1.1 JAGCART MEDIA LLP (“JAGCART”, “we”, “our” or “us”), a limited-liability partnership organised under the Limited Liability Partnership Act 2008 and having its registered office at 301-c, 3^rd Floor, Harmony Tower, Netaji Subhash Road, Court Naka, Thane (W) , Maharashtra 400 602, India , owns and operates www.YANTRASOURCE™.com ™ (“Site”).
1.2 This Privacy Policy (“Policy”) explains how we collect, use, disclose, store and otherwise process “personal data” within the meaning of:

the Digital Personal Data Protection Act, 2023 (“DPDP Act”);
section 43A of the Information Technology Act, 2000 (“IT Act”); and
the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“SPDI Rules”).

Where a term is defined differently in two statutes, the DPDP Act definition prevails.

2 | Definitions (Indian Law)

Term	Meaning
Personal Data	Any data about a data principal who is identifiable by or in relation to such data (DPDP Act §2(t)).
Sensitive Personal Data or Information (SPDI)	Passwords, financial information, health data, biometric data, sexual orientation, etc. as listed in Rule 3, SPDI Rules.
Data Principal	The individual to whom the personal data relates (DPDP Act §2(j)).
Data Fiduciary	The person who determines the purpose and means of processing personal data—here, JAGCART (§2(k)).
Data Processor	Any person who processes personal data on behalf of a Data Fiduciary (§2(i)).
Processing	Any wholly or partly automated operation on personal data, including collection, storage, use, disclosure, sharing or erasure (§2(w)).

3 | Scope & Acceptance

3.1 By accessing or using the Site, you acknowledge that you have read, understood and agreed to this Policy.
3.2 If you do not agree, you may discontinue use of the Site. Continued use constitutes deemed consent under §6(1) DPDP Act where explicit consent is not otherwise required.

4 | Categories of Personal Data Collected

Category	Typical Elements	Basis of Collection
Identifiers	Name, postal address, PIN code, e-mail, phone, IP address, cookie ID	Registration / forms / logs
Demographic	Age range, gender, occupation, industry	Registration
Transactional	Subscription details, order history, tokenised payment info	Checkout
Usage & Device	Browser type, pages viewed, dwell time, referrer URL	Cookies & server logs
SPDI	GSTIN, bank details (tokenised), PAN for invoicing	Only where required by law or contract and processed with enhanced safeguards

We do not knowingly collect data of children under 18. If you believe we have done so inadvertently, write to publisher@themachiningworld.com for prompt deletion.

5 | Legal Grounds for Processing (India)

Purpose	Lawful Ground (DPDP Act / IT Act)
Account creation, order fulfilment	Performance of contract (§7(a) IT Act)
Direct marketing e-mails, newsletters	Consent (§6 DPDP Act)
Personalised ads, analytics, fraud prevention	Legitimate use (§7(i) IT Act; Recital © DPDP Act)
Regulatory compliance, tax & invoicing	Legal obligation (§7(b) IT Act)

You may withdraw consent at any time (§7(4) DPDP Act); such withdrawal shall not affect prior lawful processing.

6 | How We Use Your Data

Provide, operate and secure the Site and related services.
Complete transactions, deliver subscriptions, and provide customer support.
Send service communications (e.g., order confirmations, renewal notices).
With your consent, deliver newsletters, event updates and promotional offers.
Perform analytics to improve content, user experience and system security.

We never profile you in a manner that has legal or similarly significant effects without your explicit consent (§3(5) DPDP Act).

7 | Cookies & Tracking Technologies

7.1 We set first-party cookies to recognise returning browsers, remember preferences, and compile aggregate statistics.
7.2 Third parties (analytics providers, ad networks) may set third-party cookies when you interact with embedded content.
7.3 Non-essential cookies are deployed only after you click “Accept” on the cookie banner. You can delete or block cookies via browser settings, though certain features may degrade.

8 | Disclosures & Cross-Border Transfers

Recipient	Purpose	Safeguard
Service Providers (hosting, logistics, payment)	Processing on our behalf	Data Processing Agreements under Rule 4, SPDI Rules
Government / law-enforcement	Compliance with court orders, summons, lawful interception	Only upon receipt of legally valid request (§69 IT Act)
Business transferees	Merger, acquisition or asset sale	Contractual commitment to honour this Policy

Cross-border transfers, where required, occur only to jurisdictions notified by the Central Government as “trusted” under §15 DPDP Act or pursuant to approved contractual clauses ensuring comparable protection.

9 | Retention & Destruction

We retain personal data for the shortest period necessary to: (a) fulfil the purpose of collection; (b) comply with legal/ tax obligations (generally 8 yrs for financial records); or (c) resolve disputes. Thereafter we irreversibly anonymise or securely delete data in accordance with ISO/IEC 27001-compliant procedures.

10 | Security Practices

JAGCART has implemented and documents “reasonable security practices and procedures” as defined in Rule 8, SPDI Rules:

TLS encryption for data in transit;
firewalled networks and role-based access;
periodic VAPT (vulnerability & penetration testing);
incident-response plan with 72-hour breach notification to the Data Protection Board of India (§15 DPDP Act) and, where feasible, affected data principals.

11 | Data Principal Rights (India)

Right	How to Exercise
Right to Access (§12 DPDP Act)	E-mail : publisher@themachiningworld.com
Right to Correction & Erasure (§13)	Same as above; erasure subject to statutory record-keeping obligations
Right to Grievance Redressal (§14)	Write to our Grievance Officer (details below). Unresolved complaints may be escalated to the Data Protection Board of India.
Right to Nominate (§17)	You may nominate another individual to exercise your rights in the event of death or incapacity.

We respond within 15 days of a complete, verifiable request.

12 | Third-Party Sites

Hyperlinks or embedded widgets on the Site may lead to external sites. We are not responsible for their privacy practices. Consult the respective policies before sharing personal data.

13 | Changes to This Policy

Any material revision will be posted on the Site with the “Last revised” date updated and, where changes materially affect your rights, you will be notified by e-mail or prominent notice seven (7) days in advance.

14 | Contact & Grievance Redressal

Grievance (per Rule 5(9), SPDI Rules)
JAGCART MEDIA
301-c, 3^rd Floor, Harmony Tower, Netaji Subhash Road, Court Naka, Thane (W)
Maharashtra 400 602, India
E-mail: publisher@themachiningworld.com

If you are dissatisfied with our response, you may lodge a complaint with the Data Protection Board of India in accordance with §14(3) DPDP Act.