Privacy Policy

1. Who We Are

Dr Phone is a device repair service based in Hyderabad, Telangana, India. We operate at drphone.ai and provide repair services for smartphones, tablets, laptops, and gaming consoles. This Privacy Policy is published in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000. For any privacy-related queries, contact us at [email protected].

2. Information We Collect

We collect information you provide directly to us, including:

• Name, phone number, and email address when booking a repair or submitting an enquiry
• Device details (brand, model, issue description) for repair purposes
• City and location for franchise enquiries
• Messages and communications you send us via contact forms or WhatsApp

3. Consent & Legal Basis (DPDP Act 2023)

Under the Digital Personal Data Protection Act, 2023, we process your personal data on the basis of your free, specific, informed, unconditional, and unambiguous consent. By submitting a booking, contact form, or franchise enquiry, you consent to the processing of your personal data as described in this policy.

You have the right to withdraw consent at any time by contacting us at [email protected]. Withdrawal of consent will not affect the lawfulness of processing carried out before withdrawal.

4. How We Use Your Information

We use the information we collect to:

• Process and manage your repair bookings and appointments
• Communicate with you about your repair status
• Respond to franchise enquiries and contact form submissions
• Send service-related notifications (appointment reminders, repair completion)
• Improve our services and website experience
• Comply with legal obligations under Indian law

5. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information with trusted service providers who assist us in operating our website and conducting our business, subject to confidentiality agreements. We may also disclose information when required by law, court order, or government authority under Indian law.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction, as required under the DPDP Act 2023. However, no method of transmission over the internet is 100% secure.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, or as required by applicable Indian law. Booking and repair records are retained for a minimum of 12 months for warranty purposes. Once the purpose is fulfilled and retention is no longer legally required, your data will be erased.

8. Your Rights Under DPDP Act 2023

As a Data Principal under the Digital Personal Data Protection Act, 2023, you have the following rights:

• Right to access — obtain information about the personal data we hold about you and how it is processed
• Right to correction — request correction of inaccurate or incomplete personal data
• Right to erasure — request deletion of your personal data where it is no longer necessary
• Right to grievance redressal — raise a complaint with our Grievance Officer (see above)
• Right to nominate — nominate another individual to exercise your rights in the event of your death or incapacity
• Right to withdraw consent — withdraw consent at any time without affecting prior lawful processing

To exercise these rights, contact our Grievance Officer at [email protected]. You may also approach the Data Protection Board of India if your complaint is not resolved satisfactorily.

9. Cookies

Our website may use cookies to enhance your browsing experience. You can control cookie settings through your browser preferences. Disabling cookies may affect some functionality of the site.

10. Cross-Border Data Transfers

Your personal data is primarily stored and processed within India. If any data is transferred outside India, it will be done in compliance with the DPDP Act 2023 and only to countries notified by the Central Government as permissible destinations.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated date. Continued use of our services after changes constitutes acceptance of the updated policy.

12. Contact Us

For general privacy queries, contact us. For formal complaints, please use the Grievance Officer contact above.