Legal

Privacy Policy

Last updated 26 August 2026

This policy explains what personal information Aaro Tec collects when you enquire with us — on this website or through a Facebook or Instagram lead form — how we use it, and how to have it deleted.

01Who we are

Aaro Tec (“Aaro Tec”, “we”, “us” or “our”) designs and supplies smart home automation products — touch panels, smart locks, sensors and the connected ecosystem around them. We operate from Hyderabad, Telangana, India, and serve customers across India.

This policy explains what personal information we collect through www.aarotec.in and through our advertising on Meta platforms, why we collect it, who we share it with, and the choices you have. It applies to everyone who visits our website or submits an enquiry to us.

We are the data fiduciary (data controller) for the information described here. If you disagree with this policy, please do not submit your details to us.

02Information we collect

Information you give us directly

When you fill in an enquiry or “book a demo” form on our website, or submit a lead form in one of our Meta ads, we collect:

  • Full name — so we know who we are speaking to.
  • Email address — to send you product information and quotations.
  • Phone number — our primary way of responding to enquiries.
  • City — so we can route you to the right installation team and tell you whether we service your area.
  • Anything else you choose to tell us in a message, on a call or over WhatsApp.

Information collected automatically

When a form is submitted, our server also records a small amount of technical context alongside it:

  • The page or ad the enquiry came from, so we know which campaign to credit.
  • Your browser and device type (the user-agent string), used to detect automated spam submissions.
  • The date and time of the submission.

We also use a privacy-friendly, aggregate analytics service that counts page views and performance metrics. It does not use cookies and does not build a profile of you as an individual.

What we do not collect

We do not ask for and do not want your financial account details, passwords, government identity numbers, or any sensitive personal data such as health, biometric, caste, religious or political information. Please do not send these to us. We do not collect video, audio or sensor data from installed devices through this website.

03How we use your information

We use the information above only for the following purposes:

  • To contact you about our products. This is the main reason we collect your details — to call, email or message you about the smart home products you enquired about, answer your questions, and arrange a demo or site visit.
  • To prepare quotations and proposals suited to your home, city and requirements.
  • To provide service and support — installation scheduling, warranty queries and after-sales help.
  • To send occasional updates about new products or offers, where you have agreed to receive them. You can opt out at any time and we will stop.
  • To prevent spam and abuse and to keep our website secure and working correctly.
  • To measure our advertising in aggregate — how many enquiries a campaign produced — so we spend our budget sensibly.
We do not sell your data. We do not sell, rent or trade your personal information to anyone, and we do not share your contact details with other companies for their own marketing.

Our legal basis

We process your information on the basis of the consent you give when you voluntarily submit a form, and to take steps at your request before entering into a contract with you. Where we keep records for tax, warranty or accounting purposes, we do so to comply with Indian law. We process personal data in accordance with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and the rules made under them.

04Meta (Facebook and Instagram) Lead Ads

We advertise on Facebook and Instagram, which are operated by Meta Platforms, Inc. Some of those advertisements use Lead Ads — an instant form that opens inside the Facebook or Instagram app rather than on our website.

How the data reaches us

  • Meta may pre-fill the form with the name, email address and phone number already on your Facebook or Instagram profile. You can edit any pre-filled field before submitting, and you can close the form without submitting it.
  • Nothing is shared with us until you tap submit. Submitting the form is your consent for Meta to pass those details to Aaro Tec.
  • We then receive your name, email, phone number and city, and treat them exactly like an enquiry made on our own website — governed by this policy.
  • We use those details to contact you about the smart home products advertised. We do not use them for any unrelated purpose.

Meta’s own role

While you are on Facebook or Instagram, Meta processes your data as an independent controller under its own privacy policy, which we do not control. Meta also tells us, in aggregate, how our ads performed. To review or change what Meta holds about you, or to manage how your data is used for advertising, see Meta’s Privacy Policy and your Meta Accounts Center.

We do not currently upload customer lists to Meta to build custom or lookalike audiences. If that ever changes, we will update this policy before we do so.

05Cookies and similar technologies

Our public website is deliberately light on tracking. We do not use advertising or profiling cookies on www.aarotec.in, and there is no cookie banner because there is nothing non-essential to consent to.

  • Strictly necessary cookies. A single sign-in cookie is set only for our own staff when they log in to the internal enquiry dashboard. Visitors never receive it.
  • Analytics. We measure page views and site speed using a cookieless, aggregate analytics service. It does not identify you or follow you across other websites.
  • Fonts and images. Typefaces are served from our own domain. Some product photography is delivered through third-party content delivery networks, which necessarily see the IP address your browser connects from in order to send the image.

If you reach us through a Facebook or Instagram ad, Meta may have set cookies on your device in its own apps or website before you arrived. Those are governed by Meta’s policies, and you can control them in your Meta account settings or your browser settings. Most browsers also let you block or delete cookies entirely; our website will continue to work if you do.

06Third parties we share data with

We keep the list of people who can see your data as short as possible. We share it only with service providers who help us run the business, and only so far as they need it:

  • Meta Platforms, Inc. — where you submitted a Lead Ad form, Meta is the source of the data and retains its own copy under its own policy.
  • Google LLC — where we use Google services such as advertising, business messaging or a Google Workspace account, your enquiry may be stored or processed there. Google acts under its own privacy policy.
  • Our hosting and analytics provider — which runs the servers this website is delivered from and stores enquiry records on our behalf.
  • Installation and service partners — where a site visit or installation is arranged, we pass on the minimum needed (typically your name, phone number and address) so the technician can reach you.
  • Professional advisers and authorities — accountants, auditors or lawyers where required, and government or law enforcement bodies where we are legally obliged to disclose.

Some of these providers operate servers outside India. Where your data is transferred abroad, we rely on the provider’s contractual commitments to protect it to the standard described in this policy.

07How long we keep your data

We keep enquiry records for as long as we have a genuine reason to:

  • Enquiries that do not become orders are kept for up to 24 months, then deleted. Smart home purchases are often planned well in advance, and customers frequently return to us months later.
  • Customer records are kept for the duration of the product warranty (up to 7 years on our panels) so we can honour warranty and service claims.
  • Invoices and tax records are kept for the period Indian tax law requires.

You can ask us to delete your data sooner at any time — see how to request data deletion.

08How we protect your data

Our website is served over encrypted HTTPS connections. Enquiry records are held in an access-controlled system that only authorised Aaro Tec staff can sign in to, and access is limited to the people who need it to answer your enquiry. Passwords protecting that system are not stored in plain text.

No system is perfectly secure, and we cannot guarantee absolute security of data sent over the internet. If a breach ever affects your personal data, we will notify you and the relevant authority as required by law.

09Your rights

You have the following rights over the personal information we hold about you:

  • Access — ask for a copy of the data we hold about you and a summary of how it is being processed.
  • Correction — ask us to correct anything inaccurate, incomplete or out of date.
  • Erasure — ask us to delete your data where we no longer need it for the purpose you gave it to us for.
  • Withdraw consent — tell us to stop contacting you, at any time, without giving a reason. Withdrawing consent does not affect processing already carried out.
  • Object to marketing — ask to be removed from promotional calls, emails or messages while remaining a customer.
  • Grievance redressal — raise a complaint with us and have it addressed. If you are not satisfied with our response, you may escalate to the Data Protection Board of India.
  • Nominate — nominate another person to exercise these rights on your behalf in the event of your death or incapacity.

To exercise any of these, contact us using the details in Contact us. We will respond within 30 days. We may ask you to confirm your identity first, so that we do not disclose your data to someone else.

10How to request data deletion

You can ask us to delete everything we hold about you, at any time, and it costs nothing.

To request deletion:

  1. 1. Email privacy@aarotec.in with the subject line “Delete my data”, or call us on +91 83090 47843.
  2. 2. Tell us the name, phone number and email address you originally gave us, so we can find your record.
  3. 3. We will confirm your identity, delete your data, and email you to confirm — normally within 7 working days and always within 30 days.

Once deleted, your record is removed from our enquiry system and from any copy held in our internal spreadsheets, and we will stop contacting you. We may need to retain a minimal record — for example an invoice — where tax law obliges us to keep it, and we will tell you if that applies.

Data held by Meta

Deleting your data with us does not delete the copy Meta holds from a Lead Ad, because Meta is a separate controller. To remove that, use the Meta Accounts Center or Facebook’s and Instagram’s own settings for downloading and deleting your information.

11Children’s privacy

Our website and products are sold to adults — typically homeowners, builders and interior designers. We do not knowingly collect personal data from anyone under 18 years of age, and we do not direct our advertising at children.

If you believe a child has submitted their details to us, contact us and we will delete the record promptly.

12Changes to this policy

We may update this policy as our products, advertising or legal obligations change. The date at the top of this page always shows when it was last revised, and the current version is the one published here.

If we ever make a change that materially affects how we use data you have already given us, we will tell you directly before it takes effect.

13Contact us

For any question about this policy, to exercise your rights, or to raise a privacy grievance, reach the Aaro Tec privacy contact:

Business
Aaro Tec, Hyderabad, Telangana, India

We aim to acknowledge every privacy request within 3 working days and resolve it within 30 days. If you are not satisfied with how we have handled your complaint, you may escalate it to the Data Protection Board of India.