01Introduction and Scope
This Privacy Policy explains how Data Recovery Doctor (“we”, “us”, “our”), a professional data recovery service based in Aurangabad, Maharashtra, India, collects, uses, stores, shares and protects personal information. It applies whenever you:
- visit our website datarecoverydoctor.in or ask for a free evaluation or online quote;
- book a pickup, hand over a device, or use our customer portal to track a job or self check-in (Track Job);
- talk to us by phone, e-mail, SMS or WhatsApp, including the WhatsApp Business number linked to our business application;
- use, or are contacted through, our business application that connects our systems to the Meta WhatsApp Business Platform (described in section 5).
For the purposes of the Digital Personal Data Protection Act, 2023 (“DPDP Act”), we are the Data Fiduciary for the personal data described here: we decide why and how it is processed. We also follow the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
By using our website or services, or by giving us your details, you confirm that you have read this policy and agree to it. If you do not agree, please do not use our website or submit your details. You can withdraw your consent at any time as explained in sections 11 and 12.
02Information We Collect
We collect only what we need to evaluate, recover and return your data and to run our business properly.
We collect this information directly from you (forms, calls, messages, at check-in), automatically when you use our website, and from WhatsApp when you message our business number (your phone number, profile name, the message content and delivery status).
The files stored on your device are not “collected” by us in the ordinary sense. They are accessed only to the extent needed to diagnose and recover your data, and are handled under the strict rules in section 6.
03How We Use Your Information
We use personal information only for the purposes below, and only with your consent or where the law allows (for example to perform the service you asked for, or to meet a legal duty).
- To answer your enquiries and prepare a free evaluation, quotation or estimate.
- To collect your device, diagnose it, recover your data, let you verify the results and deliver the data securely.
- To send service messages about your job: quotation, pickup schedule, status updates, approval requests, OTP for delivery, invoice and payment confirmation.
- To take payments, issue invoices and keep the accounts that the law requires.
- To give customer support, resolve complaints and defend or enforce our legal rights.
- To keep our website, systems and premises secure and to prevent fraud and misuse.
- To improve our website and services, using aggregated usage information wherever possible.
- To comply with legal, tax and regulatory obligations and lawful requests from authorities.
What we do not do: we do not sell or rent your personal information, we do not use it to build advertising profiles, and we do not use the contents of your device for marketing, analytics or any purpose other than recovering it for you.
04WhatsApp Business Platform and Messaging
We use the WhatsApp Business Platform (including the Cloud API), provided by Meta Platforms, Inc. and its group companies including WhatsApp LLC (together, “Meta”), to communicate with our customers quickly and securely. This section explains exactly how.
Consent (opt-in)
We message you on WhatsApp only when you have contacted us first (by WhatsApp, phone, our website or in person) or when you have given us your WhatsApp number and agreed to receive updates about your service request, for example by ticking a box, telling us on a call, or signing the job sheet. We keep a record of that consent.
What we send
- Service (transactional) messages only: quotation and estimate, pickup and delivery schedule, job status updates, approval requests, verification links, OTP for delivery, payment and invoice details, delivery confirmation and a request for feedback.
- We do not send unsolicited promotions or bulk marketing. If we ever wish to send offers, we will ask for your separate, clear consent first.
- We use message templates approved by WhatsApp for messages we start outside the 24-hour customer-service window, and free-form replies when you have written to us.
What we receive and store
When you message our business number we receive your phone number, WhatsApp profile name, the text, images, documents or voice notes you send, timestamps and delivery/read status. We link these to your job record so that our team can help you, and we keep them as described in section 9. Our staff and authorised systems can read the messages you send to our business number.
Meta’s role
Messages travel through Meta’s infrastructure. Meta processes information about your WhatsApp use under its own terms and privacy policy, and is separately responsible for that processing. Please read them here:
Stopping messages
Reply STOP to any message, or tell us by phone or e-mail, and we will stop non-essential messages promptly. While you have an active job, we may still need to contact you about that job (for example to confirm delivery), by phone or another channel. You can also block or report our business number inside WhatsApp at any time.
Stay safe: we will never ask you for your card number, PIN, UPI PIN, banking password or WhatsApp verification code. Share an OTP only with our verified delivery representative at handover. Standard data or messaging charges from your mobile operator may apply.
05Our Business Application and Customer Portal
To run WhatsApp messaging and job tracking, we operate a business application registered on the Meta for Developers platform, together with our customer portal at drdlogin.datarecoverydoctor.in (job tracking and self check-in).
What the application does
- Sends the service messages described in section 4 from our official business number.
- Receives messages you send to that number, plus delivery and read status, and attaches them to your job record so our team can reply.
- Lets you check the status of your own job in the customer portal, using your job reference and the contact details registered with us. We may ask you to verify with an OTP.
What it does not do
- It works only with our own WhatsApp Business account. It does not access your personal WhatsApp, Facebook or Instagram account, your contacts, groups, photos or message history.
- It is not used for advertising, profiling, data brokerage, or to sell or transfer your data to any third party.
- We use information received through Meta’s platform only to provide the service you requested, in line with the Meta Platform Terms, the WhatsApp Business Terms and applicable law.
How the application is protected
Access tokens and API credentials are stored on our servers, are never placed in public web pages, and are available only to authorised staff. Connections use HTTPS, and access to customer records is limited to the people who need it for the job.
06Your Storage Devices and Recovered Data
The data on your device is your property and is confidential. When you entrust us with a hard disk, SSD, laptop, phone, memory card, RAID or any other device:
- only authorised recovery engineers work on it, and they access data only as far as needed to diagnose the fault and recover the files you need;
- we do not browse, copy, publish, share or use your files for any other purpose;
- a working copy (image or clone) may be made on secured lab storage, and is securely erased within 7 days after delivery or closure of the job, unless you ask for earlier erasure or the law requires otherwise;
- you can check the recovered files remotely before delivery, through a file list or preview limited to your job;
- recovered data is handed over only through OTP-verified secure delivery, on media agreed with you;
- if you give us a password, encryption key or PIN to unlock the device, we use it only for that job and do not keep it once the job is closed.
If we come across content that the law requires us to report while recovering a device, we may have to cooperate with the authorities. Apart from that, your data is not disclosed to anyone.
07When We Share Information
We do not sell or rent your personal information. We share it only in these limited cases, and only the part that is needed:
- Service providers working for us under confidentiality: pickup and courier partners, payment and banking providers, web hosting and IT support, and SMS, e-mail and WhatsApp delivery.
- Meta / WhatsApp, because our messages are sent through the WhatsApp Business Platform (see section 4).
- Google, for the optional translation tool on this page and for web fonts. When you choose another language, the text of the page is sent to Google Translate.
- Authorities and advisers, when we are required by law, court order or a lawful government request, or when needed to protect our rights or prevent fraud, and to our lawyers and accountants under duties of confidentiality.
- A successor business, if we ever merge with or transfer our business, in which case the same protections will continue to apply to your data.
- Anyone else, with your consent.
08Cookies and Similar Technologies
A cookie is a small text file stored in your browser. Our website uses:
- Essential cookies to keep forms working and secure (for example, session and security tokens for the quote and enquiry forms).
- Language cookie: if you translate this page, Google Translate stores a cookie named
googtransso that the page stays in your chosen language. Choosing English again removes it. - Usage information such as pages visited, device type and approximate location, collected in aggregate to help us improve the website.
We do not use cookies to build advertising profiles of you. You can block or delete cookies in your browser settings, although some parts of the website may then work less well.
09How Long We Keep Information
We keep personal information only for as long as it is needed for the purposes in this policy, and then delete or anonymise it.
- Enquiries and quotes that did not become a job: up to 12 months after our last contact.
- Job records, messages and WhatsApp conversations linked to a job: up to 3 years after the job is closed, to handle warranty questions and disputes.
- Invoices and payment records: for the period required by Indian tax and accounting laws.
- Working copies of data from your device: erased within 7 days after delivery or closure (see section 6).
- OTPs: valid only for a short time and used once.
You can ask us to delete your information earlier (see section 12). We will do so unless the law requires us to keep it.
10How We Protect Your Information
We use reasonable security practices and procedures, in line with the Information Technology Act, 2000 and the SPDI Rules, 2011, to protect personal information against loss, misuse and unauthorised access. These include:
- encrypted (HTTPS) connections for our website and portal;
- role-based access, so staff can see only what their work requires;
- confidentiality obligations for every engineer and staff member;
- a controlled lab, with customer devices and working copies kept in secured storage;
- server-side storage of credentials and API keys, kept out of public code;
- OTP-verified delivery so that data reaches the right person.
No method of storage or transmission is completely secure. If a personal data breach affecting you occurs, we will act promptly to contain it and will inform you and the authorities as the law requires.
11Your Rights and Choices
Under the DPDP Act and other applicable laws, you have the right to:
- Access a summary of the personal data we hold about you and how it is used;
- Correct or update information that is inaccurate or incomplete;
- Erase your personal data, unless we must keep it by law (see section 12);
- Withdraw your consent at any time, as easily as you gave it. This does not affect what we did before, and may limit the services we can provide;
- Get your grievance addressed by our Grievance Officer (section 17);
- Nominate another person to exercise your rights if you die or become unable to do so.
To use any of these rights, write to us at datarecoverydoctormh@gmail.com or message +91 89756 20081 on WhatsApp. We may need to verify your identity first (for example with an OTP to your registered number) and we aim to respond within 30 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India once you have first raised the matter with us.
12Data Deletion Instructions
You can ask us to delete the personal data we hold about you at any time, including your WhatsApp conversations and contact details. This applies to everything collected through our website, customer portal, WhatsApp messaging and business application.
How to request deletion
- Send a request. E-mail datarecoverydoctormh@gmail.com with the subject “Data Deletion Request”, or send “Delete my data” from your registered number to +91 89756 20081 on WhatsApp. Please include your name, the mobile number you used with us and, if you have one, your job number.
- We verify it is you. We will confirm from the same e-mail address or number, and may send an OTP, so that nobody can delete your data by mistake or on your behalf without permission.
- We delete your data. We delete or irreversibly anonymise your personal data, including WhatsApp conversation records and profile details in our systems, within 30 days, and confirm to you when it is done.
Please note: we may need to keep limited records that the law requires, such as invoices and tax records, or records needed for an unresolved dispute or to prevent fraud. These are kept restricted and deleted when the requirement ends. Deleting a chat on your own phone does not delete it from our records, so please send us the request. Information held by WhatsApp or Meta is governed by their own policies, and you can manage it in WhatsApp under Settings, or through the links in section 4.
13Children's Privacy
Our services and website are meant for adults aged 18 and over. We do not knowingly collect personal data from children without the verifiable consent of a parent or guardian, and we do not track, profile or target children with advertising. If a device belongs to a child, a parent or guardian should submit it and act for the child. If you believe a child has given us personal data without such consent, please contact us and we will delete it.
14Storage and Transfers Outside India
Your job data is handled by our team in India. Some of our service providers, including Meta (WhatsApp) and Google, may process limited information on servers outside India when you use their services. We transfer personal data abroad only where the DPDP Act and other applicable laws allow it, and only the information needed for the service.
15Third-Party Links and Translation
Our website may link to other websites and services, such as WhatsApp, Meta, Google or our customer portal. We do not control them and are not responsible for their content or privacy practices, so please read their policies.
The language menu on this page uses Google Translate. It is loaded only when you open the menu or choose a language, and the text of the page is then sent to Google for translation. Translations are automatic and may contain mistakes. The English text is the official version. Google’s handling of that information is described in the Google Privacy Policy.
16Changes to This Policy
We may update this policy from time to time, for example when our services or the law change. The “Last updated” date at the top of the page shows the latest version. For significant changes, we will tell you through our website or by message. If you keep using our services after an update, you accept the updated policy, and where the law requires it we will ask for your consent again.
17Contact Us and Grievance Officer
If you have any question about this policy, want to use your rights, or wish to make a complaint, please contact us:
- Phone+91 93252 20081 / +91 89756 20081
- WhatsApp+91 89756 20081
- Address1st Floor, Niwara, Near Ajmera Bhavan, Khadkeshwar, Aurangabad, Maharashtra 431001, India
- Websitedatarecoverydoctor.in
Grievance Officer – write to us at the e-mail address above with the subject line “Grievance”. We acknowledge every complaint and aim to resolve it within 30 days.
This page can be read in other languages using the language menu. Translations are produced automatically by Google Translate for convenience only; if a translation and the English text differ, the English text applies.