Privacy Policy

Effective Date: 05.11.2025

At elmex, we are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your data, in compliance with the Digital Personal Data Protection Act, 2023 (India) and, where applicable, the General Data Protection Regulation (GDPR – EU).

  1. Information We Collect
  2. We may collect the following categories of data:

    • Identity Data: Full Name, Company/Organization Name
    • Contact Data: Email Address, Phone Number
    • Business Data: Service requirements, project details, proposals, and related communications or any other business-related data
    • Technical Data: IP address, browser type, operating system, cookies, and usage analytics
    • Other Information: Any information you voluntarily provide to us via forms, emails, or discussions

    We do not knowingly collect information from children under the age of 18.

  3. Purpose of Data Collection
  4. We collect and process data for the following purposes:

    • To communicate with you regarding proposals, quotes, invoices, and service updates or any other business-related matter
    • To personalize client interactions and provide tailored business solutions
    • To improve our website, services, and client experience through analytics
    • To comply with applicable legal and regulatory requirements
  5. Legal Basis for Processing (GDPR)
  6. Depending on your location, we process your personal data based on:

    • Contractual Necessity: To deliver requested services
    • Legitimate Interests: To engage with potential and existing clients
    • Legal Obligation: To comply with applicable laws and regulations
    • Consent: Where required, we will seek your consent for specific uses (e.g., newsletters, cookies)
  7. Data Sharing and Transfers
    • We do not sell, rent, or trade data
  8. Data Retention
  9. We retain collected data only as long as necessary for the purposes stated, or as required by law. For example:

    • Client/project data: up to 3 years after the end of the engagement
    • Contact/communication data: up to 2 years after the last interaction

    After expiry of the retention period, data will be securely deleted.

  10. Data Security
  11. We implement technical and organizational measures, including:

    • Encryption and secure transmission protocols
    • Role-based access controls
    • Secure storage and disposal of data
    • Monitoring and audits aligned with ISO 27001 Information Security standards

    However, no method of transmission or storage is 100% secure. We continuously work to enhance our security practices.

  12. Your Rights
  13. Under DPDP (India):

    • Right to Access personal data
    • Right to Correction and Erasure
    • Right to Nominate (appoint a nominee to exercise your rights in case of death/incapacity)

    Under GDPR (EU):

    • Right of Access to your data
    • Right to Rectification of inaccuracies
    • Right to Erasure (“Right to be Forgotten”)
    • Right to Restrict Processing
    • Right to Data Portability
    • Right to Object to processing
    • Right to Withdraw Consent (where processing is based on consent)

    To exercise these rights, contact us (details below). We will respond within applicable legal timelines.

  14. Cookies and Tracking
  15. We use cookies and similar technologies to:

    • Improve website performance
    • Analyse visitor interactions
    • Provide relevant content and user experience

    You may control cookies through your browser settings. Where required by law, we will request your consent before placing cookies.

  16. Contact Information
  17. For privacy-related queries, concerns, or to exercise your rights, please contact our Grievance Officer / Data Protection Officer (DPO):

    elmex Controls Pvt. Ltd.

    Email: pudarji@elmex.net

    Phone: +91 – 265 – 2642021

    Website: www.elmex.net

  18. Updates to This Policy
  19. We may update this Privacy Policy from time to time to reflect changes in laws, regulations, or our practices. Updates will be posted on this page with a revised “Effective Date.” We encourage you to review this policy periodically.