Privacy policy

The data fiduciary under the Digital Personal Data Protection Act: the legal name, the corporate identity number, and the registered office and works addresses. All of it is read from site settings and shown at the foot of every page, so it is stated here once and kept in one place.

This website and everything on it: the forms, the documents you can download, and the analytics that run only after you agree to them. It does not cover a contract you sign with us, which says what it says on its own terms.

One itemised list per purpose rather than one long list: answering an enquiry or a request for a quotation; sending a document you asked for; considering a job application; handling a complaint; measuring how the site is used, after consent; and keeping the site secure. Each entry names the fields collected for that purpose and nothing more.

Consent is given by the checkbox on a form and by the cookie banner. Withdrawing it has to be as easy as giving it: the link in the footer reopens the banner, and an email to the address below withdraws the rest. This section says what stops when consent is withdrawn, and what we still have to keep because the law requires it.

[LAWYER: confirm the consent-notice wording against the DPDP Rules, including the itemised notice and the language options the Rules require]

A short summary and a link to the cookie notice, which carries the full list. The summary says the one thing most readers want: nothing that identifies you is stored before you choose.

Named, not described in the abstract: the hosting provider, Cloudflare, Google Analytics after consent, the error-reporting service, the uptime monitor and the email provider. This section says plainly that some of them operate outside India and what that means for the reader.

[LAWYER: confirm the cross-border processing disclosure wording]

A period per purpose: an enquiry until it is closed and then for the stated period, an application for the stated period, suspected spam removed after thirty days, and a generated export removed after twenty-four hours. Periods are facts the company sets, not defaults chosen here.

[LAWYER: confirm the retention periods for leads and for job applications with the company]

Under the DPDP Act: to ask what we hold about you, to have it corrected, to have it erased, to nominate someone to act for you, and to raise a grievance. This section says how to exercise each one, in the fewest steps we can offer.

The grievance contact and the period within which we answer. The contact itself is shown below from settings, so it stays right when the person changes.

[LAWYER: confirm the response period the DPDP Rules require]

This site is meant for people buying, specifying or supplying for their organisation, and is not directed at children. We do not knowingly collect data about them.

In plain words rather than a list of acronyms: the site is served over an encrypted connection, administrative access needs a second factor, uploads are checked, and every change to published content is recorded against the person who made it.

The date at the top is the date this page last changed. A change that affects what you consented to re-opens the banner rather than passing quietly.

Where to write about this policy, and the postal address for anyone who would rather write a letter.