Privacy Policy – Tecto Lab

TECTO LAB PRIVATE LIMITED

PRIVACY POLICY

Effective Date: 02 Jan, 2023

Last Updated: 02 Jan, 2023

Version: 1.0

Tecto Lab Private Limited

Yamunanagar, Haryana, India

we@tectolab.com

www.tectolab.com

Introduction

Tecto Lab Private Limited (“Tecto Lab”, “we”, “us”, or “our”) is a company registered under the Companies Act, 2013, with its registered office at [Address], Yamunanagar, Haryana, India. We operate the website www.tectolab.com and provide services and products including, but not limited to, IT solutions, software development, telecommunications services, metaverse experiences, 3D development, gaming services, KartWale, and Childling (collectively, the “Services”).

This Privacy Policy explains how Tecto Lab collects, uses, stores, shares, and protects your personal information when you visit our website, use our Services, or interact with us in any capacity. It also explains your rights in relation to your personal data and how you may exercise them.

By accessing or using our website or Services, you acknowledge that you have read, understood, and agree to be bound by the terms of this Privacy Policy. If you do not agree with the terms stated herein, please discontinue use of our website and Services immediately.

This Privacy Policy is compliant with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“SPDI Rules”), and, where applicable, international data protection standards including the General Data Protection Regulation (GDPR).

Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings ascribed to them below:

“Personal Data” or “Personal Information” means any information that relates to a natural person and either directly or indirectly identifies such a person, including but not limited to name, email address, phone number, device identifiers, or IP address.
“Sensitive Personal Data or Information (SPDI)” has the meaning ascribed to it under the SPDI Rules and includes passwords, financial information such as bank account or credit card details, physical and mental health conditions, sexual orientation, medical records, and biometric information.
“Data Subject” means any individual whose personal data is processed by Tecto Lab.
“Processing” means any operation performed on personal data, whether automated or manual, including collection, recording, storage, use, disclosure, or deletion.
“Third Party” means any person or entity other than Tecto Lab and the Data Subject.
“Cookies” means small text files stored on a user’s device by a web browser to record information about browsing activity.

Information We Collect

We collect information about you in the following ways:

3.1 Information You Provide Directly

When you interact with us — whether by filling out a contact form, registering an account, subscribing to our newsletter, requesting a quote, or communicating with us — you may provide us with:

Full name
Email address
Mobile or telephone number
Company or organisation name
Postal address or location information
Job title or designation
Payment and billing information (for commercial transactions)
Any other information you choose to provide in messages or correspondence

3.2 Information We Collect Automatically

When you visit our website or use our digital products, we automatically collect certain technical information, including:

IP address and approximate geographic location (country, city)
Browser type and version
Operating system and device type
Referring URL and exit pages
Pages visited and time spent on each page
Date and time of access
Clickstream data and interaction data
Device identifiers and advertising IDs

3.3 Information from Third-Party Sources

We may receive information about you from third parties such as:

Social media platforms (if you connect or interact with us via LinkedIn, Instagram, etc.)
Business partners and referral sources
Analytics providers and advertising networks
Publicly available sources and databases

3.4 Information from Children

Our Childling platform is designed for children aged 3–12. For minor users of Childling, we collect only the information necessary to provide the service and do so strictly through a parent or guardian account. We do not knowingly collect personal data directly from children under the age of 13 without verifiable parental consent. Parents and guardians are responsible for supervising their child’s use of our platform. If we become aware that we have inadvertently collected personal data from a child without parental consent, we will take immediate steps to delete that information. Parents or guardians may contact us at we@tectolab.com to request deletion of a child’s data.

How We Use Your Information

We use the personal information we collect for the following purposes:

4.1 To Provide and Manage Our Services

To respond to your inquiries, service requests, and support tickets
To process transactions and deliver services you have requested
To create and manage your account on our platforms
To facilitate access to our products, including KartWale and Childling

4.2 To Improve and Develop Our Services

To analyse usage patterns and enhance the performance of our website and products
To conduct research, testing, and development of new features
To monitor and resolve technical issues and bugs

4.3 For Communication and Marketing

To send you service-related communications, updates, and notifications
To send you marketing and promotional materials, where you have opted in to receive them
To inform you about new products, services, offers, and company news
To conduct surveys and gather feedback

You may opt out of marketing communications at any time by clicking “Unsubscribe” in any marketing email or by contacting us at we@tectolab.com.

4.4 For Legal and Compliance Purposes

To comply with applicable laws, regulations, and legal obligations
To enforce our Terms of Service and other agreements
To protect the rights, property, and safety of Tecto Lab, our users, and the public
To detect, investigate, and prevent fraudulent or unlawful activity

4.5 Legitimate Business Interests

To manage our business relationships with clients, vendors, and partners
To perform internal analytics, reporting, and business planning
To maintain the security and integrity of our systems and networks

Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA) or the United Kingdom, we process personal data under the following legal bases:

Contractual Necessity — Processing is necessary to perform a contract with you or to take steps at your request prior to entering into a contract.
Legal Obligation — Processing is required for compliance with a legal obligation to which Tecto Lab is subject.
Legitimate Interests — Processing is necessary for our legitimate business interests, provided these are not overridden by your rights and interests.
Consent — Where we rely on your consent, you have the right to withdraw it at any time without affecting the lawfulness of processing prior to withdrawal.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies (such as web beacons, pixels, and local storage) to enhance your experience on our website and understand how our Services are used.

6.1 Types of Cookies We Use

Strictly Necessary Cookies — Essential for the website to function and cannot be disabled. They enable core features such as login sessions and security.
Performance & Analytics Cookies — Help us understand how visitors interact with our website by collecting information anonymously (e.g., Google Analytics).
Functional Cookies — Allow us to remember your preferences (such as language or region) to provide a more personalised experience.
Marketing & Targeting Cookies — Used to deliver relevant advertisements and track the effectiveness of our marketing campaigns. These are only set with your consent.

6.2 Managing Your Cookie Preferences

You can manage or disable cookies at any time through your browser settings. Please note that disabling certain cookies may affect the functionality of our website. You may also opt out of analytics tracking by installing the Google Analytics Opt-Out Browser Add-on. A cookie consent banner will appear on your first visit to our website, allowing you to select your preferences.

How We Share Your Information

Tecto Lab does not sell, trade, or rent your personal data to third parties for their own marketing purposes. We may share your information in the following limited circumstances:

7.1 Service Providers and Technology Partners

We engage trusted third-party vendors who assist us in operating our website and delivering our Services. These include hosting providers, cloud infrastructure providers, email service platforms, payment processors, analytics services, and customer support tools. These parties are contractually obligated to process your data only on our instructions and in accordance with applicable data protection law.

7.2 Business Partners

Where our Services involve collaboration with business partners (e.g., telecommunications providers, gaming platform partners), we may share data with those partners to the extent necessary to deliver the relevant service.

7.3 Legal Requirements

We may disclose your personal information if required to do so by law, court order, or in response to a valid request by a government or regulatory authority, or where we believe such disclosure is necessary to protect the rights, property, or safety of Tecto Lab, our users, or others.

7.4 Business Transfers

In the event of a merger, acquisition, restructuring, sale of assets, or any similar corporate transaction, your personal data may be transferred to the acquiring entity. We will notify affected users via email or prominent notice on our website before your data is subject to a materially different privacy policy.

7.5 With Your Consent

We may share your information with other parties where you have provided explicit consent for us to do so.

Data Retention

We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, including compliance with legal, accounting, or reporting obligations.

The criteria used to determine retention periods include:

The nature and sensitivity of the data
The purposes for which the data was collected and the extent to which those purposes have been fulfilled
Applicable legal retention obligations (e.g., tax and financial records may be retained for up to 8 years under Indian law)
Whether the data is required to resolve disputes, enforce agreements, or address complaints

Upon expiry of the applicable retention period, we will securely delete or anonymise your personal data. In cases where deletion is not immediately possible (e.g., data stored in backup archives), we will isolate it from further processing until deletion is possible.

Data Security

Tecto Lab takes the security of your personal data seriously. We implement a range of technical and organisational measures designed to protect your information against unauthorised access, disclosure, alteration, or destruction. These measures include:

Encryption of data in transit using TLS/SSL protocols
Encryption of sensitive data at rest
Access controls and role-based permissions to limit internal data access
Regular security assessments, vulnerability testing, and code reviews
Multi-factor authentication for internal systems
Employee training and data protection awareness programmes
Incident response procedures for security breaches

While we employ industry-standard safeguards, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security and encourage users to take precautions such as using strong passwords and not sharing login credentials.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected users and relevant authorities in accordance with applicable law.

Your Rights

Depending on your jurisdiction, you may have the following rights in relation to your personal data:

10.1 Right of Access

You have the right to request confirmation of whether we process your personal data and, if so, to receive a copy of the data we hold about you, along with information about how it is used.

10.2 Right to Rectification

You have the right to request correction of any inaccurate or incomplete personal data we hold about you.

10.3 Right to Erasure (“Right to be Forgotten”)

You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to certain legal exceptions.

10.4 Right to Restriction of Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when the accuracy of the data is contested or where processing is unlawful.

10.5 Right to Data Portability

Where processing is based on consent or contract and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.

10.6 Right to Object

You have the right to object to the processing of your personal data where processing is based on legitimate interests or for direct marketing purposes. Where you object to direct marketing, we will cease processing your data for that purpose immediately.

10.7 Rights Related to Automated Decision-Making

You have the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal or similarly significant effects concerning you.

10.8 Exercising Your Rights

To exercise any of the above rights, please contact our Data Protection point of contact at we@tectolab.com. We will respond to all legitimate requests within 30 days. We may need to verify your identity before processing your request. In some cases, we may be unable to fulfil a request due to overriding legal obligations, in which case we will explain our reasoning.

International Data Transfers

Tecto Lab is based in India. If you are accessing our Services from outside India, your information may be transferred to and processed in India, where data protection laws may differ from those in your country.

For users in the EEA or UK, where we transfer personal data to countries that do not provide an adequate level of data protection, we rely on appropriate safeguards such as Standard Contractual Clauses approved by the European Commission to ensure your data is protected.

By using our Services, you consent to such transfers to the extent permitted by applicable law.

Third-Party Links and Services

Our website and products may contain links to third-party websites, platforms, or services (such as social media pages, partner websites, or integrated third-party tools). This Privacy Policy applies only to Tecto Lab and does not cover the privacy practices of any third-party sites or services.

We encourage you to review the privacy policies of any third-party services you access through links on our website. We are not responsible for the content, privacy practices, or data handling of third-party sites.

Changes to This Privacy Policy

Tecto Lab reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. When we make material changes, we will:

Update the “Last Updated” date at the top of this document
Post a prominent notice on our website homepage
Send a notification to registered users via email, where appropriate

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our Services after the effective date of any changes constitutes your acceptance of the revised Privacy Policy.

Grievance Redressal (India)

In accordance with the Information Technology Act, 2000 and the rules made thereunder, the name and contact details of the Grievance Officer are provided below:

Grievance Officer: Akshdeep Singh

Designation: Director

Company: Tecto Lab Private Limited

Address: Yamunanagar, Haryana, India

Email: aksh@tectolab.com

Response Time: We will acknowledge your complaint within 24 hours and resolve it within 30 days of receipt.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal data, please contact us at:

Tecto Lab Private Limited

Yamunanagar, Haryana – India

Email: we@tectolab.com

Website: www.tectolab.com