Privacy Policy

Our commitment to your privacy

Indo-Sattvai Trade And Investment Pvt. Ltd. ("Indo Sattvai", "we", "us", or "our") is committed to protecting the privacy and personal data of individuals who interact with our website at indosattvai.com (the "Site") and the services described therein.

This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and your rights in relation to it. By using our Site or submitting an enquiry, you acknowledge that you have read and understood this Policy.

What personal data we collect

We collect personal data only when you actively provide it to us — we do not buy data, scrape social media, or collect data from third-party brokers. The categories of data we may collect include:

• Identification data — your full name and job title when you submit a contact or consultation form.
• Contact data — email address and telephone number provided in forms.
• Organisation data — company name, country of operation, and sector, provided in enquiry forms.
• Enquiry content — the message or brief you submit describing your trade, investment, or advisory need.
• Technical data — IP address, browser type, operating system, referral URL, and pages visited, collected automatically via analytics tools when you browse the Site.
• Cookies and similar technologies — see the Cookies section below.

We do not collect sensitive personal data (such as financial account details, biometric data, health information, or government identification numbers) through this Site.

Purposes of processing

We use the personal data we collect for the following purposes:

1. Responding to enquiries — to review and respond to messages submitted via our contact and consultation forms.
2. Service delivery — to provide trade facilitation, investment advisory, and market-entry services where you have engaged us.
3. Business communications — to send relevant updates, briefings, or sector reports where you have given explicit consent.
4. Site analytics — to understand how visitors use the Site so we can improve content and user experience.
5. Legal compliance — to meet obligations under applicable Indian law and legitimate regulatory requirements.

We will not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

Who we share data with

We do not sell, rent, or trade your personal data to third parties. We may share it only in the following limited circumstances:

• Service providers — trusted third-party processors (such as email delivery services and analytics platforms) who act on our instructions and are bound by data processing agreements. Current processors include Google Analytics and EmailJS.
• Professional advisors — lawyers, accountants, or auditors where necessary in the course of their professional services, subject to confidentiality obligations.
• Legal obligations — where disclosure is required by applicable law, court order, or the lawful request of a competent government authority.
• Business transfers — in the event of a merger, acquisition, or restructuring, your data may be transferred to the successor entity, subject to equivalent privacy protections.

Cookies and analytics

Our Site uses cookies and similar tracking technologies. A cookie is a small text file placed on your device by a website.

We use the following categories of cookies:

• Strictly necessary cookies — required for the Site to function (e.g., remembering your cookie consent preference). These cannot be disabled.
• Analytics cookies — placed by Google Analytics to collect anonymised data about how visitors use the Site (pages visited, time on site, referral source). This data is aggregated and does not identify you personally.

You can manage or disable analytics cookies via the cookie consent banner on your first visit, or by adjusting your browser settings. Note that disabling cookies may affect Site functionality.

How long we keep your data

We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law:

• Enquiry and contact form data — retained for up to 3 years from the date of last contact, to allow follow-up and record-keeping.
• Client engagement data — retained for 7 years after the conclusion of an engagement, in accordance with Indian legal and accounting requirements.
• Analytics data — retained by Google Analytics according to the retention period configured in our account (typically 14 months).

After the applicable retention period, personal data is securely deleted or anonymised.

Rights over your personal data

Depending on your jurisdiction, you may have the following rights in relation to your personal data:

• Right of access — to request a copy of the personal data we hold about you.
• Right of correction — to request correction of inaccurate or incomplete data.
• Right of erasure — to request deletion of your data, subject to our legal obligations to retain certain records.
• Right to withdraw consent — where processing is based on consent, to withdraw it at any time without affecting the lawfulness of prior processing.
• Right to object — to object to processing based on our legitimate interests.
• Right to data portability — to receive your data in a structured, machine-readable format (where applicable under GDPR).

To exercise any of these rights, please contact us at the details in the Contact Us section below. We will respond within 30 days. We may need to verify your identity before processing the request.

How we protect your data

We implement appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, disclosure, alteration, or destruction. These include:

• HTTPS encryption for all data transmitted via the Site.
• Strict Content Security Policy (CSP) headers to prevent cross-site scripting.
• Access controls limiting staff access to personal data on a need-to-know basis.
• Regular review of our data handling practices.

No method of transmission over the Internet is entirely secure. While we strive to protect your personal data, we cannot guarantee absolute security and accept no liability for breaches that are beyond our reasonable control.

Cross-border data transfers

Indo Sattvai is headquartered in India. If you access the Site from outside India, your data may be transferred to and processed in India. By using the Site, you consent to such transfer.

Where we use third-party service providers (e.g., Google Analytics, EmailJS) that process data outside India or the EEA, we ensure appropriate safeguards are in place, including contractual protections consistent with applicable data protection law.

Updates to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last Updated" date at the top of this page.

We encourage you to review this Policy periodically. Continued use of the Site after changes constitutes acceptance of the updated Policy.

Data protection enquiries

For any questions about this Privacy Policy, to exercise your data rights, or to raise a concern about how we handle your personal data, please contact us:

• Email: vaibhav.sirsat@indosattvai.com
• Post: Indo-Sattvai Trade And Investment Pvt. Ltd., New Delhi, India

If you are in the EEA or UK and believe we have not adequately addressed your concern, you have the right to lodge a complaint with your local data protection supervisory authority.