Privacy Policy

1. Regulatory Framework & Scope

This Privacy Policy describes how Yongoy Cleaning Technologies collects, stores, processes, discloses, and protects your personal data in compliance with:

• The Digital Personal Data Protection Act, 2023 (DPDP Act);
• The Information Technology Act, 2000; and
• The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

This policy applies to all visitors, registered customers, corporate clients, and users who access our website, applications, or direct customer communication lines across Delhi, Gurugram, Noida, Greater Noida, Faridabad, and Ghaziabad.

2. Categories of Information Collected

We collect only the personal information reasonably necessary to provide and manage our services:

3. Lawful Grounds and Purposes of Processing

We process personal data based on legitimate legal grounds recognized under the DPDP Act 2023:

• Contract Performance: To schedule appointments, navigate technicians to your premises, perform cleaning services, and issue GST invoices.
• Legal Compliance: To maintain accurate tax and accounting records as mandated by Indian fiscal laws.
• Legitimate Interests: To authenticate customer logins via secure OTPs, prevent fraud, and handle customer service escalations.
• Consent: For opt-in service reminders, special discounts, or customer feedback inquiries (which you may opt out of at any time).

4. Data Sharing & Third-Party Disclosures

Yongoy does not sell, rent, or trade your personal information. Disclosures are limited to:

• Assigned Technicians: Your name, phone number, and address are shared with the verified technical supervisor assigned to perform your cleaning.
• Payment Gateways: Payment details are transmitted directly to RBI-licensed payment aggregators (e.g. Razorpay) using end-to-end encryption. Yongoy does not store raw credit/debit card numbers or UPI PINs.
• Statutory Authorities: Disclosures made when required by lawful court orders, law enforcement requests, or statutory obligations.

5. Data Storage, Security & Retention

All digital personal data is stored on secure, encrypted servers situated within the territory of India in accordance with national data residency requirements.

We implement administrative, technical, and physical safeguards—including SSL/TLS protocol transmission encryption, role-based database access, and regular vulnerability audits.

Personal records are retained only for as long as necessary to fulfill service commitments or satisfy legal, tax, and auditing requirements (typically up to seven years for fiscal records).

6. Your Rights under the DPDP Act, 2023

As a Data Principal under Indian law, you are entitled to the following rights:

• Right to Access: Request a summary of personal data held about you and the processing activities undertaken.
• Right to Correction & Updating: Request the correction or completion of inaccurate or outdated records.
• Right to Erasure: Request the deletion of personal data where continued retention is no longer necessary, subject to statutory record-keeping obligations.
• Right to Grievance Redressal: File an inquiry or complaint with our designated Data Protection Officer.

7. Data Protection Officer Contact

To exercise your statutory rights or submit a privacy inquiry, please contact our Data Protection Officer: