Privacy Policy

1. About this policy

JKITCO Limited (“JKITCO”, “we”, “us”) respects your privacy. This policy explains what personal data we collect through our website www.jkitco.in, why we collect it, how we protect it, and the rights you have over it.

JKITCO Limited is a Public Sector Undertaking (a State Government company established in 1977), CIN U74210JK1977SGC000420. Our Registered Office is at DIC Complex, Exhibition Ground, Jammu – 180 001, and our Corporate Office is at 101, Classic Centre, 575, M.G. Road, Indore – 452 001, Madhya Pradesh.

For the personal data described here, JKITCO is the Data Fiduciary under the Digital Personal Data Protection Act, 2023 (“DPDP Act”). This policy is also published under the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

This policy covers only this website and the enquiries, applications and messages you send to us through it or in reply to it. It does not cover information you submit on government e-procurement portals, which are governed by those portals’ own policies.

By using this website or submitting your details, you confirm that you have read this policy. Where we rely on your consent, we ask for it separately, for example through the tick-box on our contact form.

2. Personal data we collect

We collect only what we need to respond to you and run the website. You can browse the website without giving us your name or contact details.

Where it comes from	Personal data
Contact / enquiry form	Name, e-mail address, phone number, enquiry category, and your message (including anything you choose to write in it)
E-mails, letters and phone calls to us	Name, contact details, organisation, designation, and the content and attachments of your message
Business, project and tender correspondence	Names, designations and contact details of representatives of clients, bidders, vendors and partners, and personal details in documents they send us
Job applications (if you apply for a position)	Name, contact details, date of birth, qualifications, work experience, CV and any documents you upload
Automatically, when you visit the site	IP address, browser and device type, operating system, pages visited, date and time of visit, and the referring page (in server logs), plus the items described in section 4

 

Fields marked * on the contact form are required so that we can reply; the others are optional. If you do not give the required details, we may not be able to respond.

The website does not ask for passwords, bank or card details, health information or biometric data. Please do not send such information, or identity numbers such as Aadhaar or PAN, unless we specifically ask for them for a contract or recruitment process.

3. How we use your personal data, and why we are allowed to

We use personal data only for the purposes below. Under the DPDP Act, we process it either with your consent or for a legitimate use permitted by Section 7 of the Act.

Purpose	Data used	Basis
Replying to your enquiry, sending information or proposals you ask for, and following up on it	Contact-form, e-mail and phone details	Your consent (contact-form tick-box), or data you voluntarily gave us for that purpose
Preparing and carrying out projects, consultancy assignments, contracts and tenders	Business and tender correspondence	Data voluntarily provided for that purpose, and performance of the contract
Considering you for a job	Job-application details	Your consent
Running the website, keeping it secure, and detecting misuse or attacks	Server logs	Legitimate use and our legal duty to protect personal data
Meeting legal duties: statutory audits (including by the Comptroller and Auditor General of India), court orders, and lawful requests from government authorities	Any of the above, only as required	Legitimate use: compliance with law, judgments and orders

 

We do not sell or rent personal data. We do not send marketing e-mails unless you ask to receive updates, and we do not make automated decisions about you.

If we want to use your data for a new purpose, we will tell you first and, where needed, ask for your consent.

4. Cookies and third-party services

Cookies are small text files a website stores in your browser. Our website does not set tracking or advertising cookies, and it does not use social-media pixels.

Item	Provider	What it does	How long
Login cookies (wordpress_*)	JKITCO website	Keep website administrators signed in; not set for ordinary visitors	Session, or up to 14 days
Emoji support check (browser session storage, no personal data)	JKITCO website	Checks whether your browser can display emoji	Until you close the tab
Web fonts	Google Fonts (Google LLC)	Your browser downloads fonts from Google’s servers, which receive your IP address	Not stored by us

 

If we add website analytics or similar tools in future, we will update this policy and ask for your consent before setting any non-essential cookies. Google’s services are subject to Google’s Privacy Policy.

You can block or delete cookies in your browser settings. The website will still work, but administrators will not be able to sign in.

5. Who we share personal data with

We share personal data only when it is needed for the purposes in section 3, and only as much as is needed.

• Service providers (Data Processors) who work for us under contract and only on our instructions: Google, which hosts our website (Google Cloud) and our e-mail (Google Workspace), and the agency that maintains our website.
• Clients, government departments and partner organisations involved in a project, assignment or tender that your enquiry or correspondence relates to.
• Auditors and professional advisers, including statutory auditors, the Comptroller and Auditor General of India, and our legal advisers.
• Courts, regulators, law-enforcement and government authorities, when the law, a court order or a lawful request requires it.

JKITCO may receive requests under the Right to Information Act, 2005. Personal information is protected under that Act and is not released except as the Act permits.

Google may store data on servers outside India. Such transfers are made only to countries not restricted by the Government of India under Section 16 of the DPDP Act, and under Google’s contractual data-protection terms.

6. How we protect your data

We take reasonable security measures to protect personal data against loss, misuse, unauthorised access, alteration and disclosure. These include:

• encrypted connections (HTTPS) between your browser and our website;
• access to personal data limited to authorised staff who need it for their work;
• strong passwords, two-factor sign-in and login-attempt limits for website administration;
• regular software updates, security monitoring and backups;
• written contracts that require our service providers to keep data secure and confidential.

No website or e-mail system is completely secure. Please avoid sending confidential documents by e-mail unless we have agreed a secure method with you.

If a personal data breach happens, we will inform the Data Protection Board of India and the people affected, as the law requires. We will tell you what happened, the likely impact, what we are doing about it, and what you can do to protect yourself.

7. How long we keep it

We keep personal data only as long as the purpose needs it or the law requires, then delete or anonymise it.

Data	How long we keep it
Enquiries that do not lead to further work	2 years after our last communication
Project, contract, tender and financial records	As long as the law and audit requirements need; financial records at least 8 years under the Companies Act, 2013
Job applications that are not successful	1 year after the recruitment closes, unless you agree to a longer period
Server logs	1 year, then deleted

 

If you withdraw consent or ask us to erase your data, we will delete it unless a law requires us to keep it longer.

8. Your rights

Under the DPDP Act you have the following rights over the personal data we hold about you. Using them is free of charge.

Right	What it means
Access	Get a summary of your personal data we hold, how we use it, and who we have shared it with
Correction and updating	Have inaccurate or incomplete data corrected or completed
Erasure	Have your data deleted when it is no longer needed, unless the law requires us to keep it
Withdraw consent	Withdraw consent at any time, as easily as you gave it; this does not affect what we did before you withdrew
Grievance redressal	Complain to our Grievance Officer about how we handle your data (section 10)
Nomination	Nominate another person to exercise these rights if you die or become unable to act

How to make a request

1. E-mail our Grievance Officer at bd@jkitco.in with the subject “Privacy request”, or write to our Corporate Office.
2. Tell us your name, how we can contact you, and what you want us to do.
3. We may ask you to confirm your identity before acting, so that we do not disclose your data to someone else.
4. We will reply within 30 days.

The law also asks you to give us accurate information and not to file false or frivolous complaints.

9. Children, other websites, and changes to this policy

Children. Our website and services are meant for organisations and adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has sent us personal data, contact our Grievance Officer and we will delete it.

Links to other websites. Our website may link to government portals, client websites or social-media pages. We are not responsible for their content or privacy practices; please read their own policies.

Changes to this policy. We may update this policy when the law, our services or our website change. The latest version will always be on this page with its effective date. If a change significantly affects how we use your data, we will put a notice on the website and, where needed, ask for your consent again.

10. Grievance Officer and contact

For any question, request or complaint about this policy or your personal data, contact our Grievance Officer. We will acknowledge your message and resolve it within 30 days.

Contact	Details
Grievance Officer	Mr. Prakhar, Director
E-mail	bd@jkitco.in
Phone	0731-4072777
Corporate Office	JKITCO Limited, 101, Classic Centre, 575, M.G. Road, Indore – 452 001, Madhya Pradesh
Registered Office	JKITCO Limited, DIC Complex, Exhibition Ground, Jammu – 180 001

 

Complaint to the Data Protection Board of India. If you are not satisfied with our response, you may complain to the Data Protection Board of India under the DPDP Act, through the procedure notified by the Government of India. The Act asks you to raise the matter with our Grievance Officer first.