Engicell Technology ("Engicell", "we", "us") builds telecommunications and IT infrastructure for enterprises and operates a range of products and applications under engicell.com. This policy explains what personal information we handle, why, and the choices you have.
Scope
This policy applies to the engicell.com website, our customer products, and any services delivered under a master services agreement. Where we process personal information on behalf of a customer (as a data processor under GDPR or equivalent), the customer's own privacy notice and our data processing agreement govern that processing.
What we collect
Information you give us
- Contact details — name, work email, phone, company, and message content when you fill out our contact form or email us.
- Account information — credentials and profile data for customers of our products and applications.
- Engagement records — statements of work, project artefacts, correspondence and meeting notes for active engagements.
Information we collect automatically
- Usage data — pages viewed, referrer, approximate location derived from IP, browser and device type.
- Local storage — UI preferences (theme, density, palette) stored in your browser. See our Cookie Policy.
- Service telemetry — for our products and applications: operational metadata, delivery receipts, device or asset coordinates and timestamps as required to operate the service.
Information from third parties
We may receive business contact details from referral partners, public registries (e.g. LinkedIn), and lead lists we license from reputable vendors. We honour opt-out requests on first contact.
How we use it
- Respond to enquiries and quote proposals.
- Deliver, operate, monitor and support our products and engagements.
- Bill, collect payment and maintain financial records.
- Detect, investigate and prevent abuse, fraud, and security incidents.
- Comply with legal, tax, regulatory and audit obligations.
- Improve our website and product (aggregated analytics only).
Legal basis
Where GDPR, UK GDPR, India's DPDP Act 2023, or similar laws apply, we rely on:
- Contract — to deliver the service you or your employer asked for.
- Legitimate interests — to run and secure our business, respond to leads, and improve our product. We balance these against your rights.
- Legal obligation — to comply with tax, accounting, sanctions and lawful requests.
- Consent — only where we explicitly ask (e.g. optional marketing emails). You may withdraw consent at any time.
Sharing & processors
We do not sell personal information. We share it only with:
- Sub-processors we contract to operate our infrastructure — cloud hosting, email, CRM, billing, helpdesk, identity, observability and analytics providers. Each is bound by a data processing agreement and confidentiality.
- Carriers and aggregators — for SMS routing and GPS connectivity, we share the minimum metadata needed to deliver messages and locate assets.
- Professional advisers — legal, audit and insurance, under confidentiality.
- Authorities — where we are legally required to disclose, and only to the extent required.
- Successors — in connection with a merger, acquisition or asset sale, subject to equivalent protections.
An up-to-date list of sub-processors is available on request to info@engicell.com.
International transfers
Engicell operates globally and may transfer personal information to countries other than where you reside. Where we transfer data out of the EEA, UK, or India, we use safeguards such as Standard Contractual Clauses, the UK International Data Transfer Addendum, or equivalent mechanisms recognised under DPDP. Details are available on request.
Retention
We keep personal information only as long as needed for the purpose it was collected, then delete or anonymise it. Typical periods:
- Enquiry and lead data — up to 24 months from last contact.
- Customer account and billing records — for the duration of the contract plus the period required by tax and accounting law (typically 7 years).
- Service telemetry — as defined in the product's own data sheet; in most cases, raw message and GPS records are retained for 90 days and aggregates for longer.
- Security logs — up to 12 months unless an investigation extends retention.
Security
We operate an information security program aligned with ISO/IEC 27001. Controls include role-based access, encryption in transit (TLS 1.2+) and at rest, network segmentation, MFA, secrets management, vulnerability scanning, and ongoing monitoring. No system is perfectly secure; if we suffer a breach affecting your information, we will notify you and the relevant authority within the timeframes required by applicable law.
Your rights
Depending on your jurisdiction, you may have the right to:
- Access the personal information we hold about you.
- Correct inaccurate or incomplete information.
- Erase your information, subject to legal retention obligations.
- Restrict or object to certain processing.
- Receive your data in a portable format.
- Withdraw consent at any time, without affecting prior lawful processing.
- Lodge a complaint with your data protection authority.
To exercise these rights, email info@engicell.com. We respond within 30 days, or sooner where the law requires. We may ask for verification before acting on a request. To delete your account and data for one of our mobile apps, see Account Deletion.
Children
Our services are intended for businesses. We do not knowingly collect personal information from children under 16. If you believe a child has provided data to us, contact info@engicell.com and we will delete it.
Changes
We will update this policy when our practices change. The "Last updated" date at the top reflects the most recent revision. Material changes will be highlighted on this page and, where appropriate, communicated directly to active customers.
Contact
Questions, requests, or complaints: info@engicell.com.