted access.
• Access Control: Only authorized personnel with role-based access can view customer data.
• Backup & Recovery: Regular data backups with secure off-site storage.
• Firewall Protection: Server-side firewalls and intrusion detection systems.
• API Security: All API endpoints are secured with authentication keys and CORS policies.

4. Organizational Measures

• All staff members sign confidentiality agreements (NDA) upon joining.
• Regular data protection awareness training for all team members.
• Documented incident response procedures for data breaches.
• Periodic security audits and vulnerability assessments.
• Clear desk and screen lock policies in office environments.

5. Data Subject Rights

Under the DPDPA 2023, you have the right to:

• Right to Access: Request a copy of all personal data we hold about you.
• Right to Correction: Request correction of any inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data, subject to legal retention requirements.
• Right to Withdraw Consent: Withdraw your consent for data processing at any time.
• Right to Grievance Redressal: File complaints through our internal grievance mechanism or with the Data Protection Board of India.

6. Data Breach Response

In the event of a data breach:

• The breach will be contained and assessed within 24 hours of discovery.
• Affected individuals will be notified within 72 hours.
• The Data Protection Board of India will be notified as required by law.
• Remedial measures will be implemented immediately to prevent recurrence.
• A comprehensive incident report will be documented.

7. Cross-Border Data Transfer

Your data is primarily stored on servers located in India. If any data transfer to servers outside India is necessary (e.g., for cloud services), it will be done in compliance with DPDPA 2023 provisions and with appropriate safeguards.

8. Data Protection Officer

For data protection queries or to exercise your rights, contact our designated point of contact:

• Company: Monitrix Corporate Services Pvt. Ltd.
• Brand: Solartrix Power Solution
• Phone: +91 9996102301
• Address: Hisar, Haryana, India

9. Policy Updates

This policy is reviewed annually and updated as needed to reflect changes in legislation, technology, or business practices. The latest version is always available on this page.