1.1 JAGCART MEDIA LLP (“JAGCART”, “we”,
“our” or “us”), a limited-liability partnership organised under
the Limited Liability Partnership Act 2008 and having its registered office at 301-c,
3rd Floor, Harmony Tower, Netaji Subhash Road, Court Naka, Thane (W)
, Maharashtra 400 602, India , owns and operates www.YANTRASOURCE™.com
™ (“Site”).
1.2 This Privacy Policy (“Policy”) explains how we collect, use,
disclose, store and otherwise process “personal data” within the meaning of:
- the Digital
Personal Data Protection Act, 2023 (“DPDP Act”);
- section
43A of the Information Technology Act, 2000 (“IT Act”); and
- the Information
Technology (Reasonable Security Practices and Procedures and Sensitive
Personal Data or Information) Rules, 2011 (“SPDI Rules”).
Where a term is defined differently in two statutes, the
DPDP Act definition prevails.
2 | Definitions (Indian Law)
|
Term |
Meaning |
|
Personal Data |
Any data about a data principal who is identifiable by or
in relation to such data (DPDP Act §2(t)). |
|
Sensitive Personal Data or Information (SPDI) |
Passwords, financial information, health data, biometric
data, sexual orientation, etc. as listed in Rule 3, SPDI Rules. |
|
Data Principal |
The individual to whom the personal data relates (DPDP Act
§2(j)). |
|
Data Fiduciary |
The person who determines the purpose and means of
processing personal data—here, JAGCART (§2(k)). |
|
Data Processor |
Any person who processes personal data on behalf of a Data
Fiduciary (§2(i)). |
|
Processing |
Any wholly or partly automated operation on personal data,
including collection, storage, use, disclosure, sharing or erasure (§2(w)). |
3 | Scope & Acceptance
3.1 By accessing or using the Site, you acknowledge that you
have read, understood and agreed to this Policy.
3.2 If you do not agree, you may discontinue use of the Site. Continued use
constitutes deemed consent under §6(1) DPDP Act where explicit consent is not
otherwise required.
4 | Categories of Personal Data Collected
|
Category |
Typical Elements |
Basis of Collection |
|
Identifiers |
Name, postal address, PIN code, e-mail, phone, IP address,
cookie ID |
Registration / forms / logs |
|
Demographic |
Age range, gender, occupation, industry |
Registration |
|
Transactional |
Subscription details, order history, tokenised payment
info |
Checkout |
|
Usage & Device |
Browser type, pages viewed, dwell time, referrer URL |
Cookies & server logs |
|
SPDI |
GSTIN, bank details (tokenised), PAN for invoicing |
Only where required by law or contract and processed with
enhanced safeguards |
We do not knowingly collect data of children under 18. If
you believe we have done so inadvertently, write to publisher@themachiningworld.com
for prompt deletion.
5 | Legal Grounds for Processing (India)
|
Purpose |
Lawful Ground (DPDP Act / IT Act) |
|
Account creation, order fulfilment |
Performance of contract (§7(a) IT Act) |
|
Direct marketing e-mails, newsletters |
Consent (§6 DPDP Act) |
|
Personalised ads, analytics, fraud prevention |
Legitimate use (§7(i) IT Act; Recital © DPDP Act) |
|
Regulatory compliance, tax & invoicing |
Legal obligation (§7(b) IT Act) |
You may withdraw consent at any time (§7(4) DPDP Act); such
withdrawal shall not affect prior lawful processing.
6 | How We Use Your Data
- Provide,
operate and secure the Site and related services.
- Complete
transactions, deliver subscriptions, and provide customer support.
- Send
service communications (e.g., order confirmations, renewal notices).
- With
your consent, deliver newsletters, event updates and promotional offers.
- Perform
analytics to improve content, user experience and system security.
We never profile you in a manner that has legal or similarly
significant effects without your explicit consent (§3(5) DPDP Act).
7 | Cookies & Tracking Technologies
7.1 We set first-party cookies to recognise returning
browsers, remember preferences, and compile aggregate statistics.
7.2 Third parties (analytics providers, ad networks) may set third-party
cookies when you interact with embedded content.
7.3 Non-essential cookies are deployed only after you click “Accept” on the
cookie banner. You can delete or block cookies via browser settings, though
certain features may degrade.
8 | Disclosures & Cross-Border Transfers
|
Recipient |
Purpose |
Safeguard |
|
Service Providers (hosting, logistics, payment) |
Processing on our behalf |
Data Processing Agreements under Rule 4, SPDI Rules |
|
Government / law-enforcement |
Compliance with court orders, summons, lawful interception |
Only upon receipt of legally valid request (§69 IT Act) |
|
Business transferees |
Merger, acquisition or asset sale |
Contractual commitment to honour this Policy |
Cross-border transfers, where required, occur only to
jurisdictions notified by the Central Government as “trusted” under §15 DPDP
Act or pursuant to approved contractual clauses ensuring comparable protection.
9 | Retention & Destruction
We retain personal data for the shortest period necessary
to: (a) fulfil the purpose of collection; (b) comply with legal/ tax
obligations (generally 8 yrs for financial records); or (c) resolve disputes.
Thereafter we irreversibly anonymise or securely delete data in accordance with
ISO/IEC 27001-compliant procedures.
10 | Security Practices
JAGCART has implemented and documents “reasonable security
practices and procedures” as defined in Rule 8, SPDI Rules:
- TLS
encryption for data in transit;
- firewalled
networks and role-based access;
- periodic
VAPT (vulnerability & penetration testing);
- incident-response
plan with 72-hour breach notification to the Data Protection Board of
India (§15 DPDP Act) and, where feasible, affected data principals.
11 | Data Principal Rights (India)
|
Right |
How to Exercise |
|
Right to Access |
E-mail : publisher@themachiningworld.com |
|
Right to Correction & Erasure (§13) |
Same as above; erasure subject to statutory record-keeping
obligations |
|
Right to Grievance |
Write to our Grievance Officer (details below). Unresolved
complaints may be escalated to the Data Protection Board of India. |
|
Right to Nominate (§17) |
You may nominate another individual to exercise your
rights in the event of death or incapacity. |
We respond within 15 days of a complete, verifiable request.
12 | Third-Party Sites
Hyperlinks or embedded widgets on the Site may lead to
external sites. We are not responsible for their privacy practices. Consult the
respective policies before sharing personal data.
13 | Changes to This Policy
Any material revision will be posted on the Site with the
“Last revised” date updated and, where changes materially affect your rights,
you will be notified by e-mail or prominent notice seven (7) days in advance.
14 | Contact & Grievance Redressal
Grievance (per
Rule 5(9), SPDI Rules)
JAGCART MEDIA
301-c, 3rd Floor, Harmony Tower, Netaji Subhash Road, Court Naka,
Thane (W)
Maharashtra 400 602, India
E-mail: publisher@themachiningworld.com
If you are dissatisfied with our response, you may lodge a
complaint with the Data Protection Board of India in accordance with
§14(3) DPDP Act.