Privacy Policy

Privacy Policy for Suntek Energy Systems Private Limited

Suntek Energy Systems Private Limited, operating as “TRUZON SOLAR” (referred to as “Company,” “We,” “Us,” or “Our”), a company incorporated under the Companies Act, 2013, is committed to protecting your privacy and processing personal data in compliance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”), Information Technology Act, 2000, Digital Personal Data Protection Rules, 2025, Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 (“Intermediary Rules”), and other applicable Indian laws.

The Definitions and Interpretation

In this Privacy Policy, unless the context otherwise requires, the following terms shall have the meanings assigned to them below:

Definitions:

“Data Fiduciary” refers to the Company, which determines the purpose and means of processing your Personal Data.
“Data Principal” refers to the individual to whom the Personal Data relates-in this case, you, the User.
“Personal Data” refers to any data about an individual who is identifiable by or in relation to such data.
“Personal Data Breach” means any unauthorized processing or accidental disclosure, acquisition, alteration, or destruction of Personal Data that compromises the confidentiality, integrity, or availability of your data.
“Processing” refers to an automated operation or set of operations performed on Personal Data, such as collection, recording, organization, structuring, storage, adaptation, retrieval, use, disclosure, or erasure.
“Sensitive Personal Data” refers to categories of data that require a higher degree of protection, as defined under applicable Indian law, including financial information and government-issued identity documents (e.g., Aadhaar, PAN).

Interpretations:

Words importing the singular shall include the plural and vice versa.
References to any statute, act, or rule shall include any amendments, re-enactments, or subsequent regulations made thereto, including the DPDP Act and the DPDP Rules, 2025.
The headings and sub-headings in this Policy are for convenience only and shall not affect the construction or interpretation of its provisions.

Any term not defined herein but defined in the DPDP Act or the Information Technology Act, 2000, shall carry the meaning ascribed to it in those respective statutes.

Commitment to Privacy and Scope:

We safeguard the privacy and security of information provided by individuals (“User,” “You”) who access or use the website at [www.sunteksolar.in] (“Website”) as a Data Fiduciary under the DPDP Act. This Policy governs our Processing of Personal Data collected via www.sunteksolar.in (the “Website”) from Indian residents. By using the Website, You consent to this Policy after reviewing it. We Process Personal Data only for lawful purposes with your consent (where required), adhering to data minimization, purpose limitation, accuracy, storage limitation, and security principles under the DPDP Act and Rules.

PERSONAL DATA WE COLLECT

We collect only necessary personal data to provide services, improve experiences, and comply with the law:

Personal Data: Name, email address, phone number, and postal address.
Technical Data: P address, browser type, operating system, device identifiers.
Usage Data: Pages visited, visit duration, interactions.
Communication Data: Information from contact forms, support requests, or emails.
Account Data: Username and password selected by the User in connection with the establishment of an account on the Website.
Publicly available information.
Device and Geolocation data: Device details, location (via GPS, IP, or cell towers, as detailed in “Cookies and Tools”).

We do not collect Sensitive Personal Data (e.g., financial details) without explicit consent, such as for warranty claims or loan services (e.g., Aadhaar/PAN for identity verification and eligibility). Some data is mandatory for registration/services; others are optional. We disclose visibility and use at the time of collection. Additional data may be collected with consent during use.

Certain categories of Personal Information are mandatory for the User to provide, while others are optional. Portions of such information shall remain confidential, whereas certain portions may be made visible to other Users. The Company shall, at all times, inform the User of the nature of such information and its intended use.

The Company may, from time to time, collect additional Personal Information during the course of the User’s continued access or use of the Website, to the extent such information is voluntarily provided by the User.

The Company shall ensure that such Personal Data is collected only to the extent necessary for the specified purposes (data minimization) and shall not be retained for longer than required. The Personal Data shall be processed in a fair, reasonable, and secure manner in compliance with applicable data protection laws.

We protect your data using industry-standard measures compliant with Indian laws, such as:

Secure Socket Layer (SSL) encryption for data transmission;
Role-based access controls and firewalls;
Regular security audits, software updates and monitoring protocols.

Despite these efforts, no system is 100% secure; we report data breaches to the Indian Computer Emergency Response Team (CERT-In) as required.

HOW DOES SUNTEK COLLECT PERSONAL INFORMATION?

The Company collects Personal Data through the following channels, in accordance with the DPDP Act, 2023, and the Information Technology Act, 2000:

Direct Collection: We collect mandatory registration data to verify User identity, facilitate account access, and prevent fraudulent or illegal activity. Additional information required for specific services is collected only upon the User’s express, informed consent.
Automated Collection: We utilize web server logs and tracking technologies (e.g., cookies) to collect technical data—including IP addresses, domain server information, and device identifiers. This data is processed in a de-identified format, associated only with unique device identifiers, and is not linked to specific Personal Data unless otherwise authorized.
Third-Party Integration: With the User’s authorization, we may access information from third-party platforms (e.g., social media) in accordance with the User’s privacy settings on those platforms.
SMS Access: Subject to explicit, granular consent, we may access business-related SMS messages from alphanumeric senders to provide enhanced services. We do not access personal or private correspondence.
Location and Device Analytics: To optimize service delivery, we may collect and analyze geolocation data (via GPS, IP, or cell tower triangulation) and device-level usage metrics (e.g., application interaction patterns) only where such processing is necessary and consented to by the User.
Regulatory Compliance: The Company ensures that all collection methods adhere to the principles of data minimization and purpose limitation. We maintain transparency regarding the nature of data collected and provide the User with the ability to manage or withdraw consent for data collection, except where such collection is mandated by statutory or regulatory obligations.

HOW DOES SUNTEK USE PERSONAL INFORMATION?

The Company processes Personal Data for the following lawful purposes, in accordance with the DPDP Act, 2023:

Service Provision and Improvement: To facilitate the delivery of our products and services, fulfil user requests, and develop new offerings through internal research, data analytics, and performance audits.
Customer Support and Communication: To manage inquiries, disputes, and complaints, and to provide administrative updates or promotional content where consistent with User preferences.
Security and Integrity: To safeguard the Website and our Users, conduct technical debugging, rectify functional errors, and ensure compliance with security protocols.
Personalization: To enhance User experience by recognizing repeat visitors, retaining personal preferences, and delivering interest-based content or advertisements.
Legal and Regulatory Compliance: To defend against legal claims, respond to investigations, and fulfil statutory obligations imposed by law enforcement or regulatory authorities.
Business Operations: To evaluate usage trends, monitor marketing effectiveness, and maintain internal business records.
Aggregated and De-identified Data: The Company may aggregate or de-identify Personal Data, rendering it non-personally identifiable. Such information may be used, licensed, or disclosed for any lawful business purpose, including, but not limited to, product development and industry analysis.
User Authorization: By providing information via the Website, the User grants the Company a non-exclusive, perpetual, and royalty-free license to use, reproduce, modify, and distribute such information to the extent necessary to provide the requested services. The User represents and warrants that they possess the necessary authority to grant these rights to the Company.

Links to Third-Party Websites

The Website may contain links to external websites that provide information. The Company does not exercise control over such external websites and shall not be responsible or liable for the protection or privacy of any information provided by the User while accessing or using such websites. Such external websites are not governed by this Privacy Policy. Users are advised to review the privacy statements for such websites to determine how their information is collected, used, and protected.

DOES SUNTEK SHARE PERSONAL INFORMATION?

a) The Company may share User information within the group companies and/or associates of the Company.

b) The Company shall not use User information for any purpose other than in connection with the Website. The Company shall not rent, sell, or otherwise share User information, nor disclose any Personal Information of the User to third parties, save and except where such disclosure is made to vendors, contractors, business and service partners, or other third parties (collectively, “Service Providers”). Service Providers may include, inter alia, analysis firms, advertisers, payment processing companies, customer service and support providers, email, IT services and SMS vendors, web hosting and development companies, and fulfilment companies.

c) Certain Service Providers may collect Personal Information on behalf of the Company. Such third parties may be granted access to Personal Information strictly to the extent necessary to perform their functions. The Company’s practice is to require all Service Providers to maintain the confidentiality of User Personal Information and to use such information solely for the purpose of performing functions for the Company.

d) In the event that the Company sells all or part of any product line or division, User information may be transferred to the purchaser. The Company reserves the right to disclose User information in response to authorised information requests from governmental authorities, valid judicial requests, matters concerning national security, for purposes of providing security and investigating potential fraud, or as otherwise required under applicable law.

e) The Company may disclose User Personal Information as required by law to any competent law enforcement body, regulatory or governmental agency, court, or other third party, where the Company believes such disclosure is necessary or appropriate to comply with regulatory requirements, judicial proceedings, court orders, governmental requests, or legal processes served upon the Company, or to protect the safety, rights, or property of the Company, its customers, the public, or others, and to exercise, establish, or defend the Company’s legal rights.

f) The Company shall not use User information for any purpose other than in connection with the Website, nor rent, sell, or share User information, nor disclose any personally identifiable information of the User to third parties, except in the following circumstances:

where such disclosure is made pursuant to obtaining the User’s consent;
where such disclosure is made in connection with services rendered through the Website;

where such disclosure is necessary to investigate, prevent, or take action regarding unlawful or illegal activities, suspected fraud, potential threats to the safety or security of any person, violations of the Company’s Terms of Use, or as a defence against legal claims
where such disclosure is required under special circumstances, including compliance with court orders, requests, or notices from legal authorities or law enforcement agencies compelling such disclosure; and
where such disclosure forms part of the information shared with advertisers on an aggregate basis.

COOKIES AND OTHER TOOLS

The Company collects information concerning the User through the use of cookies, tracking pixels, web beacons, and other technologies (collectively, “Tools”). Such information is utilised to enhance the User’s experience, customise services, and manage advertising. The Company may associate Personal Data collected with information obtained through the Tools.
The acceptance of cookies may be controlled through the User’s web browser settings. If cookies are rejected, certain features of the Website may be impaired. Users are advised to refer to the Help section of their respective browsers for instructions.
Cookie Categories:

We use the following categories of cookies and similar technologies on our website:

Strictly Necessary Cookies: These cookies are essential for the website to function properly. They enable core features such as page navigation, access to secure areas, and system security. These do not require user consent as they are necessary for the services you requested.
Functional Cookies: These cookies allow the website to remember choices you make (e.g., your language, region, or display settings) to provide a more personalized experience.
Performance/Analytics Cookies: These cookies collect information about how visitors use our website, such as which pages they visit most often and any error messages they encounter. This data is used to improve the performance and usability of our platform.
Targeting/Advertising Cookies: These cookies are used to deliver content and advertisements that are more relevant to you and your interests. They may also be used to limit how often you see an advertisement and to measure the effectiveness of advertising campaigns. These are often placed by third-party advertising networks with our permission.

User Choices Regarding Collection and Use of Information

Certain services offered by the Company may provide the User with opt-in or opt-out options in respect of offers, promotions, and additional services.
Marketing and Communications: i) Users may unsubscribe from notifications and email communications by following the instructions provided therein. ii) Notwithstanding the User’s opt-out from marketing communications, Suntek Energy reserves the right to transmit non-marketing administrative communications relating to its products or services.
Privacy Choices: Users may exercise rights and choices concerning the processing of their Personal Data, subject to and in accordance with applicable law.

As a Data Principal under the DPDP Act, you have rights, including:

Access, correction, or erasure of your data.
Withdrawal of consent (stopping further processing):

Right to Withdraw: You have the right to withdraw your consent to the processing of your Personal Data at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
Mechanism: To withdraw your consent, you may:
- Digital Interface: Click the “Withdraw Consent” or “Unsubscribe” link provided in your account settings or in any marketing/administrative communication.
- Written Request: Send a formal withdrawal request via email to our Grievance Officer at [Insert Email Address].
Processing the Withdrawal: Upon receiving your request, we shall verify your identity and process the withdrawal within a reasonable timeframe (not exceeding the timelines prescribed under the DPDP Rules, 2025).
Consequences of Withdrawal: Please note that if you withdraw your consent to the processing of mandatory data, we may be unable to provide certain services, features, or functionality of the Website that rely on such data.
Post-Withdrawal Processing: Upon withdrawal, we will cease processing your Personal Data for the purposes for which consent was withdrawn, except where such processing is required or permitted by law for the performance of a contract, compliance with a legal obligation, or the protection of the legal rights of the Company.
Opt-out of marketing at any time via [unsubscribe link] or email.

Data Retention Policy

The Company shall retain Personal Data only for the duration necessary to fulfil the specific purposes for which it was collected, as outlined in this Privacy Policy, or to satisfy applicable legal, regulatory, accounting, or reporting requirements.
To determine the appropriate retention period, we consider the volume, nature, and sensitivity of the Personal Data; the potential risk of harm from unauthorized use or disclosure; the purposes for which we process the data; and whether we can achieve those purposes through other means. In accordance with the principles of data minimization and storage limitation mandated by the DPDP Act and DPDP Rules, 2025, we shall implement measures to securely delete, anonymize, or de-identify Personal Data once the retention period has expired or the purpose of processing has been achieved.
Notwithstanding the above, the Company may retain certain information for an extended period if required for the defense of legal claims, the investigation of potential fraud, compliance with mandatory statutory obligations, or the maintenance of business records as prescribed by law. All retained data shall continue to be protected by the same industry-standard security safeguards described in this Policy.

Security of Information

a) The Company shall take reasonable measures to protect information during transmission and while in its possession. Notwithstanding such measures, the confidentiality of information transmitted over the internet cannot be guaranteed.

b) The Company employs industry-standard practices to safeguard User information; however, absolute security cannot be assured. Users are advised to exercise caution when transmitting information.

Website Not Intended for Minors

Our Website is intended for legally competent adults. We do not knowingly collect personal data from children (under 18). If we inadvertently collect such data, we shall process it only upon obtaining Verifiable Parental Consent as required by the DPDP Act, 2023.

Age Verification: We employ age-gating mechanisms to identify users under 18.
Verifiable Consent: If a child is identified, we will seek verifiable consent from a parent or legal guardian using authorised digital authentication methods (e.g., e-KYC or identity documentation).
Prohibited Activities: We strictly refrain from behavioural monitoring, targeted advertising, or profiling that may harm a child.
Parental Rights: Parents/guardians may review, correct, or request the erasure of their child’s data or withdraw consent at any time by contacting our Grievance Officer.

We maintain auditable records of all such consents to ensure full compliance with the DPDP Rules, 2025.

Updates to Privacy Policy

The Company reserves the right, at its sole discretion, to amend, update, or modify this Privacy Policy at any time without prior notice. Any such amendment, update, or modification shall become effective immediately upon posting on the Website. The Company shall have no obligation to separately notify Users of such changes.

Grievance Redressal

a) If you have any questions, concerns, complaints, or requests relating to the collection, use, processing, disclosure, correction, erasure, or withdrawal of consent in respect of your Personal Data, you may contact our Grievance Officer using the details provided below. We will acknowledge your grievance and endeavour to resolve it within a reasonable period and in accordance with applicable law, including the Digital Personal Data Protection Act, 2023, and the rules framed thereunder.

For inquiries regarding information, Users may contact the Company via the “Contact Us” link on the Website or by emailing [Contact Email].

b) Grievance Officer:
i) J. Sunil Varma

ii) Astral Heights, 5A, Road No. 1, Mothi Nagar, Dwarakapuri, Banjara Hills, Hyderabad, Telangana 500034

iii) TEL: +91-8885063685

iv) EMAIL: sunil.j@truzonsolar.com

+91-9030032222

info@truzonsolar.com

Download Brochure

Support & Email

Customer Support

Our Location

Stay Connected