Privacy Policy

1. Who we are

[Registered legal entity name], having its registered office at [Registered office address], [City], [State], India ([CIN / GSTIN / IEC]), is the controller responsible for personal data processed in connection with this website and with business enquiries made to us.

You can contact us at [email protected].

2. Scope of this Policy

This Policy explains how we handle personal data of business contacts, website visitors and prospective and existing customers. It does not apply to third-party websites we link to.

3. Personal data we collect

We collect only what we need to respond to business enquiries and to supply goods:

• Information you provide directly when you contact us by email, our enquiry form or WhatsApp — typically your name, company, business email address, telephone number, country, and the content of your enquiry (such as the pigment grade, application and volume you require)
• Business relationship data — order, shipment, documentation and correspondence records where you become a customer
• Technical data — our hosting provider processes standard server log data, which may include IP address, browser type and the pages requested, for security and operation of the website
• We do not collect special categories of personal data, and we do not carry out automated decision-making or profiling

4. How our enquiry form works

Our website is a static site. The enquiry form does not transmit your details to a server or database on submission — it opens a message in your own email client, which you choose to send. Personal data therefore reaches us only when you send that email, or otherwise contact us.

5. Purposes and legal bases

We process personal data for the following purposes and on the following legal bases under the EU/UK General Data Protection Regulation, where applicable:

• To respond to your enquiry and provide quotations, samples and documentation — performance of a contract or steps taken at your request prior to entering into a contract, and our legitimate interests in conducting business correspondence
• To supply goods, process orders and manage the customer relationship — performance of a contract
• To comply with legal, tax, customs and export control obligations — compliance with a legal obligation
• To operate, secure and improve the website — our legitimate interests in running a safe and functional site
• Where we rely on legitimate interests, we have assessed that these are not overridden by your rights and freedoms

6. Disclosure to third parties

We do not sell personal data. We may disclose personal data to:

• Service providers who process data on our behalf, such as our website hosting provider and email provider, under appropriate contractual safeguards
• Freight forwarders, customs brokers, banks and insurers, where necessary to perform a contract of sale
• Professional advisers, and competent authorities where required by law
• Google LLC, in respect of web fonts served from Google servers when you load a page, which involves your IP address being processed by Google; and Meta Platforms, if you choose to contact us via WhatsApp, in accordance with their respective privacy policies

7. International transfers

We are established in India. If you are located in the European Economic Area or the United Kingdom, personal data you send to us will be transferred to and processed in India, which is not the subject of an adequacy decision.

Where required, such transfers are made on the basis of appropriate safeguards, including the European Commission's Standard Contractual Clauses, or on the basis that the transfer is necessary for the performance of a contract with you or for steps taken at your request prior to entering into a contract. You may request further information using the contact details below.

8. Retention

We keep personal data only for as long as necessary for the purposes for which it was collected. Enquiry correspondence that does not lead to a business relationship is ordinarily retained for up to twenty-four (24) months. Transaction, export and accounting records are retained for the periods required by applicable tax, customs and companies legislation.

9. Security

We maintain appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, loss or destruction. No transmission over the internet can be guaranteed to be completely secure, and any transmission is at your own risk.

10. Your rights

Subject to applicable law, you may have the right to request access to your personal data; rectification of inaccurate data; erasure; restriction of processing; portability; and to object to processing carried out on the basis of legitimate interests. Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

Under India's Digital Personal Data Protection Act, 2023, you may also have rights of access, correction, erasure and grievance redressal, and the right to nominate another individual to exercise your rights.

To exercise any right, contact us at [email protected]. We may need to verify your identity. We will respond within the period required by applicable law.

If you are in the EEA or UK, you have the right to lodge a complaint with your local supervisory authority. In India, you may complain to the Data Protection Board of India if you are dissatisfied with our response.

11. Grievance officer

For the purposes of applicable Indian law, our grievance officer may be contacted at [email protected], or in writing at [Registered legal entity name], [Registered office address], [City], [State], India. Complaints will be acknowledged and addressed within the period prescribed by law.

12. Children

The website and our products are directed at businesses. We do not knowingly collect personal data from children.

13. Changes to this Policy

We may update this Policy from time to time. The date below indicates when it was last revised. Material changes will be notified by posting the updated Policy on this page.