Legal
Privacy Policy
Effective date: 1 January 2025 · Last updated: 15 July 2026
Government of Meghalaya
Legal
Effective date: 1 January 2025 · Last updated: 15 July 2026
Jump to section
Summary (not a substitute for reading the full policy): The PRIME Meghalaya website collects minimal data — primarily technical logs and optional analytics. We do not sell data, we hold it securely within India, and you have clear rights to access, correct, or erase your data under the Digital Personal Data Protection Act, 2023. Registration and business data submitted on the PRIME Portal (portal.primemeghalaya.com) is governed by a separate policy on that portal.
This website is operated by the Department of Commerce & Industries, Government of Meghalaya, through the PRIME (Promotion and Incubation of Market-driven Enterprises) programme. PRIME is a government initiative and acts as the Data Fiduciary for personal data collected via this website.
Registered address: Department of Commerce & Industries, Government of Meghalaya, Shillong – 793001, Meghalaya, India.
For data-related queries, contact our Data Protection Officer (see Section 10).
This Privacy Policy applies to all visitors of primemeghalaya.com (the "Website"). It does not apply to the PRIME Portal (portal.primemeghalaya.com), which has its own separate privacy notice governing the processing of registration, business, and financial data submitted there.
This Website is primarily informational. We collect minimal personal data:
Technical data: IP address, browser type, device type, and pages visited — collected automatically through server logs and analytics tools.
Cookie data: Session and preference cookies (see Section 8 on Cookies).
Correspondence data: Name and email if you contact us via the grievance or contact mechanism.
We process personal data only for the purposes below and no other:
| Purpose | Legal Basis |
|---|---|
| Website operation and security | Legitimate interest of the State |
| Analytics to improve content and navigation | Consent (optional, cookie banner) |
| Responding to enquiries and grievances | Performance of a task in public interest |
| Compliance with legal obligations | Legal obligation under applicable law |
We do not sell, rent, or trade your personal data.
We may share data with:
Government departments and agencies of Meghalaya / Government of India for official functions.
Technical service providers (hosting, analytics) under data processing agreements that restrict their use of the data.
Law enforcement or regulatory bodies where required by law, court order, or for national security purposes.
We retain data only as long as necessary for the purpose for which it was collected:
Server logs and analytics data: 12 months from collection.
Cookie preference data: Up to 12 months in your browser.
Grievance correspondence: 3 years from resolution, in line with government record-keeping requirements.
Under the Digital Personal Data Protection Act, 2023 (India), you have the following rights regarding your personal data held by us:
Right to access: Request a summary of personal data we hold about you and how it has been processed.
Right to correction and erasure: Request correction of inaccurate data or erasure of data we no longer need.
Right to grievance redressal: Raise a complaint with our Data Protection Officer and, if unresolved within 30 days, to the Data Protection Board of India.
Right to nominate: Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.
To exercise any of these rights, contact our Data Protection Officer (Section 10).
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These include TLS encryption in transit, restricted access controls, and regular security reviews.
However, no internet transmission is entirely secure. If you have reason to believe your data has been compromised, please notify us immediately.
As required under the DPDP Act, 2023 and the Information Technology Act, 2000, we have designated a Grievance Officer for this Website:
Grievance Officer — PRIME Meghalaya
Department of Commerce & Industries, Government of Meghalaya
3rd Floor, Ri Kynmaw Complex, Nongrim Hills, Shillong – 793003, Meghalaya
Email: grievance@primemeghalaya.com
Office hours: Monday – Friday, 10:00 AM – 5:00 PM (excluding public holidays)
We will acknowledge your complaint within 3 working days and aim to resolve it within 30 days.
This website is not directed at children under 18 years of age and does not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, please contact our Grievance Officer and we will delete it promptly.
Personal data collected via this website is stored on servers located within India. If any processing requires data transfer outside India, it will be conducted in accordance with the provisions of the DPDP Act, 2023 and any subordinate rules published by the Government of India.
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the revised policy with an updated effective date. Continued use of the Website after any changes constitutes acceptance of the updated Policy.
This Privacy Policy is governed by and construed in accordance with the laws of India, including the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000, and applicable rules thereunder. Disputes shall be subject to the jurisdiction of competent courts in Shillong, Meghalaya.