Data governance
Privacy policy and data standards
Privacy Policy – HIMLOK
Effective Date: 13 October 2026
Website: HIMLOK – Apna Himachal, Apne Log
1. Introduction
Welcome to HIMLOK (“we,” “our,” “us,” or the “Platform”).
HIMLOK is a community-focused digital platform designed to connect people across Himachal Pradesh and beyond. Our goal is to help people discover local communities, share experiences, publish content, connect with others, explore local businesses, and stay connected with their region.
HIMLOK may offer social networking features such as user profiles, posts, photographs, comments, reactions, community groups, and messaging, depending on the features available on the Platform.
Although HIMLOK may provide features similar to those found on other social networking platforms, HIMLOK is an independent platform with its own identity, design, policies, and community purpose.
This Privacy Policy explains how we collect, use, store, disclose, and protect your personal information when you access or use HIMLOK through our website, mobile application, or related services.
By using HIMLOK, you acknowledge that you have read this Privacy Policy. Where consent is required by applicable law, we will obtain it appropriately.
2. Information We Collect
Depending on the features you use, HIMLOK may collect the following categories of information.
2.1 Information You Provide
When you register for an account or use our services, we may collect:
- Name or display name.
- Username and profile photograph.
- Email address and mobile number.
- Password or authentication information, handled securely.
- District, city, village, or other location details you choose to provide.
- Profile biography and interests.
- Posts, photographs, videos, comments, reactions, and other content you submit.
- Messages and information you provide when contacting other users or our support team.
- Business details submitted for local business listings.
- Information submitted through feedback forms, surveys, or support requests.
You should avoid publishing sensitive personal information publicly.
2.2 Information Collected Automatically
When you access HIMLOK, we may collect limited technical and usage information, including:
- IP address and approximate location derived from it.
- Browser type, device type, and operating system.
- Pages visited and interactions with platform features.
- Login timestamps, session information, and security logs.
- Cookies and similar technologies, where applicable.
The information collected depends on your device, browser settings, consent choices, and the features enabled on the Platform.
2.3 Location Information
HIMLOK may allow you to add a district, village, city, or other location to your profile or posts.
Precise device location will only be accessed if a relevant feature requires it and the appropriate permission or consent has been obtained. You can manage location permissions through your device settings.
We do not intend to make your precise location publicly available without an appropriate basis and clear disclosure.
2.4 Information from Third-Party Services
If HIMLOK supports third-party login services, such as Google Sign-In, we may receive information authorized by you through that service, such as your name, email address, and profile photograph.
The information received depends on the permissions you grant and the third-party provider’s policies.
3. How We Use Your Information
HIMLOK may use your information to:
- Create, maintain, and authenticate user accounts.
- Enable social networking and community participation.
- Display profiles and content according to your privacy settings.
- Allow users to publish posts, share photographs, comment, react, and participate in groups where these features are available.
- Help users discover local people, communities, events, services, and businesses.
- Provide customer support and respond to enquiries.
- Improve website performance, reliability, and user experience.
- Detect spam, fraudulent activity, impersonation, and security threats.
- Enforce our Terms and Conditions and Community Guidelines.
- Send important account, security, or service notifications.
- Send promotional communications where permitted by law and subject to applicable preferences.
- Comply with legal obligations and respond to lawful requests.
We will not use personal information for purposes incompatible with this policy without providing any notice or obtaining consent required by applicable law.
4. Public Profiles and User-Generated Content
HIMLOK may allow users to create profiles and share content with the community.
Depending on the feature and your privacy settings, information such as your display name, profile picture, posts, comments, photographs, and group participation may be visible to other users or the public.
Please remember:
- Content shared publicly may be viewed, copied, captured in screenshots, or shared by other people.
- Deleting a post may not remove copies already downloaded or shared by others.
- Search engines or third-party websites may retain information that was previously public.
- You should not publish another person’s private information without appropriate permission or legal authority.
HIMLOK will provide available privacy controls and content-management options as supported by the Platform.
5. Messages and Private Communications
If private messaging becomes available, HIMLOK will process the information necessary to deliver and maintain those communications.
Private messages may be stored and processed by the Platform to provide the service, maintain security, prevent abuse, and comply with applicable law.
Users should not assume that messages are end-to-end encrypted unless HIMLOK explicitly states that the relevant feature uses end-to-end encryption.
We will handle private communications in accordance with this Privacy Policy, applicable law, and any additional disclosures provided for the messaging feature.
6. Cookies and Similar Technologies
HIMLOK may use cookies or similar technologies to:
- Maintain login sessions.
- Remember preferences.
- Improve security.
- Understand website performance and usage.
- Support analytics and other enabled services.
Where required, we will obtain consent before using non-essential cookies or similar technologies.
You can manage cookies through your browser settings. Disabling certain cookies may affect the availability or functionality of some features.
7. Sharing and Disclosure of Information
HIMLOK does not sell personal information to third parties as a standalone data-selling business.
We may share information in the following circumstances:
7.1 With Other Users
Information and content you choose to make public may be visible to other users in accordance with the relevant feature and privacy settings.
7.2 Service Providers
We may share necessary information with trusted service providers that help us operate the Platform, such as:
- Website hosting and cloud infrastructure providers.
- Database and backup service providers.
- Authentication and account-management providers.
- Email and notification services.
- Security, fraud-prevention, and technical support providers.
- Analytics providers, if enabled.
Such providers should process information only for authorized purposes and under appropriate contractual or other safeguards.
7.3 Legal and Safety Requirements
We may disclose information where reasonably necessary to comply with applicable law, respond to valid legal process, protect the rights and safety of users, investigate fraud or abuse, or protect the security of HIMLOK.
7.4 Business Transfers
If HIMLOK undergoes a merger, restructuring, acquisition, or transfer of assets, personal information may be transferred as part of that transaction, subject to applicable legal requirements and appropriate safeguards.
8. Data Storage and Security
We take reasonable technical and organizational measures to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.
Depending on the system, these measures may include access controls, secure authentication, encryption where supported, backups, software updates, and security monitoring.
However, no website, application, or internet transmission can be guaranteed to be completely secure.
Users are responsible for protecting their account credentials and notifying us promptly if they suspect unauthorized access to their accounts.
9. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.
Retention periods may depend on:
- Whether your account remains active.
- The type of information involved.
- Security, fraud-prevention, and dispute-resolution requirements.
- Applicable legal and regulatory obligations.
When information is no longer required, we will take reasonable steps to delete it or anonymize it, subject to legal obligations, legitimate retention needs, and technical limitations.
10. Your Privacy Rights and Choices
Subject to applicable law, you may have the right to:
- Request access to personal information held about you.
- Request correction of inaccurate information.
- Request deletion of your account or eligible personal information.
- Withdraw consent where processing is based on consent.
- Manage profile visibility and available privacy settings.
- Opt out of optional promotional communications.
- Raise a complaint or submit a privacy-related request.
To exercise these rights, contact us using the details provided in the Contact Us section.
We may need to verify your identity before processing certain requests.
11. Account Deletion
If HIMLOK provides account deletion functionality, you may use the available account settings to request deletion.
Alternatively, you may contact us to request account deletion.
After a verified deletion request, we will handle your personal information in accordance with applicable law and our retention practices.
Some information may remain for a limited period where necessary for legal compliance, security, fraud prevention, dispute resolution, or legitimate technical purposes. Public copies previously shared by other users may not be fully removable from systems outside our control.
If account deletion is not yet available through the website, users may contact the Platform administrator for assistance.
12. Children’s Privacy
HIMLOK is intended for users who are legally permitted to use the relevant services under applicable law.
Children’s access, account creation, and processing of their personal information will be governed by applicable legal requirements, including any necessary parental consent or age-related safeguards.
We do not knowingly collect children’s personal information in violation of applicable law. If we become aware that personal information has been collected unlawfully, we will take appropriate steps to address the situation.
Parents or lawful guardians may contact us if they believe a child’s information has been provided to HIMLOK inappropriately.
13. Third-Party Links and Services
HIMLOK may contain links to external websites, business listings, maps, social media services, or other third-party platforms.
We do not control the privacy practices of independent third parties. When you visit or use an external service, its own privacy policy and terms may apply.
We encourage users to review the privacy policies of third-party services before sharing personal information with them.
14. International Data Transfers
Some service providers may process or store information in locations outside your state or country.
Where personal information is transferred across jurisdictions, HIMLOK will apply the safeguards and comply with the requirements applicable to that transfer.
15. Changes to This Privacy Policy
We may update this Privacy Policy as HIMLOK introduces new features, improves its services, or responds to legal and operational changes.
The updated version will be published on this page with a revised effective date.
Where required by applicable law, we will provide notice of material changes or obtain additional consent.
We encourage users to review this page periodically.
16. Contact Us
For privacy questions, data access or correction requests, account deletion, or complaints, contact the HIMLOK team.
Platform: HIMLOK – Apna Himachal, Apne Log
Website: [Insert your official HIMLOK website URL]
Email: [Insert your official support email address]
Address: [Insert your official business address, if applicable]
We will review privacy-related requests and respond in accordance with applicable law.
17. Applicable Law
This Privacy Policy is intended to be read consistently with applicable Indian data protection and information technology laws, including the Digital Personal Data Protection Act, 2023, and rules or requirements applicable to HIMLOK as they come into force.
The specific obligations applicable to HIMLOK will depend on the services offered, the personal data processed, the users involved, and the legal
Retention and confidentiality
We retain client information only for the period needed to deliver the agreed work and meet legal obligations. Client material is treated as confidential and is not shared outside HIMLOK except as the client directs or the law requires.
Consent is recorded at the start of each engagement and can be withdrawn in writing at any time.
Operational inputs and correspondence
Technical correspondence and operational inputs are used to answer requests, maintain service records, and improve the accuracy of specifications. They are kept in the same secure systems as other client records.
Correspondence is reviewed only by staff who need it to respond to you.
Secure storage and access
Stored records are protected by access controls that limit each file to named staff. Access is logged, and records are reviewed on a regular schedule to remove data that is no longer needed.
Where a third party processes data for us, we require written terms covering confidentiality and deletion.
Your privacy rights and recourse
You may request a copy of the information we hold about you, ask for corrections, or ask for deletion where the law allows. Requests are answered in writing, and you may raise a concern with us at any time using the contact page.
If a concern is not resolved, you may refer it to the relevant data protection authority in your jurisdiction.
