Privacy Policy & Data Fiduciary Disclosure
Official data protection and privacy notice of SecureFlame Enterprises. Headquartered in Mumbai, Maharashtra, delivering fire safety, alarm engineering, CCTV surveillance, and statutory Form 'B' compliance across India.
§01Data Fiduciary Identity & Scope
This Privacy Policy is issued by SecureFlame Enterprises ("SecureFlame", "we", "us", or "our"), acting as a Data Fiduciary pursuant to Section 2(i) of India'sDigital Personal Data Protection (DPDP) Act, 2023 and the DPDP Rules, 2025.
§02Itemized Notice of Data Collected (Section 5)
In strict adherence to the data minimization principle (Section 4 and Section 5), SecureFlame collects only the specific personal and technical information necessary to evaluate commercial building parameters and prepare statutory engineering proposals:
- Identity & Contact Credentials: Full name of the authorized corporate representative, company or cooperative housing society name, direct business mobile number, and official corporate email address.
- Facility Engineering Specifications: Facility classification (e.g., commercial high-rise, hospital, data center), approximate structural footprint (square footage), requested safety disciplines (e.g., wet riser, addressable alarm, CCTV), municipal deployment region, and Form 'B' regulatory licensing requirements.
- Contextual Technical Notes: Optional user-submitted site blueprints, riser heights, or statutory compliance deadlines provided in the inquiry notes.
§03Purpose of Processing & Legal Basis (Section 6)
Personal data is processed strictly on the basis of freely given, specific, informed, unconditional, and unambiguous affirmative consent (Section 6) provided at the point of inquiry submission. Processing is bound exclusively to the following legitimate business purposes:
Reviewing facility hazard loads and calculating equipment quantities according to NBC 2016 Part 4 standards.
Coordinating on-site hydraulic pressure testing and municipal fire safety clearance filings with the Mumbai Fire Brigade and Maharashtra Fire Services.
Contacting designated project leads via phone, corporate email, or WhatsApp to clarify architectural drawings and schedule technical inspections.
We do not sell, rent, monetize, or trade client personal or project data with marketing brokers or advertisers under any circumstances.
§04Affirmative Consent & Withdrawal Mechanism (Section 6(4))
Consent is obtained through an un-prechecked affirmative checkbox on our consultation funnel. Under Section 6(4) of the DPDP Act 2023, you retain the statutory right to withdraw your consent at any time with the same ease with which it was given.
To withdraw consent, email privacy@secureflameindia.in with the subject line WITHDRAW CONSENT and your inquiry reference number (e.g., SF-2026-XXXX). Upon receipt, our systems will cease all further processing and irreversibly delete your records within forty-eight (48) hours, without any punitive consequence or fee.
§05Grievance Redressal Officer & Response SLA (Section 10)
Pursuant to Section 10 of the DPDP Act 2023 and Rule 12 of the DPDP Rules 2025, SecureFlame Enterprises has appointed a designated Grievance Officer to address all queries, rights requests, and data protection concerns:
If your grievance is not resolved within thirty (30) days or you are dissatisfied with our resolution, you have the right to file an appeal before the Data Protection Board of India.
§06Data Retention & Permanent Erasure Schedule
In compliance with Section 8(7) of the DPDP Act 2023, personal data is retained only for as long as necessary to satisfy the specific purpose for which it was gathered, unless statutory law mandates a longer preservation period:
- Preliminary Inquiries & Quotations: Retained for twelve (12) months from submission to facilitate technical follow-ups, after which records are automatically expunged.
- Statutory Form 'B' & AMC Contracts: Fire safety inspection reports, hydraulic test logs, and municipal filings are retained for three (3) years to comply with statutory audit guidelines under the Maharashtra Fire Prevention and Life Safety Measures Act, 2006.
§07Personal Data Breach Notification (Section 8(6))
SecureFlame enforces transport-layer encryption (TLS 1.2/1.3, HSTS preload, strict Content-Security-Policy with cryptographic nonces) and parameterized database isolation. In the unlikely event of a verified personal data breach impacting your confidentiality or integrity, SecureFlame will promptly notify the Data Protection Board of India and each affected Data Principal without undue delay, outlining the nature of the breach, estimated impact, and containment measures taken.
§08Enumerated Rights of Data Principals (Sections 11–14)
As a Data Principal under India's DPDP Act 2023, you enjoy the following enforceable statutory rights:
Children's Data (Section 9)
SecureFlame provides commercial, industrial, and high-rise fire safety solutions exclusively to corporate enterprises, developers, and housing societies. We do not offer consumer services to minors or knowingly collect, process, or track personal data of individuals under eighteen (18) years of age.
Cross-Border Transfers (Section 16)
Inquiry records are hosted in secured PostgreSQL databases located in the AWS / Oracle Cloud Mumbai (ap-southeast-1 / ap-mumbai-1) region within the Republic of India. Global edge delivery via Vercel Edge CDN strictly caches non-PII static presentation layers.
Zero-Tracker & Cookie-Free Architecture
The SecureFlame web platform sets zero tracking cookies, embeds zero third-party analytics pixels, and executes zero cross-site tracking scripts on this marketing surface. Your browsing session is entirely private, self-contained, and free from algorithmic profiling.