Supreme IT and Management Services ("we", "us", "S.I.M.S.") provides CCTV installation, maintenance, and grievance-redressal services. This policy explains what personal data we collect, why, how we protect it, and the rights you have over it under Indian law. It applies to our customers and to everyone who works with us, including staff using our shared admin login. For the rules governing your use of this online portal itself, see our Terms of Use.

What data we collect

Depending on your relationship with us, we may collect:

• Contact & account details — your name, phone number, email address, and login password (stored in one-way encrypted/hashed form, never as plain text)
• Service details — your installation address, complaint/ticket descriptions, photos attached to a ticket, and your communication with our support team
• Billing details — invoice records, payment status, and, if you pay via a UPI app (Google Pay, PhonePe, Paytm, etc.) through this portal, the payment screenshot you upload as proof of payment
• Employee records (if you work with us) — your name and designation are visible to staff using the shared admin login. Sensitive HR documents — PAN, Aadhar, the electricity bill used as address proof, phone number, and bank account details — are stored separately and are visible only to the Owner, never to other staff

Why we collect it

We use this data only to: install, maintain, and service your CCTV system; respond to and resolve complaints raised through this portal; generate and track bills and AMC (Annual Maintenance Contract) renewals; verify and process payments; and, for employees, to run payroll/HR and meet our own statutory obligations as an employer. We do not sell your personal data to anyone, and we do not use it for purposes unrelated to these services without asking you first.

How long we keep it

We keep ticket, billing, and account records for as long as you remain our customer, and for a reasonable period afterwards to meet our tax, accounting, and legal record-keeping obligations under Indian law. Employee HR documents are kept for the duration of employment plus the period required by applicable labour and tax law. Once data is no longer needed for any of these reasons, we delete or anonymise it.

Who we share it with

We share data only with the service providers that help us run this portal, and only as much as each needs to do its job:

• SMS provider (MSG91) — to send OTPs and status-update messages to your phone
• Email provider — to send you notifications and, if requested, copies of your bills
• Cloud storage provider (Cloudflare) — to securely store ticket photos, bill PDFs, and documents
• UPI apps (Google Pay, PhonePe, Paytm, etc.) — only if you use the "Pay" button, which hands off just the payment amount and our payee details to whichever app you pick; we don't share anything else with them

We do not sell, rent, or trade your personal data to advertisers or any other third party. Some of these providers may process or store data on servers located outside India; where that happens, we require them to keep your data secured to a standard consistent with Indian law.

How we protect your data

All connections to this portal are encrypted (HTTPS), passwords are stored using one-way cryptographic hashing, and sensitive employee HR documents are kept in a private location accessible only through Owner-gated screens — never via a public link.

Your rights

Under the Digital Personal Data Protection Act, 2023 and its Rules, you have the right to:

• Know what personal data we hold about you and why
• Get a copy of your personal data (Right to Access)
• Ask us to correct or update inaccurate or incomplete data
• Ask us to erase your data, subject to our legitimate business/legal record-keeping needs
• Nominate another person to exercise these rights on your behalf
• Withdraw consent you've previously given, at any time

To exercise any of these rights, contact our Grievance Officer below — we aim to respond within 90 days, as required by law. A self-service request option inside this portal is coming soon; for now, please reach out directly.

Cookies & session data

This portal uses only the strictly necessary session cookie needed to keep you securely logged in. We do not use tracking or advertising cookies.

Children

Our services are intended for use by adults responsible for a property or business. If you believe a minor's data has been shared with us without appropriate consent, please contact us and we will address it.

Changes to this policy

We may update this policy from time to time. If we make a material change, you'll be asked to review and accept it again the next time you log in — you'll always know which version you last agreed to.

Grievance Officer

supremeitandmanagement@gmail.com