Privacy Policy

Last updated: 6 September 2026

Micro-Tek Electronics (“Micro-Tek”, “we”, “us” or “our”) operates the website micro-tek.co.in (the “Website”), the online shop for camera spare parts and accessories on it, and authorised camera and imaging-equipment repair centres in Patiala, Ludhiana and Delhi. This Privacy Policy explains what personal data we collect from you, why we collect it, how we use, share and protect it, and the choices and rights you have.

This Policy is published in accordance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the rules made under it, the Information Technology Act, 2000 (including Section 43A) and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“SPDI Rules”), and the Consumer Protection (E-Commerce) Rules, 2020. Under the DPDP Act, Micro-Tek Electronics is the “Data Fiduciary” for the personal data described here and you are the “Data Principal”.

By using the Website, placing an order, booking a repair or otherwise giving us your personal data, you confirm that you have read this Policy. Where we rely on your consent, you may withdraw it at any time as described in Section 10.

1. Who we are and how to contact us

Legal name: Micro-Tek Electronics
Principal place of business: Behind Scooter Market, Nehru Park, Near Old Bus Stand, Patiala 147001, Punjab, India
Other service centres: SCO 17-20, Surya Shopping Arcade, National Road, Ludhiana 141001; 115, Somdutt Chamber-II, Bhikaji Cama Place, New Delhi 110066
E-mail: info@micro-tek.co.in
Phone: +91 99155 92449 (Monday to Saturday, 10:00 to 19:00 IST)

For any question, request or complaint about your personal data, please contact our Grievance Officer using the details in Section 15.

2. Personal data we collect

Depending on how you interact with us, we may collect the following categories of personal data:

• Identity and contact details – name, postal and delivery address, e-mail address, telephone and WhatsApp number.
• Account details – username, password (stored in hashed form only), order history and saved addresses when you create an account on the Website.
• Order and billing details – products purchased, order number, amounts paid, invoice details and, where you provide it, your GST registration number (GSTIN) for tax invoicing.
• Payment information – payments are processed by Razorpay. We receive confirmation of payment, the payment method type and a transaction reference. We do not receive or store your full card number, UPI PIN, net-banking credentials or CVV.
• Repair and service details – the make, model and serial number of the equipment you hand in, the fault you describe, photographs or videos you share of the equipment, service history, warranty information and job-sheet details.
• Communications – messages you send us through the contact form, e-mail, telephone or WhatsApp, and our replies.
• Marketing preferences – your e-mail address if you subscribe to our newsletter, and records of your consent.
• Technical and usage data – IP address, browser type and version, device type, operating system, pages visited, referring website, date and time of visits, and cookie identifiers (see Section 6).

We do not intentionally collect sensitive personal data such as passwords of other services, financial account details other than payment confirmations, health data, biometric data or data about your religion, caste or political opinions. Please do not include such information in messages or on equipment you hand in for repair.

3. How we collect it

• Directly from you – when you register, place an order, book or hand in a repair, fill in the contact form, subscribe to the newsletter, write to us, call us or message us on WhatsApp.
• Automatically – through server logs, cookies and similar technologies when you browse the Website.
• From third parties – payment confirmations from Razorpay, delivery status from courier partners, and security information (for example, IP reputation) from our website security service.

4. Why we use your data and the legal basis

We use personal data only for the purposes listed below. Under the DPDP Act we process your data either with your consent or for certain legitimate uses permitted by the Act, such as where you voluntarily provide data for a specified purpose, or where processing is required to comply with Indian law.

We do not sell your personal data, and we do not use it for automated decisions that have legal or similarly significant effects on you.

5. Order updates by WhatsApp, e-mail and SMS

When you place an order or hand in equipment for repair, we send status updates (for example “order received”, “ready for collection”) to the e-mail address and telephone number you give us. If the number you give us is registered on WhatsApp, we may send these updates as WhatsApp messages. These are service messages about your own order or repair, not marketing. Messages sent through WhatsApp are also subject to the privacy policy of WhatsApp LLC (a Meta company). If you prefer not to receive updates on WhatsApp, tell us at the time of ordering or contact us at any time and we will use e-mail or SMS instead.

6. Cookies and similar technologies

Cookies are small text files placed on your device. We use the following types:

The Website also loads fonts and other resources from Google servers, which means your IP address is sent to Google when a page loads. You can block or delete cookies through your browser settings; if you block strictly necessary cookies, parts of the shop (such as the cart and checkout) will not work. You can opt out of Google’s personalised advertising at adssettings.google.com.

7. Who we share your data with

We share personal data only with the following categories of recipients, and only to the extent needed for the purposes in Section 4:

• Payment processor – Razorpay Software Private Limited, to process your payment securely.
• Delivery partners – courier and logistics companies that deliver your order or return your repaired equipment; they receive your name, address and telephone number.
• Equipment manufacturers and authorised distributors – where a warranty repair or a parts order requires your equipment’s serial number and, where necessary, your name and purchase details (for example Panasonic, Nikon, Fujifilm, DJI and their Indian distributors).
• Communication services – Microsoft (business e-mail), WhatsApp / Meta (WhatsApp messages), and our SMS provider.
• Marketing services – Mailchimp (The Rocket Science Group LLC) for our e-mail newsletter, and Google LLC for Google Ads and Google Merchant Center product listings.
• Website and IT services – our hosting, security (Wordfence / Defiant Inc.), caching and technical support providers who maintain the Website.
• Professional advisers – accountants, auditors and lawyers, under a duty of confidentiality.
• Authorities – government departments, courts, regulators and law-enforcement agencies where Indian law requires or permits it.
• Business transfers – a buyer or successor if our business is sold, merged or restructured, in which case this Policy will continue to apply to your data.

Our service providers may process your data only on our instructions and must protect it in line with applicable law.

8. Storage location and transfers outside India

Our Website and its database are hosted in India. Some of the service providers listed above (for example Google, Microsoft, Mailchimp and WhatsApp) may store or process data on servers outside India. Where that happens, we transfer data only to countries that are not restricted by the Central Government under the DPDP Act and take reasonable steps, including contractual protections, to keep your data safe.

9. How long we keep your data

• Orders, invoices and payment records – for the period required by the Central Goods and Services Tax Act, 2017, the Income-tax Act, 1961 and other accounting laws (generally up to eight years after the end of the relevant financial year).
• Repair and service records – for the duration of the service and any warranty period, and thereafter for up to three years to handle follow-up queries and claims.
• Account data – as long as your account exists. You may ask us to delete your account at any time (Section 10); order records that we must keep by law are retained separately.
• Contact-form and e-mail enquiries – up to two years after our last contact with you.
• Newsletter data – until you unsubscribe or withdraw consent.
• Server and security logs – generally up to one year, unless needed longer to investigate an incident.

When the retention period ends we delete or anonymise the data, unless the law requires us to keep it longer or it is needed for a pending dispute.

10. Your rights and choices

Subject to the DPDP Act and other applicable law, you have the right to:

• Access – obtain a summary of the personal data we hold about you, how we use it and whom we have shared it with.
• Correction and erasure – have inaccurate or incomplete data corrected, completed or updated, and have your data erased when it is no longer needed for the purpose it was collected for and we are not required by law to keep it.
• Withdraw consent – where processing is based on consent (for example the newsletter or advertising cookies), withdraw it at any time. Withdrawal does not affect processing carried out before the withdrawal.
• Nominate – nominate another person to exercise your rights in the event of your death or incapacity.
• Grievance redressal – complain to our Grievance Officer (Section 15). If you are not satisfied with our response, you may approach the Data Protection Board of India in the manner provided under the DPDP Act.
• Opt out of marketing – use the unsubscribe link in any newsletter or write to us; we will stop marketing e-mails promptly.

To exercise these rights, write to info@micro-tek.co.in or to the Grievance Officer. We may ask you to verify your identity before acting on a request so that we do not give your data to someone else. We will respond within the time limits prescribed by law and, in any case, within 30 days of receiving a complete request. You may also review and update most of your account details yourself by logging in to My Account.

11. How we protect your data

We follow reasonable security practices and procedures as required by Section 43A of the Information Technology Act, 2000 and the SPDI Rules, and the security safeguards required by the DPDP Act. These include encryption of data in transit (HTTPS/TLS), a web application firewall and malware scanning, restricted administrative access with strong authentication, regular software updates, regular backups, and processing of payments by a PCI-DSS-compliant payment processor so that card details never touch our servers. No method of transmission or storage is completely secure; if we become aware of a personal data breach that affects you, we will notify you and the Data Protection Board of India as required by law.

12. Children

Our products and services are intended for adults. We do not knowingly collect personal data from anyone under 18 years of age without the verifiable consent of a parent or lawful guardian, and we do not track or target advertising to children. If you believe a child has provided us with personal data, please contact the Grievance Officer and we will delete it.

13. Third-party websites

The Website contains links to and embedded content from third-party services such as Google Maps, WhatsApp and manufacturers’ websites. We are not responsible for the privacy practices of those services; please read their privacy policies before providing them with your data.

14. Changes to this Policy

We may update this Policy from time to time to reflect changes in our practices or in the law. The “Last updated” date at the top shows when it was last revised. Material changes will be announced on the Website, and where required we will ask for your consent again. Please review this page periodically.

15. Grievance Officer

In accordance with the Information Technology Act, 2000, the SPDI Rules and the DPDP Act, the name and contact details of our Grievance Officer are:

Name: Davy Garg
Designation: Grievance Officer, Micro-Tek Electronics
Address: Behind Scooter Market, Nehru Park, Near Old Bus Stand, Patiala 147001, Punjab, India
E-mail: info@micro-tek.co.in
Phone: +91 99155 92449 (Monday to Saturday, 10:00 to 19:00 IST)

The Grievance Officer will acknowledge your complaint and endeavour to resolve it within the period prescribed under applicable law (currently one month under the SPDI Rules).

16. Governing law

This Policy is governed by the laws of India. Subject to the jurisdiction of the Data Protection Board of India and any other forum provided by law, the courts at Patiala, Punjab shall have jurisdiction over any dispute arising out of or relating to this Policy.