01Scope of this policy
This Privacy Policy explains how Surinder Mohindra Security Agency (“SMSA”, “we”) handles personal data when you visit www.smsaindia.com, submit a form on it, or contact us directly. SMSA is the data fiduciary for the personal data described here.
Third-party websites linked from our pages operate under their own privacy policies.
02Personal data we collect
Depending on how you interact with us, we may process:
- Enquiry and quote requests: name, email address, phone number, organisation, service required and your message.
- Job applications: full name, age, gender, email address, phone number, address, qualification, work experience, position applied for, ex-defence or training status, optional notes, and the résumé file you upload (PDF, DOC or DOCX).
- Direct communication you send us by email, phone or in person.
- Technical data processed by our hosting and security infrastructure, such as IP address, browser and device information, and security logs.
- Your cookie preference, and — only if you opt in — aggregated analytics data collected by Google Analytics.
03Why we use it
We process personal data only for specific purposes, on the basis of your consent, our legitimate business interests, or compliance with law (including labour, tax and private-security regulations).
- To respond to enquiries, prepare quotations and conduct security audits you request.
- To assess job applications, verify candidates and run recruitment.
- To keep the website secure and prevent abuse of our forms.
- To meet statutory, contractual and record-keeping obligations.
04How website forms are handled
When you submit the contact form or the careers application form, your details are sent securely to our server and delivered to SMSA’s inbox (contact@smsaindia.com) as an email using Resend, our email-delivery provider. Résumés are attached to that email. The website itself does not store form submissions in a database.
Submitted information is validated on our server, and basic automated checks are applied to prevent spam and abuse.
07How long we keep it
We keep personal data only for as long as it is needed for the purpose it was collected for, to resolve disputes, or to meet legal and statutory record-keeping requirements — after which it is deleted.
Your cookie-preference record is stored on your device for up to 12 months unless you clear it earlier.
08Security
We use technical and organisational safeguards — including encrypted (HTTPS) transmission and access-restricted mailboxes — to protect personal data against unauthorised access, alteration, disclosure or loss. No online system is entirely risk-free, and we review our controls regularly.
09Your rights
Subject to applicable law, including the Digital Personal Data Protection Act, 2023, you may request access to your personal data, correction or completion of inaccurate data, erasure where it is no longer needed, and withdrawal of any consent you have given. You may also raise a grievance about how your data is handled.
To exercise these rights, contact us using the details on this page. We will respond within a reasonable time.
10Children
Our services and recruitment are intended for adults. We do not knowingly collect personal data from children through this website; if you believe we have, please contact us so we can delete it.
11Changes to this policy
We may update this policy when our website, services or legal obligations change. The updated version will be published on this page with a revised effective date.