Privacy
Policy

Who We Are

Data Controller:
Sree Guru Precision Manufacturing Solutions Pvt. Ltd.
ALEAP Industrial Estate, Kukatpally, Hyderabad — 500 072, Telangana, India
Email: info@sgpmsolutions.com

For any privacy-related queries or requests, write to us at the email above with the subject line "Privacy Request".

Information We Collect

Information you provide directly

• Enquiry and contact forms — name, company name, email address, phone number, and any project details you choose to share.
• Email correspondence — communications you send to us, including attachments such as drawings, specifications or documents.
• Order and payment information — billing address, GSTIN, bank or payment-gateway details (processed by our payment processor; we do not store full card numbers).
• Documents uploaded or shared — technical drawings, product briefs or other files you share with us in the course of a project.

Information collected automatically

• Usage data — IP address, browser type and version, pages visited, time and date of visit, referring URL, and time spent on pages.
• Cookies and similar technologies — see Section 6 below.
• Device information — operating system, screen resolution, and device type, collected to optimise the site experience.

Information from third parties

If you purchase or review our products on Amazon.in or Amazon.com, Amazon may share order or fulfilment data with us to the extent necessary to process your purchase, handle a return, or respond to a customer-service query. We do not control Amazon's own data practices; please review Amazon's Privacy Notice for details.

How We Use Your Information

We use the information we collect for the following purposes:

• Responding to enquiries — to evaluate your project requirements and provide a proposal or quotation.
• Delivering services — to plan, execute and deliver contracted manufacturing, development, or regulatory services.
• Processing payments — to generate invoices, collect advance or milestone payments, and reconcile accounts.
• Order fulfilment (Amazon) — to process purchases, handle shipping, returns, and customer-service requests for products listed on Amazon.
• Legal and regulatory compliance — to satisfy obligations under the Companies Act, GST Act, FEMA, and other applicable Indian and international regulations.
• Website improvement — to understand how visitors use our site and to improve its content and performance.
• Communication — to send project updates, delivery notifications, or service-related notices. We do not send marketing email without your consent.

Legal Basis for Processing

For visitors and customers in the European Economic Area or the United Kingdom, our legal bases under the GDPR are:

• Contract performance — processing necessary to fulfil an order or service agreement you have entered into with us.
• Legitimate interests — responding to enquiries, operating and improving our website, and maintaining business records, where these interests are not overridden by your rights.
• Legal obligation — complying with tax, accounting, and regulatory requirements.
• Consent — where we rely on consent (e.g. optional cookies), you may withdraw it at any time without affecting processing that took place before withdrawal.

For visitors and customers in India, we process your data in accordance with the Information Technology Act 2000, the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules 2011, and the Digital Personal Data Protection Act 2023 (DPDP Act) to the extent applicable and in force.

Sharing Your Information

We do not sell your personal data. We share it only in the following limited circumstances:

• Payment processors — Razorpay (India) and PayPal (international) process payments on our behalf and are bound by their own privacy and PCI-DSS obligations.
• Amazon — Order and shipping data is shared with Amazon to the minimum extent required to fulfil marketplace transactions.
• Logistics and courier partners — name, address and contact number are shared with courier providers solely to deliver your order.
• Professional advisers — auditors, lawyers, or tax consultants under strict confidentiality obligations.
• Regulatory and legal authorities — when required by Indian law, court order, or a lawful governmental request.
• Business transfers — in the event of a merger, acquisition, or asset sale, your data may be transferred as part of that transaction; we will notify you in advance where required by law.

Cookies & Analytics

Our website uses cookies and similar technologies. A cookie is a small text file placed on your device. We use:

• Essential cookies — required for the website to function correctly (e.g. session management). These cannot be disabled.
• Analytics cookies — we may use tools such as Google Analytics to understand page visits, traffic sources and user behaviour in aggregate. These cookies collect anonymised data.

You can manage or disable non-essential cookies through your browser settings. Note that disabling cookies may affect some website functionality. Because we do not use targeted advertising, no advertising or tracking cookies from third parties are placed on our site.

Data Retention

We retain your personal data only for as long as necessary:

• Enquiries that did not result in a contract — up to 12 months from your last contact.
• Project and contract records — 8 years after project completion, to satisfy statutory accounting and tax obligations under the Companies Act and Income Tax Act.
• Invoice and payment records — 8 years, as required by Indian GST regulations.
• Amazon order records — as required by Amazon's seller policies and applicable consumer protection law.
• Website analytics data — aggregate data is retained indefinitely; individual session data is typically purged after 26 months in line with Google Analytics defaults.

After the applicable retention period, we securely delete or anonymise your data.

Security

We implement reasonable technical and organisational security measures — including TLS encryption for data in transit, access controls, and secure storage — to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our payment processing partners maintain PCI-DSS compliance. No method of transmission over the internet is completely secure, however, and we cannot guarantee absolute security. In the event of a data breach that is likely to result in high risk to your rights, we will notify you and, where required, the relevant authority within the timeframes prescribed by applicable law.

International Transfers

Our primary operations and servers are located in India. When we engage service providers outside India (for example, cloud infrastructure or payment processing for international transactions), we ensure appropriate safeguards are in place, such as standard contractual clauses or reliance on adequacy decisions, to the extent required by applicable law. By using our services from outside India, you consent to the transfer of your data to India for processing in accordance with this Policy.

Your Rights

Depending on where you are located, you may have the following rights regarding your personal data:

India (DPDP Act 2023)

• The right to access personal data we hold about you.
• The right to correct inaccurate or incomplete data.
• The right to erasure, where we no longer have a lawful basis to retain your data.
• The right to nominate another individual to exercise these rights on your behalf.
• The right to grievance redressal — to raise a complaint with our data protection contact, and thereafter with the Data Protection Board of India once constituted.

European Economic Area & United Kingdom (GDPR / UK GDPR)

• Access — obtain a copy of your personal data.
• Rectification — correct inaccurate data.
• Erasure — request deletion where there is no overriding legal basis to retain it.
• Restriction — ask us to pause processing while a dispute is resolved.
• Portability — receive your data in a structured, machine-readable format.
• Object — object to processing based on legitimate interests.
• Withdraw consent — where processing is based on consent.
• Lodge a complaint — with your local supervisory authority (e.g. the ICO in the UK or the relevant EU data protection authority).

To exercise any of these rights, email us at info@sgpmsolutions.com with the subject line "Privacy Request". We will respond within 30 days. We may ask you to verify your identity before processing the request.

Children's Privacy

Our website and services are not directed at children under 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected information from a child, please contact us and we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. The "Last updated" date at the top of this page will always show the date of the most recent revision. For significant changes, we will post a notice on our website. Continued use of our website after any update constitutes acceptance of the revised Policy.

Contact Us

For any questions about this Privacy Policy or to exercise your rights, please contact us:

Email: info@sgpmsolutions.com
Subject line: Privacy Request
Address: Sree Guru Precision Manufacturing Solutions Pvt. Ltd.,
ALEAP Industrial Estate, Kukatpally, Hyderabad — 500 072, Telangana, India

Also see our Terms & Conditions for the contractual terms that govern use of our services and online purchases.