Data Protection Policy

Effective Date: October 15, 2025

Last Updated: October 15, 2025

1. Introduction

Sanjay Tools & Accessories (“we,” “us,” “our,” or “Company”) is committed to protecting your personal data and respecting your privacy rights. This Personal Data Protection Policy (“Policy”) explains how we collect, use, store, and protect your personal data in compliance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and other applicable laws of India.

As a leading provider of Leading Industrial Products, we understand the importance of maintaining the confidentiality and security of the personal data entrusted to us by our clients, partners, and website visitors.

2. Definitions

For the purposes of this Policy, the following definitions apply:

“Personal Data” means any data about an individual who is identifiable by or in relation to such data

“Data Principal” means the individual to whom the personal data relates

“Data Fiduciary” means Sanjay Tools & Accessories, which determines the purpose and means of processing personal data

“Processing” includes collection, recording, organisation, structuring, storage, adaptation, retrieval, use, disclosure, erasure or destruction of personal data

“DPDP Act” means the Digital Personal Data Protection Act, 2023

3. Personal Data We Collect

We may collect the following categories of personal data:

3.1 Contact Information

Name and title

Email address

Phone number

Business address

Company name and designation

3.2 Business Information

Industry sector

Project requirements and specifications

Technical requirements for pilot plants

Business correspondence and communications

3.3 Website Usage Data

IP address

Browser type and version

Device information

Pages visited and time spent on our website

Cookies and similar tracking technologies

3.4 Professional Information

Professional qualifications

Areas of expertise

Project history (where relevant to our services)

4. How We Collect Personal Data – 

We collect personal data through the following methods:

Direct Collection: When you contact us through our website, email, phone, or in-person meetings

Website Forms: When you fill out inquiry forms, contact forms, or request information

Business Communications: During the course of our business relationship

Website Analytics: Through cookies and similar technologies on our website

Third Parties: From our business partners or vendors with proper consent

5. Legal Basis and Purpose of Processing

We process your personal data for the following lawful purposes:

5.1 With Your Consent

Responding to your inquiries about our pilot plant solutions

Providing information about our services and capabilities

Marketing communications (only with explicit consent)

Newsletter subscriptions

5.2 Legitimate Business Interests

Managing client relationships

Project development and execution

Business development activities

Improving our services and website functionality

Maintaining business records

5.3 Legal Compliance

Complying with applicable laws and regulations

Fulfilling contractual obligations

Responding to legal requests from authorities

6. How We Use Your Personal Data

Your personal data is used exclusively for:

Service Delivery: Providing pilot plant solutions and process systems

Communication: Responding to inquiries and maintaining business correspondence

Project Management: Managing and executing pilot plant projects

Customer Support: Providing technical support and after-sales service

Business Development: Identifying opportunities for collaboration

Website Improvement: Analyzing website usage to enhance user experience

Legal Compliance: Meeting regulatory and legal requirements

7. Data Sharing and Disclosure

We do not sell, trade, or rent your personal data to third parties. We may share your personal data only in the following circumstances:

7.1 Service Providers

Trusted vendors and contractors who assist in providing our services

IT service providers for website hosting and maintenance

Professional advisors (lawyers, accountants, consultants)

7.2 Legal Requirements

When required by law or court order

To protect our legal rights and interests

In case of business reorganization or transfer (with proper notice)

7.3 Consent-Based Sharing

With your explicit consent for specific purposes

With project partners when necessary for service delivery

All third parties are contractually bound to maintain the confidentiality and security of your personal data.

8. Data Security Measures

We implement appropriate technical and organizational measures to protect your personal data:

8.1 Technical Safeguards

Encryption of data in transit and at rest

Secure server infrastructure and hosting

Regular security updates and patches

Access controls and authentication mechanisms

Firewalls and intrusion detection systems

8.2 Organizational Measures

Staff training on data protection

Regular security audits and assessments

Incident response procedures

Data access limitations on a need-to-know basis

Secure disposal of data when no longer required

9. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Policy:

Business Inquiries: 3 years from last contact

Client Records: 7 years after project completion (for legal compliance)

Website Analytics: 2 years from collection

Marketing Consent: Until consent is withdrawn

Legal Requirements: As required by applicable laws

Data will be securely deleted or anonymized when no longer required.

10. Your Rights as a Data Principal

Under the DPDP Act, you have the following rights regarding your personal data:

10.1 Right to Access

Request information about what personal data we hold about you

Obtain details about how your data is being processed

10.2 Right to Correction

Request correction of inaccurate or incomplete personal data

Update your information to ensure accuracy

10.3 Right to Erasure

Request deletion of your personal data when no longer necessary

Withdraw consent for processing (where applicable)

10.4 Right to Grievance Redressal

File complaints regarding data processing

Seek a resolution through our grievance mechanism

10.5 Right to Nominate

Nominate a representative to exercise your rights in case of incapacity

11. Consent Management

11.1 Obtaining Consent

When we require your consent for processing personal data, we ensure it is:

Free and voluntary

Specific to the purpose

Informed with clear information

Unambiguous with clear affirmative action

11.2 Withdrawing Consent

You can withdraw your consent at any time by:

Emailing us at [info@sanjaytools.com]

Calling our Chief Protection Officer

Using unsubscribe links in our communications

Withdrawal of consent will not affect the lawfulness of processing before withdrawal.

12. Cross-Border Data Transfers

We primarily process data within India. Any transfer of personal data outside India will be conducted in accordance with the DPDP Act and applicable regulations, ensuring adequate protection of your data.

13. Data Breach Notification

In the event of a personal data breach that may pose a risk to your rights:

We will notify the Data Protection Board of India within 72 hours

We will inform affected Data Principals promptly

We will take immediate remedial measures to minimize the impact

14. Grievance Redressal Mechanism

14.1 Internal Grievance Process

If you have any concerns about our data processing practices: Step 1: Contact our Grievance Officer at:

Email: info@sanjaytools.com

Phone: +9102046925634, +9102046925638, +9102046925639

Address: 1st Floor, Parshwanath Industrial Premises, Plot No. T-71-1/A3, General Block, MIDC Bhosari, Pune 411026, Maharashtra, India

Step 2: We will acknowledge your complaint within 24 hours
Step 3: We will investigate and respond within 30 days
Step 4: If unsatisfied, you may escalate to the Data Protection Board of India

14.2 External Recourse

You have the right to approach the Data Protection Board of India directly if you are not satisfied with our response or if we fail to respond within the prescribed timeframe.

15. Contact Information

For any questions, concerns, or requests related to this Policy or your personal data:

Sanjay Tools & Accessories
Chief Protection Officer
Email: info@sanjaytools.com

16. Updates to This Policy

We may update this Policy from time to time to reflect changes in:

Legal requirements

Business practices

Technology developments

Service offerings

We will notify you of any material changes by:

Posting the updated Policy on our website

Sending email notifications to registered users

Providing prominent notice on our website

The “Last Updated” date at the top of this Policy indicates when it was last revised.

17. Compliance Statement

Sanjay Tools & Accessories is committed to full compliance with the DPDP Act and maintains the highest standards of data protection. We regularly review and update our data protection practices to ensure ongoing compliance with evolving legal requirements.