1. Introduction & Corporate Identity
This Privacy Policy outlines how Camsik Electronics Pvt. Ltd. ("Camsik", "Company", "we", "us", or "our"), operating via our website casmik-one.vercel.app and mobile applications, collects, stores, protects, and sanitizes personal and hardware data when you buy, sell, trade-in, or repair consumer electronics (smartphones, laptops, MacBooks, tablets, DSLR/mirrorless cameras, lenses, and gear).
By accessing or utilizing any part of the Camsik platform, you consent to the data practices described herein, compliant with the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
2. Information We Collect
To deliver seamless door-to-door valuations, instant bank payouts, and certified refurbished hardware, we collect the following categories of information:
Personal Identifiers
Legal full name, phone number (OTP-verified), email address, physical residence or office pickup address, landmark, and postal PIN code.
Financial & Payout Details
UPI Virtual Payment Address (VPA), Bank Account Number, and IFSC Code used exclusively for instant spot payouts via IMPS/NEFT. We do not store card CVVs or netbanking passwords.
Device & Hardware Telemetry
Device IMEI 1 & 2, serial number, OEM model, storage configuration, battery health percentage, camera shutter count, screen condition grading, and 45-point diagnostic reports.
Mandatory KYC Verification
Government photo identification (Aadhaar, Voter ID, Driving Licence, or Passport) required under Indian second-hand trade and police anti-theft directives to prove legal device ownership.
3. DoD 5220.22-M & NIST 800-88 Certified Data Wipe Policy
One of the biggest concerns when selling a pre-owned smartphone, laptop, or camera is personal data privacy (photos, messages, banking tokens, saved passwords, family media).
Every device handled by Camsik undergoes certified sanitization:
- Factory Grade Multi-Pass Overwrite: Conforming to U.S. Department of Defense (DoD 5220.22-M) and NIST Special Publication 800-88 Rev. 1 guidelines for media sanitization.
- Internal Flash & Storage Scrub: SSDs, eMMC drives, and device flash partitions are securely scrubbed, preventing forensically recoverable remnants.
- Camera Buffer & SD Slot Flush: On DSLRs, mirrorless bodies, and action cams, internal write buffers, custom EXIF copyright tags, and wireless profiles are purged to factory zero.
- Activation Lock Deregistration: Complete verification that Apple iCloud / Find My, Google FRP (Factory Reset Protection), Samsung Knox, and Microsoft BitLocker accounts are unlinked before transaction closing.
A digital Certificate of Data Sanitization is automatically archived for our records and can be provided to corporate enterprises or retail customers upon request.
4. Purpose of Data Processing
We process collected data solely for legitimate business operations:
- Generating real-time algorithmic valuation estimates for pre-owned gadgets.
- Dispatching trained diagnostic technicians to your verified address for free doorstep verification.
- Executing instant spot payouts via secure UPI and IMPS payment rails.
- Generating digitally authenticated bills of sale and legally binding transfer-of-ownership deeds.
- Delivering certified refurbished products and servicing 6-month / 1-year product warranty claims.
- Preventing fraudulent transactions and verifying hardware serials against national lost & stolen property registries.
6. Security Infrastructure & Encryption
Camsik implements multi-tier enterprise defenses to ensure the confidentiality, integrity, and availability of all data:
- Data in Transit: 256-bit SSL/TLS 1.3 cryptographic protocols protect all data transmitted between your browser/app and our servers.
- Data at Rest: AES-256 encryption across cloud database clusters and object storage buckets.
- Role-Based Access Control (RBAC): Only vetted, authorized personnel have access to transaction records on a need-to-know basis.
- Continuous Audits: Regular vulnerability scans and automated security checks across production deployments.
7. Your Legal Rights (DPDP Act 2023)
As a data principal under the Indian Digital Personal Data Protection Act, 2023, you have the right to:
- Request a summary of personal data held about you and processing activities undertaken.
- Request correction, updating, or completion of inaccurate or incomplete personal data.
- Request erasure of personal data, subject to legal retention obligations (e.g., GST invoice retention and law enforcement second-hand electronics logs for 5 years).
- Nominate another individual to exercise your rights in event of incapacity.
9. Grievance Redressal & Data Protection Officer
In accordance with the Information Technology Act, 2000 and DPDP Act, 2023, the details of our designated Grievance Officer are provided below:
Grievance & Compliance Cell
Camsik Electronics Pvt. Ltd.