Preamble & Legal Framework
SECTION 01
AMR Structural Engineering ('AMR', 'we', 'us', or 'our') respect your privacy and are committed to safeguarding your personal and technical data. This Privacy Policy is formulated in strict accordance with the Digital Personal Data Protection Act (DPDP Act), 2023 of India, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI Rules) under Section 43A of the Information Technology Act, 2000.
As a 'Data Fiduciary' under the DPDP Act, AMR process personal data of 'Data Principals' (clients, course candidates, site visitors, and training interns) in a lawful, transparent, and secure manner. This policy applies to all engineering consultancy services (Structural Design of RCC & Steel, Architecture, Quantity Estimation, 3D Elevations, Interior Designing) and educational training platforms (AutoCAD, ETABS, STAAD PRO, SAFE) operating under our corporate footprint in Andhra Pradesh, Telangana, Karnataka, and other regions in India.
Consent, Notice, and Purpose Limitation
SECTION 02
We process personal data only based on your explicit, specific, informed, unconditional, and unambiguous consent, or for designated 'legitimate uses' as permitted under Section 4 of the DPDP Act, 2023.
• Consent Notice: At the point of data collection (contact forms, course registration portals, or consultancy agreement signings), you will be presented with a clear, plain-language Consent Notice outlining the exact categories of data collected and the specific purpose of processing.
• Purpose Limitation: We collect data solely to execute contracted structural calculations, process certified software training enrollments, facilitate local municipal building permissions (via TG-bPASS, APCRDA, or Karnataka municipal portals), and manage standard client communications. We do not process data for any secondary purposes without obtaining your fresh, distinct consent.
Categories of Data Collected
SECTION 03
To provide high-fidelity structural engineering services and accredited student training, we collect and process the following categories of information:
• Personal Identity & Contact Information: Legal name, personal/professional email address, telephone number, billing address, and government-issued identification (such as Aadhaar or PAN, if required for academic certifications or corporate billing).
• Technical Design & Property Data: AutoCAD DWG files, PDF blueprints, structural design parameter criteria, FEA load requirements, soil bearing capacity reports, cadastral maps, and physical site survey coordinates submitted for design calculations.
• Academic & Student Performance Data: Course enrollment codes, practical modeling files, project submission logs, class attendance, and internship performance evaluations (applicable to candidates in our structural suites training).
• Digital & Device Telemetry: IP addresses, browser parameters, location coordinates, session timestamps, and navigation tracking collected through cookies to ensure cybersecurity and optimal website responsiveness.
Processing, Sharing, and Transfers
SECTION 04
AMR limits the processing of your data to secure workflows necessary to fulfill our service agreements:
• Municipal & Statutory Reporting: We share certified structural stability reports, loading calculations, and building drawings with local municipal authorities (e.g., AP CRDA, GHMC/TG-bPASS in Telangana, BBMP/UDD in Karnataka) strictly to facilitate building plan permissions.
• Academic & Accreditation Boards: Student enrollment and internship completion files may be verified with academic affiliates, engineering boards, or hiring organizations for legitimate credential validation.
• Third-Party Service Providers: We may employ secure third-party IT hosting services, cloud storage providers, and payment processors. These entities act as 'Data Processors' under contract, processing data strictly on our instructions under Section 8 of the DPDP Act.
• Cross-Border Transfers: AMR does not transfer your personal or technical structural data outside the territory of India.
Reasonable Security Practices & SPDI Safeguards
SECTION 05
We maintain robust security practices to protect your data from unauthorized access, loss, alteration, or disclosure:
• Physical and Digital Isolation: Access to architectural drawing bases, loading model calculations, and student records is restricted through multi-factor authentication and role-based clearance.
• Technical Infrastructure: We employ firewalls, secure socket layers (SSL), data encryption at rest, and regular technical reviews of our storage assets.
• Technical Blueprint Protection: Recognizing that engineering drawings contain high-value proprietary assets, all CAD/CAM and ETABS structural databases are maintained in encrypted repositories with secure version controls.
Rights of Data Principals (Your Legal Rights)
SECTION 06
Under Chapter III of the DPDP Act, 2023, you possess comprehensive rights regarding your digital personal data processed by AMR:
• Right to Information & Access: You may request a summary of the personal data we hold, the processing activities performed, and the identity of entities with whom your data has been shared.
• Right to Correction & Erasure: You may request the rectification of inaccurate contact data, completion of training records, or erasure of personal information that is no longer necessary for the original collection purpose.
• Right to Withdraw Consent: You hold the right to withdraw your consent at any time. Upon withdrawal, we will cease processing your data, unless required by municipal building codes or legal retention laws (such as engineering liability retention).
• Right of Grievance Redressal: You have the right to register grievances with AMR regarding any data processing action, and subsequently escalate to the Data Protection Board of India if unresolved.
Data Retention Policy
SECTION 07
• Legal & Professional Retention: Signed structural calculations, certified stability certificates, and building drawings are retained for a minimum of 10 years, or as mandated by state municipal bye-laws (Andhra Pradesh, Telangana, Karnataka) to address long-term engineering liability and safety accountability.
• Marketing & Inquiry Data: Contact form submissions and general inquiries are purged after 2 years unless they transition into active client contracts.
• Student/Internship Records: Academic enrollment lists, certificate issuance registries, and performance score sheets are retained permanently to facilitate verify-on-demand services for past students.
Grievance Redressal & DPO Details
SECTION 08
In accordance with Section 43A of the IT Act, 2000 (SPDI Rules) and the provisions of the DPDP Act, 2023, AMR has appointed a Grievance Officer. For any queries, requests for rights exercise, or complaints regarding data processing, please contact:
• Attention: Grievance Officer / Data Protection Officer
• Address: AMR Structural Engineering, 36/256-64-23, Chinna Chowk llaka, Old Bypass Road, Reddy Colony, Kadapa, Andhra Pradesh - 516002, India
• Email Contact: [email protected]
• Direct Phone: +91 81793 98686
If your grievance is not redressed by our Grievance Officer within thirty (30) days, you may file a complaint with the Data Protection Board of India in the manner prescribed under the DPDP Act rules.
