Privacy Policy

1. Introduction

GEECELL Innovations Private Limited ("GEECELL", "we", "us", "our") respects your privacy and is committed to protecting your personal data. This policy explains what we collect, why we collect it, who we share it with, how long we keep it, and what rights you have over it.

It applies to our website at geecell.com, to the Staff, Client, Partner, and Vendor portals operated on it, and to personal data we handle in the course of running our after-sales service network. It should be read together with our Terms of Service.

2. Who We Are

GEECELL Innovations Private Limited is the Data Fiduciary responsible for the personal data described in this policy.

3. Data We Collect

Data you give us directly

• Identity and contact data — name, designation, email address, telephone number, and postal address.
• Enquiry data — the contents of any message you send through our contact or brand-enquiry forms, including the company you represent and the nature of your enquiry.
• Onboarding data — where you apply to join the network as a service centre: business details, registration and tax identifiers, address, ownership and personnel information, bank account details for settlements, and supporting documents.
• Account data — the username, password hash, and profile details associated with any portal account issued to you.

Data generated when service is delivered

• Service job data — customer name and contact details, device and serial number, reported fault, diagnosis, parts consumed, photographs of the unit, job status, and completion records.
• Commercial data — warranty claims, invoices, settlement statements, and payout history.

Data collected automatically

• Technical data — IP address, browser type and version, operating system, and device information.
• Usage data — pages visited, features used within the portals, and actions logged for audit and security purposes.
• Abuse-prevention data — when you submit a form on our website, we record the IP address and browser user-agent string alongside your message. This is used solely to rate-limit submissions and identify automated abuse of a publicly reachable endpoint. It is not used to profile you.
• Location data — where you use our service-centre locator and choose to share your location, we use it to calculate the nearest centres. We do not store your location after the search.

4. How We Use It

• To respond to enquiries and applications you submit to us.
• To assess, onboard, authorise, and audit service centres in our network.
• To route service jobs and warranty referrals to an appropriate centre.
• To supply spare parts, process warranty claims, raise invoices, and make settlements.
• To operate, secure, and support the portals, including authentication and activity logging.
• To report aggregate service performance to the brands whose products are being serviced.
• To meet legal, tax, accounting, and regulatory obligations.
• To improve our services, and — where you have consented — to send you relevant updates. You can withdraw that consent at any time.

5. Our Legal Basis

We process personal data under the Digital Personal Data Protection Act, 2023 and other applicable Indian law, on the following bases:

• Consent — where you submit an enquiry, create an account, or opt in to marketing communications.
• Performance of a contract — where processing is necessary to deliver services under an agreement with you or your organisation.
• Legal obligation — where retention or disclosure is required by tax, corporate, or regulatory law.
• Legitimate uses — including securing our systems and preventing fraud or abuse.

6. Who We Share It With

We do not sell personal data. We share it only as follows:

• Brand clients — service job records, claim data, and performance reporting relating to their own products, so they can verify warranty work and settle claims.
• Authorised service centres — the customer and device details needed to carry out a job routed to them.
• Vendors and logistics providers — the delivery details needed to move parts and units.
• Service providers acting for us — including our hosting, storage, email, e-signature, and communications providers, who process data on our instructions and are bound by confidentiality obligations.
• Professional advisers and authorities — where required by law, court order, or a lawful request from a government or regulatory body, or to establish or defend legal claims.

7. Cookies & Tracking

We use a small number of cookies. Strictly necessary cookies keep you signed in to a portal and protect session security; without them the portals cannot function. We may also use cookies to remember preferences, and to measure aggregate website usage.

Our public pages load fonts from a third-party provider, and our service-centre locator uses a third-party mapping service. Those providers may set their own cookies or receive your IP address as part of serving the request. Their handling of that data is governed by their own privacy policies.

You can block or delete cookies through your browser settings. If you block strictly necessary cookies, portal login will not work.

8. Data Security

We maintain technical and organisational measures appropriate to the risk, including encryption of data in transit, hashed storage of passwords, role-based access control so staff see only what their role requires, audit logging of portal activity, and restricted network access to our databases and backups.

No system is perfectly secure. If a personal data breach occurs that is likely to affect you, we will notify you and the Data Protection Board of India as required under the Digital Personal Data Protection Act, 2023.

9. Data Retention

We keep personal data only as long as we need it for the purpose it was collected for, or as long as the law requires.

• Enquiries that do not result in a relationship — up to 24 months, then deleted.
• Service job and claim records — for the life of the brand engagement plus the period required for warranty, audit, and dispute purposes.
• Financial and tax records — for the period required under Indian tax and companies legislation.
• Portal accounts — deactivated when access is withdrawn; audit logs retained for security and dispute-resolution purposes.

When data is no longer needed we delete it or irreversibly anonymise it.

10. Your Rights

Subject to the Digital Personal Data Protection Act, 2023, you have the right to:

• obtain confirmation of whether we process your personal data, and access a summary of it;
• have inaccurate or incomplete personal data corrected, and have it updated or completed;
• have your personal data erased where it is no longer needed for the purpose it was collected for and no law requires us to keep it;
• withdraw a consent you previously gave, at any time — withdrawal does not affect processing already carried out;
• nominate another person to exercise these rights on your behalf in the event of your death or incapacity;
• have a grievance addressed by our Grievance Officer, and to escalate it to the Data Protection Board of India if you are not satisfied with our response.

To exercise any of these rights, contact us at hello@geecell.com. We may ask you to verify your identity before we act. We respond free of charge and within the timelines required by law.

11. Children's Data

Our website and portals are intended for business users and are not directed at children. We do not knowingly collect personal data of a child under 18 years of age. If you believe we have done so, contact us and we will delete it.

12. Data Location

Our systems and backups are hosted in India. Some of the service providers we use to deliver email, e-signature, and communications functions may process limited data outside India. Where that happens we transfer data only to jurisdictions permitted under applicable Indian law and require appropriate safeguards from the provider.

13. Changes to This Policy

We may update this policy from time to time. The revised version takes effect when posted on this page, and the "last updated" date above will change. Where a change materially affects how we handle your data, we will make reasonable efforts to notify you directly.

14. Grievance Officer

In accordance with the Information Technology Act, 2000, the Digital Personal Data Protection Act, 2023, and the rules made under them, the contact details of our Grievance Officer are published below. Complaints are acknowledged within twenty-four (24) hours and resolved within the timelines prescribed by law.

15. Contact Us

Questions about this policy, or about how we handle your personal data: