DATA USAGE & DATA PROTECTION POLICY

Last Updated: 27 August 2026
Effective Date: 27 August 2026

Neoterrahome Innovations Pvt. Ltd. (“Neoterra”, “we”, “us”, or “our”) is committed to protecting the personal and business information entrusted to us.

This Data Usage & Data Protection Policy explains how Neoterra uses, manages, protects, stores and controls data collected through our website, products, services, customer interactions, sales channels, service operations and business relationships.

This Policy should be read together with our Privacy Policy, which provides further information regarding the categories of personal data we collect and the purposes for which such data may be processed.

1. OUR COMMITMENT TO DATA PROTECTION

Neoterra recognises that data protection is an important part of building trust with our customers, partners and other stakeholders.

We are committed to:

  • Collecting only data that is reasonably required for legitimate business purposes;
  • Using data only for specified and appropriate purposes;
  • Protecting personal data against unauthorised access, use, alteration, disclosure or destruction;
  • Limiting access to data based on business requirements;
  • Retaining data only for as long as reasonably necessary;
  • Using appropriate safeguards when sharing data with third parties;
  • Respecting applicable data protection and privacy laws; and
  • Responding appropriately to data-related requests and security incidents.

2. TYPES OF DATA COVERED

This Policy applies to data handled by Neoterra, including:

Customer Data

Information relating to individuals who purchase, enquire about or use Neoterra products and services.

Prospect and Lead Data

Information received through:

  • Website forms;
  • Product enquiries;
  • Digital advertising campaigns;
  • B2B enquiries;
  • Dealer enquiries;
  • Phone calls;
  • WhatsApp or other communication channels; and
  • Other lead-generation activities.

Product and Service Data

This may include:

  • Product model;
  • Serial number;
  • Purchase details;
  • Installation information;
  • Warranty information;
  • Service history;
  • Repair information;
  • Service requests; and
  • Product-related communications.

Business Data

Information relating to dealers, distributors, contractors, commercial customers, institutions, vendors and other business partners.

Website and Technical Data

This may include:

  • IP address;
  • Device information;
  • Browser information;
  • Website interaction data;
  • Cookies;
  • Analytics information; and
  • Security logs.

3. HOW NEOTERRA USES DATA

Data may be used only for legitimate, specified and appropriate purposes.

Depending upon the nature of the data, Neoterra may use it to:

  • Process product enquiries;
  • Process orders and transactions;
  • Arrange product delivery;
  • Coordinate installation;
  • Register products;
  • Validate warranties;
  • Provide customer support;
  • Schedule service visits;
  • Process repair and maintenance requests;
  • Respond to complaints and feedback;
  • Manage dealer and distributor relationships;
  • Manage B2B opportunities;
  • Provide quotations and proposals;
  • Communicate important product or service information;
  • Send marketing communications where permitted;
  • Improve products and customer experience;
  • Analyse business and service performance;
  • Prevent fraud and misuse;
  • Maintain website and IT security;
  • Meet accounting, legal and regulatory requirements; and
  • Protect Neoterra’s legal rights and business interests.

Neoterra will not intentionally use personal data for purposes that are incompatible with the purpose for which it was collected, except where permitted or required by applicable law.

4. DATA MINIMISATION

Neoterra follows a principle of collecting and using data that is reasonably necessary for the relevant purpose.

For example, a product enquiry may require information such as:

  • Name;
  • Mobile number;
  • Email address;
  • Location;
  • Product requirement; and
  • Relevant business or project information.

We generally do not require information that is unrelated to fulfilling the relevant enquiry, transaction or service.

Employees, contractors and service providers are expected to avoid collecting unnecessary personal information.

5. DATA ACCURACY

Neoterra seeks to maintain accurate and relevant information.

Where you provide information to us, you should ensure that it is accurate and complete.

You may contact us to request correction of inaccurate or outdated personal data, subject to applicable law and reasonable verification requirements.

Where appropriate, Neoterra may update or correct information based on reliable information received from authorised sources.

6. ACCESS CONTROL

Access to personal and confidential data is restricted to authorised individuals who require access for legitimate business purposes.

Access may be provided based on:

  • Job responsibilities;
  • Business requirements;
  • Customer-service requirements;
  • Technical responsibilities;
  • Legal or compliance requirements; or
  • Other legitimate operational needs.

Employees and authorised personnel are expected to maintain the confidentiality of information they access.

Access may be removed or modified when an employee, contractor, partner or service provider no longer requires such access.

7. DATA SECURITY MEASURES

Neoterra implements reasonable technical and organisational safeguards appropriate to the nature and sensitivity of the data being processed.

Depending on the applicable system and circumstances, these safeguards may include:

  • Password and authentication controls;
  • Role-based access controls;
  • Restricted administrative access;
  • Secure hosting environments;
  • Encryption or equivalent protective measures where appropriate;
  • Firewall and network security measures;
  • Security monitoring;
  • System logging;
  • Backup and recovery procedures;
  • Malware and threat protection;
  • Access reviews;
  • Vendor security controls;
  • Employee confidentiality requirements; and
  • Incident response procedures.

Security measures may be updated from time to time to address changes in technology, threats and business requirements.

8. DATA STORAGE

Personal data may be stored using:

  • Neoterra’s internal systems;
  • Secure cloud infrastructure;
  • Customer relationship management systems;
  • Service-management platforms;
  • E-commerce platforms;
  • Payment systems;
  • Communication platforms; and
  • Other authorised technology systems.

Where third-party technology providers are used, Neoterra expects such providers to implement appropriate safeguards consistent with their contractual obligations and applicable law.

9. DATA SHARING AND THIRD-PARTY ACCESS

Neoterra may provide limited access to data to third parties where necessary to operate our business or provide products and services.

These may include:

  • Installation partners;
  • Service and repair partners;
  • Dealers and distributors;
  • Logistics and delivery providers;
  • Payment service providers;
  • Website and hosting providers;
  • CRM providers;
  • Customer support platforms;
  • Analytics providers;
  • Marketing and advertising service providers;
  • IT and cybersecurity providers;
  • Professional advisers; and
  • Government or regulatory authorities where legally required.

Third parties are expected to use information only for the purposes for which it has been provided and in accordance with applicable contractual, security and legal requirements.

10. EMPLOYEE AND INTERNAL DATA ACCESS

Neoterra employees and authorised personnel may access personal data only where required for their responsibilities.

Employees may be subject to:

  • Confidentiality obligations;
  • Data-security requirements;
  • Access controls;
  • Internal policies;
  • Training and awareness requirements; and
  • Disciplinary measures for unauthorised access or misuse.

Unauthorised copying, disclosure, downloading, transferring or use of personal data is prohibited.

11. DATA USED FOR MARKETING

Neoterra may use customer and prospect information for marketing and business-development purposes where permitted by applicable law.

Marketing activities may include:

  • Email campaigns;
  • SMS communications;
  • WhatsApp communications;
  • Telephone calls;
  • Digital advertising;
  • Product announcements;
  • Promotional offers;
  • Events;
  • Surveys; and
  • Customer engagement campaigns.

Where consent is required, Neoterra will seek appropriate consent before sending relevant communications.

You may opt out of promotional communications at any time.

Opting out of marketing will not normally affect essential communications relating to an order, installation, warranty, service request, payment or other existing business relationship.

12. DATA USED FOR ANALYTICS AND BUSINESS IMPROVEMENT

Neoterra may analyse data to understand:

  • Website performance;
  • Product enquiries;
  • Customer preferences;
  • Sales trends;
  • Service performance;
  • Product issues;
  • Customer feedback;
  • Marketing performance; and
  • Overall business performance.

Where reasonably possible and appropriate, aggregated, anonymised or de-identified information may be used for analytical purposes.

13. PRODUCT, INSTALLATION AND SERVICE DATA

For products that require installation, warranty support or servicing, Neoterra may maintain records relating to the product and associated services.

Such information may include:

  • Product model;
  • Serial number;
  • Purchase date;
  • Installation date;
  • Installation location;
  • Warranty status;
  • Service requests;
  • Technician/service information;
  • Repair history;
  • Replacement parts;
  • Service communications; and
  • Other information necessary to provide after-sales support.

This information may be retained for the duration reasonably necessary to provide warranty, service, legal, accounting and operational support.

14. PAYMENT AND FINANCIAL DATA

Where payments are made through Neoterra or an authorised third-party payment provider, transaction information may be processed for:

  • Payment processing;
  • Order confirmation;
  • Refunds;
  • Returns;
  • Payment reconciliation;
  • Accounting;
  • Fraud prevention; and
  • Legal and regulatory compliance.

Neoterra does not intend to store complete payment-card information unless such storage is specifically required, lawfully permitted and appropriately protected.

Third-party payment providers may process payment information according to their own terms and privacy policies.

15. DATA RETENTION AND DELETION

Neoterra retains data only for as long as reasonably necessary for the relevant business, legal, contractual or operational purpose.

Retention periods may depend upon:

  • Customer relationships;
  • Product warranty periods;
  • Service requirements;
  • Accounting and taxation requirements;
  • Legal obligations;
  • Contractual requirements;
  • Dispute resolution;
  • Fraud prevention;
  • Security requirements; and
  • Other legitimate business needs.

When information is no longer required, Neoterra may:

  • Delete it;
  • Securely destroy it;
  • Anonymise it; or
  • Retain it in a restricted form where required or permitted by law.

16. DATA TRANSFER

Where necessary for business operations, personal data may be processed by authorised service providers operating from locations outside India.

Neoterra will take appropriate steps required under applicable law in relation to such processing and transfers.

17. DATA BREACH AND SECURITY INCIDENT MANAGEMENT

Neoterra maintains processes intended to identify, assess, contain and respond to data-security incidents.

A security incident may include:

  • Unauthorised access;
  • Accidental disclosure;
  • Loss of data;
  • Theft of data;
  • Unauthorised alteration;
  • Destruction of data;
  • Malware or ransomware incidents; or
  • Other events affecting the confidentiality, integrity or availability of personal data.

Where a data-security incident occurs, Neoterra may take appropriate steps including:

  1. Identifying and containing the incident;
  2. Assessing the nature and extent of the incident;
  3. Securing affected systems;
  4. Investigating the cause;
  5. Taking corrective measures;
  6. Documenting the incident;
  7. Notifying relevant parties where required by law; and
  8. Implementing measures to reduce the likelihood of recurrence.

18. DATA PROTECTION BY DESIGN

Where reasonably appropriate, Neoterra seeks to incorporate privacy and security considerations into the design and implementation of new systems, products, processes and services.

This may include:

  • Limiting data collection;
  • Restricting access;
  • Using appropriate security controls;
  • Reviewing third-party systems;
  • Considering privacy risks;
  • Implementing appropriate retention practices; and
  • Periodically reviewing data-processing activities.

19. THIRD-PARTY VENDORS

Before providing third parties with access to personal data, Neoterra may assess relevant considerations such as:

  • Business necessity;
  • Security capabilities;
  • Data-processing requirements;
  • Confidentiality obligations;
  • Contractual safeguards;
  • Applicable legal requirements; and
  • Data retention and deletion practices.

Third-party vendors may be required to maintain reasonable safeguards appropriate to the information they process.

20. CUSTOMER RESPONSIBILITIES

Customers and website users should also take reasonable steps to protect their information.

You should:

  • Use secure passwords where applicable;
  • Avoid sharing account credentials;
  • Keep login information confidential;
  • Use secure devices and networks;
  • Avoid submitting unnecessary sensitive information through public forms;
  • Verify communications claiming to be from Neoterra; and
  • Notify Neoterra promptly if you suspect unauthorised use of your account or personal information.

Neoterra will not normally ask you to provide passwords, OTPs, PINs or complete payment credentials through unsolicited communications.

21. PRIVACY OF CHILDREN

Neoterra’s services are not intended to knowingly collect personal data from children except where permitted by applicable law and with appropriate consent or authorisation.

If we become aware that personal data has been collected from a child in circumstances where such collection was not permitted, we will take reasonable steps to address the situation in accordance with applicable law.

22. YOUR DATA PROTECTION RIGHTS

Subject to applicable law, you may have rights relating to your personal data, including:

  • Accessing information about processing;
  • Requesting correction;
  • Requesting deletion where applicable;
  • Withdrawing consent where processing is based on consent;
  • Raising a grievance; and
  • Exercising other rights available under applicable law.

Requests may require identity verification before they are processed.

To exercise applicable rights, contact Neoterra using the details provided below.

23. DATA PROTECTION CONTACT

For questions, requests or concerns relating to data usage or data protection, please contact:

Neoterrahome Innovations Pvt. Ltd.

Privacy / Grievance Officer: Ananya Tyagi

Email: support@neoterra.in

Customer Support: +91 97116 56965

Registered Office:
A-1/19B, First Floor, Paschim Vihar,
New Delhi – 110063, India

24. RELATIONSHIP WITH THE PRIVACY POLICY

This Data Usage & Data Protection Policy should be read together with Neoterra’s Privacy Policy.

The Privacy Policy primarily explains:

  • What personal data we collect;
  • Why we collect it;
  • How we use it;
  • When we share it; and
  • Your privacy rights.

This Data Usage & Data Protection Policy primarily explains:

  • How we protect data;
  • How access is controlled;
  • How data is stored;
  • How data is retained;
  • How third parties are managed;
  • How security incidents are handled; and
  • The principles governing internal data usage.

Where there is any inconsistency between this Policy and applicable law, applicable law will prevail.

25. POLICY UPDATES

Neoterra may update this Policy from time to time to reflect:

  • Changes in applicable laws;
  • Changes in technology;
  • Changes in our products or services;
  • Changes in our data-processing practices;
  • Changes in security practices; or
  • Operational requirements.

The latest version will be published on our website with the applicable “Last Updated” date.

26. GOVERNING LAW

This Policy shall be governed by the laws of India, subject to applicable statutory rights and requirements.

Any disputes relating to this Policy shall be subject to the jurisdiction of courts having appropriate jurisdiction over Neoterrahome Innovations Pvt. Ltd.’s registered office, subject to applicable law.

27. CONTACT US

For any questions regarding this Data Usage & Data Protection Policy, please contact:

Neoterrahome Innovations Pvt. Ltd.

Email: support@neoterra.in

Customer Support: +91 97116 56965

Registered Office:
A-1/19B, First Floor, Paschim Vihar,
New Delhi – 110063, India

Website: www.neoterra.in

Last Updated: 27 August 2026

IMPORTANT NOTICE

This Policy is intended to establish Neoterra’s data-protection framework and should be implemented consistently with the company’s actual technology infrastructure, vendors, CRM systems, website analytics, advertising platforms, payment providers, customer-service systems, installation partners and internal access controls.

Before publication, Neoterrahome Innovations Pvt. Ltd. should have the final version reviewed by its legal counsel/data-protection adviser and ensure that its operational practices, website disclosures, consent mechanisms and technical controls accurately reflect this Policy.