Privacy Policy

Effective Date: December 20, 2023

Last Updated: June 10, 2026

RK ENGINEERING ("we," "us," or "our"), the parent company of ToolsEngg.com, is fully committed to protecting your digital privacy. This Privacy Policy details how we collect, process, share, and safeguard your personal data. Our practices are strictly aligned with the Digital Personal Data Protection (DPDP) Act, 2023 (India), the General Data Protection Regulation (GDPR) (EU), and other applicable global data protection frameworks.

1. Data Collection, Processing, and Lawful Basis

We process personal data based on explicit consent, performance of a contract (to fulfill orders), and compliance with statutory legal obligations. We only collect the minimum information required to successfully provide our high-precision tooling and international export services:

• Identity Data: Full name, business title, and associated corporate entity details.
• Contact Data: Corporate email address, telephone numbers, and physical shipping/billing addresses necessary for international customs clearances.
• Transaction & Financial Data: Order history, tax identifiers (e.g., GSTIN, VAT details), and payment confirmations. Please note: We do not process or store raw credit card numbers or banking passwords; all payments are processed securely by certified third-party payment gateways.
• Technical & Usage Data: Internet Protocol (IP) addresses, browser variants, operating systems, and clickstream paths monitored through Google Analytics.

Purposes of Processing: Data processing is executed explicitly to fulfill purchase contracts, streamline customer support channels, meet global customs/trade regulatory mandates, protect against fraudulent operations, and improve website operational performance.

2. Your Legal Rights (Data Principal Rights)

Subject to geographic dependencies under the GDPR and the DPDP Act 2023, you hold comprehensive legal entitlements over your information. You may invoke the following rights at any time:

• Right to Access & Confirmation: The right to request structural summaries of your personal data currently under our processing custody.
• Right to Rectification & Completion: The right to update inaccurate, incomplete, or outdated personal identifiers instantly.
• Right to Erasure ("Right to be Forgotten"): The right to demand deletion of your records when they are no longer legally mandated for statutory retention periods (e.g., tax compliance audits).
• Right to Object & Restriction: The right to limit specific data uses, particularly regarding corporate communications or automated profiling.
• Right to Withdraw Consent: The right to withdraw your consent to data processing at any point. A withdrawal will not impact the lawful processing activities carried out prior to the revocation request.
• Right to Nominate (DPDP Specific): The statutory right to appoint an authorized legal representative to manage your data rights in the event of an emergency, medical incapacity, or death.

3. Cookie Architecture & Consent Governance

Our platform uses cookies and localized storage mechanisms to preserve essential features like shopping carts and multi-currency frameworks. You can adjust your granular preferences through our dynamic Consent Manager cookie banner.

Essential & Functional Cookies

Analytics & Optimization Cookies

We deploy Google Analytics to evaluate user metrics and technical bugs. These non-essential tracking cookies remain completely dark and disabled until you explicitly interact with our prompt selection tools by clicking "Accept All" or checking "Analytics".

4. Data Security, Retention, and Breaches

• Secure Transmissions: Every bit of data flowing to and from ToolsEngg.com is wrapped in robust, enterprise-grade Secure Sockets Layer (SSL/TLS) encryption.
• Retention Limitations: We maintain customer transaction details for a baseline of 7 years to comply with strict Indian tax, auditing, and corporate statutory mandates. Non-essential data is regularly purged.
• Vulnerability Management: Our engineering framework undergoes routine automated security testing and malware scanning to catch vulnerabilities before they can become an issue.
• Breach Protocols: In the highly unlikely event of a structural system data breach, we will notify the appropriate regulatory agencies (such as the Data Protection Board of India) and impacted individuals within the strict timeframes required by law.

5. Protected Third-Party Disclosures

We never sell, trade, or monetize your Personally Identifiable Information (PII). We share data only with verified "Data Processors" who act as critical extensions of our business—such as global shipping networks (DHL, FedEx) and authorized secure payment gateways. These processors are contractually bound to treat your data with the same high level of security and compliance required by DPDP and GDPR standards.

6. Cross-Border International Data Transfers

Because ToolsEngg.com operates as a global engineering exporter out of Chennai, India, any information you provide may be safely routed and processed within our Indian technical facilities. We ensure that all cross-border data routing strictly follows standard contractual clauses and meets the legal "adequacy" regulations set by your home country.

7. Minors and Age Restrictions

Our industrial tooling services are strictly aimed at businesses and adults. We do not knowingly compile, store, or target data from individuals under eighteen (18) years of age. If we discover that any information belonging to a minor has been mistakenly saved without verifiable parental consent, it will be immediately removed from our active databases.

8. Grievance Redressal & Corporate Contacts

If you have any questions about this policy, wish to file a formal complaint, or want to exercise your legal data rights, please contact our designated Data Protection Officer (DPO):

ToolsEngg.com
Attn: Data Privacy Framework Team
Location: Chennai, Tamil Nadu, India
Official Inquiry Email: infotoolsengg@gmail.com