Privacy Policy

1. Who is responsible for your data

This website is run by the office of Dr. Shrikant Eknath Shinde, Member of Parliament, Kalyan ("the office"). The office decides why and how your personal data is processed and is the Data Fiduciary under the DPDP Act.

[TODO: verify] Legal name and postal address of the Data Fiduciary.

2. What we collect

Grievance and appointment requests: the details you enter in the form, which may include your name, mobile and WhatsApp numbers, email address, Aadhaar number, Voter ID (EPIC) number, date of birth, gender, address, PIN code, a description of your request, any audio or video message you record and any file you attach. The office decides which of these fields are shown and which are required.

Office staff accounts (CRM): name, mobile and WhatsApp numbers, email address and a secure hash of the password. The password itself is never stored.

Technical data: the IP address of each request, kept to protect the service from misuse.

3. Why we use it

We use your data only to register, examine and respond to your complaint or appointment request, to contact you about it, and to keep the website secure. We do not use it for advertising and do not sell it.

4. Your consent

We process the data in a grievance or appointment request on the basis of your consent, which you give by ticking the consent box before submitting. You may withdraw your consent at any time by contacting the office (see section 9). Withdrawal does not affect processing already carried out.

5. How we protect it

All traffic to this website is encrypted (HTTPS). Aadhaar and Voter ID numbers are encrypted before they are stored, and only the last four digits of the Aadhaar number are kept in readable form. Uploaded files are stored in a private location that is not publicly accessible. Access is limited to authorised office staff.

6. Who we share it with

Where needed to resolve your request, relevant details may be shared with the government department or public authority concerned. We do not share your data for any other purpose unless the law requires it.

7. How long we keep it

[TODO: verify] Retention period to be decided by the office. Data will be erased when it is no longer needed for the purpose it was collected for, unless the law requires it to be kept longer.

8. Your rights

Under the DPDP Act you may ask for a summary of the personal data we hold about you and how it is used, ask us to correct, complete, update or erase it, raise a grievance about how it is handled, and nominate another person to exercise these rights on your behalf. If you are not satisfied with our response, you may approach the Data Protection Board of India.

9. Contact

[TODO: verify] Name, email address and phone number of the person in the office who handles data protection requests and grievances.

10. Changes to this policy

We may update this policy. The date at the top of this page shows when it was last changed.