Privacy Policy

ATG Khidmat (“we,” “our,” or “us”) operates atgkhidmat.com (the “Service”). We are based in New Delhi, India, and manufacture/promote a wide range of promotional items (bags, T-shirts, caps, umbrellas, etc.). We showcase our work through categorized image galleries for customers to browse. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our public site, contact us, register or log in to download catalogues, and how we use tracking technologies.

1. Information We Collect

1.1 Personal Data You Provide

• Contact Forms: When you fill out any contact form, we collect your name, email address, phone number (optional), and any message you submit.
• Registration for Catalogue Downloads / OTP Login: To download catalogues, you must register or log in. During OTP login, we collect your phone number or email (whichever OTP method you choose). We also collect any extra profile details you enter (e.g., name, company).
• Account Login: We store your login credentials (phone number or email + OTP token) in a secure manner. No passwords are stored—OTP is sent to your device and expires soon after use.

1.2 Automatically Collected Data

When you visit our site, we automatically collect certain information about your device and how you interact with the Service, including:

• Log Data: Your (anonymized) IP region (via geoip-lite), browser type and version, device identifiers, operating system, pages visited, date/time stamps, and referring/exit pages. We do NOT store your raw IP address—only the geoip-lite lookup results (country, region, city, latitude/longitude).
• Cookies & Similar Technologies: We use cookies and localStorage to store a unique visitorId and sessionId to power analytics and site functionality. Examples include:
  • Essential Cookies: Required for login sessions (OTP flow) and to keep you logged in while browsing/catalogue download.
  • Analytics Cookies: We track anonymized visitor data (pages viewed, time on site) using our custom tracker. These cookies do not store personal identifiers and only begin if you give explicit consent. You can disable analytics anytime via the Cookie Settings.

2. How We Use Your Information

• Respond to Inquiries: We use your contact form data (name, email, message) to respond to your questions or requests.
• Catalogue Access & OTP Login: We send you an OTP (one-time passcode) to your phone or email to verify your identity. Once verified, you can download our catalogues (PDFs). We may also send you updates about new catalogues if you opt in.
• Analytics & Site Improvement: We use geoip-lite on the backend to convert your (anonymized) IP to country/region/city/coordinates, and we store only those fields—never the raw IP. This helps us analyze traffic patterns, improve site performance, and detect unusual activity. We do NOT track your personal identity in analytics.
• Marketing & Promotions (Optional): If you explicitly subscribe to our newsletter or promotional emails, we may send you offers and updates. You can unsubscribe anytime via the link in our emails or by contacting us at [email protected].
• Security & Fraud Prevention: We monitor login (OTP), registration, and download events to detect unusual activity (e.g., repeated OTP requests, multiple failed logins) and to protect both you and our Service.

3. Legal Basis for Processing (GDPR / Indian IT Act)

We operate out of New Delhi, India, so this Privacy Policy complies with Indian IT Rules (2011) and, where applicable, the GDPR for users in the EU/EEA. We process your data under these bases:

• Consent: You give explicit consent when you register, log in via OTP, submit contact forms, or accept analytics cookies. You can revoke analytics cookies anytime via Cookie Settings.
• Contractual Necessity: We need your phone number or email (OTP) to authenticate you before you can download catalogues and to maintain secure login sessions.
• Legitimate Interests: We use anonymized analytics (geoip-lite data, pages viewed, time on site) to improve our Service, secure our site, and detect fraud, as long as it does not override your privacy rights.
• Legal Compliance: We may process or share your data to comply with Indian laws, court orders, or lawful requests by authorities.

4. Data Retention

We retain your personal data (contact form submissions, registration/OTP login details, download history) indefinitely, unless you request deletion. To request erasure of your account and related personal data, email us at [email protected]. Note:

1. Aggregated Analytics: We keep anonymized, aggregated usage statistics for historical analysis. This data cannot identify individual users.
2. Legal Holds: If required by law (e.g., tax records, legal disputes), we may retain certain records until the obligation expires.

5. Cookies & Analytics

We use cookies and similar technologies to provide the best experience:

• Essential Cookies: Necessary for OTP login, account sessions, and site security.
• Analytics Cookies: We use a custom tracker and geoip-lite backend to collect visitorId and sessionId, measure “page_view” and “page_exit” events, and derive rough location (country, city) without storing raw IPs. These require your explicit consent.
• Cookie Settings: Use the Cookie Settings link in the footer to Accept or Disable analytics cookies at any time.

6. Cookie Settings

7. Sharing Your Information

We do not sell, rent, or share your personally identifiable information (PII) with third parties, except:

• Service Providers: We share data with trusted vendors (e.g., hosting, email delivery, analytics) under strict confidentiality.
• Legal Requests: If compelled by law or court order, we may disclose your data to authorities.
• Business Transfers: If we merge or sell ATG Khidmat, your data may transfer to the successor, and you will be notified in advance.

8. Security

We take reasonable measures to protect your data:

• Encrypted Connections: All pages that collect or process personal data (OTP login, registration, contact forms) are served over HTTPS (TLS).
• OTP Storage: We do not store actual OTPs; they expire shortly after use. We store only the phone number or email for future logins.
• GeoIP Data: We use geoip-lite on the server to look up country/region/city/coordinates. We do not store your raw IP address—only the lookup results.
• Access Controls: Only authorized team members have access to our database, and all administrative actions require multi-factor authentication (MFA).
• Regular Audits: We conduct periodic security reviews, vulnerability scans, and keep software up to date with security patches.

9. International Transfers

We operate from New Delhi, India, but some service providers (hosting, analytics) may store or process data outside India. Under Indian law, this is permitted if we have appropriate safeguards (NDAs, security controls). If you are in the EU/EEA, we ensure compliance with GDPR (e.g., Standard Contractual Clauses).

10. Your Rights

• Access & Correction: You can request a copy of personal data we hold about you and ask for corrections. Email [email protected].
• Deletion: Request deletion of your data (subject to legal holds). We’ll comply within 30 days of a verifiable request.
• Data Portability: Ask for a machine-readable export of data you provided (contact forms, registration info).
• Opt-Out of Marketing: If you subscribed to promotional emails, you can opt out via the “Unsubscribe” link in emails or by emailing [email protected].
• Cookie Consent: Click “Cookie Settings” in the footer to enable/disable analytics cookies or revoke consent.

11. Children’s Privacy

Our Service is not directed at children under 13. We do not knowingly collect personal data from anyone under 13. If you believe we have collected data about a minor, please contact us at [email protected], and we will promptly delete that information.

12. Changes to This Privacy Policy

We may update this Privacy Policy as practices or legal requirements change. We will post the “Last Updated” date at the top. For material changes, we may notify you by email (if you have an account) or via a notice on our homepage.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact: