1. Statutory Framework & Regulatory Scope
This Privacy Policy sets forth the principles governing data collection, processing, security, and disposal on the RC Book Service India portal (rcbookdownloads.com). This policy is drafted in strict adherence to:
- The Digital Personal Data Protection Act, 2023 (Act No. 22 of 2023): Ensuring full statutory recognition of Data Principal rights and transparency in data processing.
- The Information Technology Act, 2000 (Act No. 21 of 2000): Under Section 43A and Section 72A concerning reasonable security practices and disclosure of information.
- Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI Rules).
By accessing, reading, or utilizing any educational guides, downloadable forms, or interactive tools hosted on this portal, you acknowledge having read and understood this Privacy Charter.
2. Categories of Information We Process
We adhere strictly to the principle of Data Minimization under Section 6 of the DPDPA 2023. We collect only the minimum technical and voluntary data necessary to deliver high-availability public educational services:
| Data Category | Examples | Statutory Purpose |
|---|---|---|
| Technical Access Logs | IP address (anonymized), browser user-agent, operating system, timestamp of request. | Network security, DDoS mitigation, rate-limiting, and server uptime monitoring. |
| Voluntary Inquiries | Name, email address, phone number (optional), and query text submitted through contact forms. | Answering citizen procedural questions regarding RTO forms and documentation protocols. |
| Client-Side Simulation Inputs | Vehicle category, engine cc, purchase price entered into fee or status simulators. | Processed entirely within your browser local memory (ephemeral); never saved to server disks. |
3. Explicit Proscription of Sensitive Personal Data Collection
To protect citizens from unauthorized identity theft or phishing threats, RC Book Service India explicitly does not solicit, collect, or process:
- Aadhaar numbers, biometric fingerprints, or Iris scan credentials.
- Permanent Account Number (PAN) biometric linkages or income tax filing keys.
- Bank account details, UPI PINs, credit/debit card numbers, or Net Banking credentials.
- Parivahan Sewa, NextGen mParivahan, or DigiLocker personal user passwords.
Citizens are advised never to transmit sensitive credentials or identity tokens via unencrypted email or third-party web forms.
4. Cookies, Web Beacons & Local Storage Policy
Our portal uses cookies and local storage tokens strictly to enhance navigation performance, remember user accessibility preferences, and compile anonymized traffic statistics:
- Strictly Necessary Cookies: Essential for load balancing, CSRF protection, and session security.
- Analytical Cookies: Anonymized metrics measuring page views, read times, and geographic referral patterns to guide editorial updates.
- No Commercial Cross-Site Tracking: We do not deploy invasive third-party cross-site advertising trackers or sell browsing profiles to commercial data brokers.
5. Outbound Links to Sovereign Government Portals
Throughout our guides, we provide direct hyperlinks to official Indian government websites, including:
- Ministry of Road Transport and Highways (MoRTH):
morth.nic.in - Parivahan Sewa National Transport Portal:
parivahan.gov.in - National Informatics Centre (NIC):
nic.in - DigiLocker Digital Document Repository:
digilocker.gov.in - State Transport Cyber Treasuries: (e.g. GRAS Maharashtra, e-Gras Rajasthan, Cyber Treasury UP).
When navigating away from our portal to these external government domains, your interaction is governed strictly by the sovereign privacy policies and terms of the respective departments. We assume no legal responsibility for external third-party content or service delivery.
6. Technical Security & Encryption Standards
We implement comprehensive technical and organizational security safeguards to prevent unauthorized data access, tampering, or disclosure:
- Transport Layer Security (TLS 1.3): All network communications are protected by end-to-end 256-bit encryption with HSTS enforcement.
- Security Headers: Deployment of Content-Security-Policy (CSP), X-Frame-Options (DENY/SAMEORIGIN), and X-Content-Type-Options (nosniff) to eliminate clickjacking and script injection.
- Regular Data Purging: Citizen contact inquiries are automatically scheduled for complete digital erasure within 90 days of resolution.
7. Citizen Rights as Data Principals (DPDPA 2023)
Under Chapter III of the Digital Personal Data Protection Act, 2023, you retain the following statutory rights regarding your personal information:
- Right to Access Information: Request a summary of personal data previously provided to our support desk.
- Right to Correction & Erasure: Request the correction of misleading or outdated contact submissions, or complete deletion of inquiry records.
- Right to Grievance Redressal: Avail immediate statutory grievance redressal through our designated Data Protection Officer.
- Right to Nominate: Nominate an authorized representative to exercise your privacy rights in the event of incapacity or demise.
8. Grievance Redressal & Nodal Contact Details
In compliance with Rule 5(9) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and Section 8(10) of DPDPA 2023, details of the designated Grievance Officer are set out below:
Statutory Grievance Redressal Officer
Portal Designation: Citizen Privacy & Data Protection Desk
Entity: RC Book Service India (Independent Motorist Guide)
Official Email: privacy@rcbookdownloads.com / legal@rcbookdownloads.com
Statutory Response Timeline: Formal acknowledgment within 48 hours; complete resolution within 30 statutory working days.
This Privacy Charter is subject to periodic updates to reflect legislative amendments under the Motor Vehicles Act and DPDPA Rules. Continued use of the portal constitutes acceptance of updated provisions.