CNGNEAR ME
Live Fuel Availability • cngnearme.co.in
Legal Notice for Website Owner: This policy is tailored specifically to the actual data collected by cngnearme.co.in (including job applications, dealer registrations, and location telemetry). Placeholders marked with [OWNER TO CONFIRM: ...] must be reviewed and confirmed before official legal sign-off.
Digital Personal Data Protection (DPDP) Act, 2023 Compliant

Privacy Policy

Last Updated: October 28, 2026 • Version 1.1 (Production Draft)

1Overview & Data Fiduciary Identity

This Privacy Policy explains how CNG Near Me (referred to as "we", "our", "us", or the "Platform"), operating via https://cngnearme.co.in collects, processes, stores, and protects digital personal data.

Under India's Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000, CNG Near Me acts as the Data Fiduciary for personal information submitted through our services.

Operating Entity: [OWNER TO CONFIRM: Registered Business Name / Proprietorship Name]

Registered Office: [OWNER TO CONFIRM: Street Address, Nashik, Maharashtra, PIN 422001, India]

Official Contact Email: [OWNER TO CONFIRM: legal@cngnearme.co.in / avinashpurkar03@gmail.com]

Helpline / WhatsApp: +91 94211 41033

2Categories of Personal Data Collected

We strictly limit collection to data essential for real-time station availability and dealer operations:

A. Motorists & General Visitors

  • Device Geolocation: With your explicit browser permission, we process your device coordinates (Latitude, Longitude) strictly in-memory inside your browser to calculate driving distances to nearby CNG pumps. Your live GPS coordinates are never saved to our server database.
  • Customer Reviews & Ratings: If you submit a station review, we collect your display name (or "CNG Driver"), star rating (1–5), optional feedback tags, and comments.
  • IP Address & Technical Logs: IP addresses are processed in volatile memory to enforce security rate limits (maximum 5 login attempts per minute) and prevent malicious scraping or DDoS attacks.

B. Station Attendant Job Applicants

  • Candidate Information: When applying for local pump operator jobs via the portal, we collect your Full Name, Age (18–65), Gender, Experience Level, 10-digit Indian Mobile Number, Residential PIN Code, and optional applicant notes.
  • Purpose: Transmitted exclusively to the verified petrol pump owner of that station to contact you for employment.

C. Petrol Pump Owners & Station Operators

  • Registration / Listing Leads: Owner Full Name, Mobile Number, Email Address, Pump Station Address, Dispenser Count, Brand affiliation (IOCL, HPCL, BPCL, MNGL, Torrent), and Operating Hours.
  • Station Operator Credentials: Account Name, Login Email/Phone, Station Operator Code, and Bcrypt cryptographic password hashes.

3Legal Basis for Data Processing

Under Section 4 and Section 6 of the Indian DPDP Act, 2023, we process your data based on:

  • Consent: For submitting job applications, pump onboarding requests, customer ratings, and granting browser GPS access.
  • Legitimate Uses: For maintaining website cybersecurity, preventing brute-force login attacks, and fulfilling contractual services for station management.

4Data Sharing & Third-Party Services

We do not sell, rent, or trade your personal data. Your information is shared only under strict operational boundaries:

  • Assigned Pump Station Owners: Candidate job applications are accessible strictly to the authorized pump dealer where the applicant submitted their form.
  • Infrastructure Providers: Hosted on secure, dedicated Plesk Node.js servers in Indian data centers.
  • Legal & Regulatory Authorities: Disclosed only when strictly mandated by applicable Indian laws, judicial subpoenas, or law enforcement requests.

5Data Retention & Storage Security

  • Authentication Passwords: Stored using industry-standard salted Bcrypt hashes.
  • Session Tokens: Encrypted JWTs stored in HTTP-Only, Secure, SameSite=Lax cookies with 30-day expiration.
  • Job Applications: Retained for a maximum of 180 days for hiring consideration, after which records are scheduled for automated purging or anonymization.
  • Activity Logs: Operational audit logs retained for 90 days for cybersecurity and forensic analysis.

6Rights of Data Principals (Indian DPDP Act, 2023)

As a Data Principal under Indian law, you are entitled to the following rights:

1. Right to Access & Summary

Obtain a summary of personal data being processed and third parties with whom it has been shared.

2. Right to Correction & Erasure

Request correction of inaccurate details or erasure of your job applications or user account.

3. Right of Grievance Redressal

Lodge complaints directly with our designated Grievance Officer before escalating to the Data Protection Board of India.

4. Right to Nominate

Nominate an individual to exercise your rights in the event of death or incapacity.

Submit Data Rights or Deletion Request

7Grievance Redressal Officer

In compliance with Section 10(2) of the Digital Personal Data Protection Act, 2023, our designated Grievance Officer details are:

Grievance Officer: [OWNER TO CONFIRM: Full Name of Grievance Officer]

Designation: Data Protection & Compliance Officer

Postal Address: [OWNER TO CONFIRM: Registered Address, Nashik, Maharashtra, 422001, India]

Grievance Email: [OWNER TO CONFIRM: grievance@cngnearme.co.in / avinashpurkar03@gmail.com]

Response Timeline: All formal grievances are acknowledged within 24 hours and addressed within 7 business days.