Privacy Policy

1. Introduction and scope

This Privacy Policy is published by AQUASTAG Technologies LLP (referred to as “AQUASTAG”, “the Company”, “we”, “us” or “our”), a limited liability partnership incorporated under the Limited Liability Partnership Act, 2008, having its registered office at Unit No. 203, Suite 579, SBR CV Towers, Sector 1, Sy No. 64, HUDA Techno Enclave, Madhapur, Hyderabad, Telangana 500081, India.

This Policy governs the collection, receipt, possession, storage, use, transfer, processing and disclosure of personal data obtained through the website located at www.aquastag.com (the “Website”) and through related commercial correspondence. It is published in compliance with the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, each as amended from time to time.

By accessing the Website, submitting an enquiry, or otherwise providing information to us, you confirm that you have read and understood this Policy. Where you provide personal data of any third party, you warrant that you are lawfully authorised to do so.

2. Personal data we collect

2.1 Information you provide directly

When you submit an enquiry through the Website, we collect:

• Your full name;
• Your email address;
• Your telephone or mobile number, including international dialling code;
• Your company or organisation name, where supplied;
• Your city or location, where supplied;
• The nature of your requirement, indicative capacity or application details, and the contents of your message; and
• Any further information you voluntarily disclose in the course of subsequent correspondence, including water analysis reports, site drawings and technical specifications.

2.2 Information collected automatically

Our hosting and content delivery infrastructure records limited technical information automatically, including internet protocol address, browser type and version, device type, operating system, referring page, pages accessed, and date and time of access. This information is used for security, fraud prevention, aggregate traffic analysis and service reliability. Where such information can be linked to an identified individual, it is treated as personal data under this Policy.

2.3 Information we do not collect

We do not collect financial information such as bank account details, credit or debit card numbers, or payment instrument details through this Website. The Website does not operate an online store or payment gateway. We do not knowingly collect passwords, biometric data, health data, or any category of sensitive personal data through the Website. You should not transmit such information to us through the enquiry form.

3. Purposes of processing

Personal data is processed strictly for the following specified purposes:

• Responding to your enquiry — including sending an automated acknowledgement, preparing a technical recommendation, and issuing a quotation;
• Performing a contract — including order processing, project execution, installation scheduling, commissioning and after-sales service;
• Service and maintenance administration — including maintenance scheduling, service history records and warranty administration;
• Internal record keeping — including accounting, taxation, audit and statutory compliance obligations;
• Website security and integrity — including detection and prevention of fraud, abuse and automated attacks; and
• Legal compliance — including responding to lawful requests from governmental, regulatory, judicial or law enforcement authorities.

We do not use your personal data for automated decision-making that produces legal effects concerning you, and we do not undertake profiling for behavioural advertising purposes.

4. Lawful basis and consent

Where consent is the lawful basis for processing, that consent is obtained through an express, affirmative act — specifically, the consent checkbox on our enquiry form, which is not pre-ticked. Consent so obtained is free, specific, informed, unconditional and unambiguous, and is limited to the purposes stated in Clause 3.

You may withdraw your consent at any time by writing to info@aquastag.com. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal. Where withdrawal prevents us from performing an existing contract or discharging a statutory obligation, we will inform you of the consequences.

5. Disclosure and sharing

We do not sell, rent, trade or licence personal data to any third party for marketing or any other consideration. Personal data may be disclosed only in the following circumstances:

• Processors acting on our instructions — including our email delivery provider, website hosting provider and IT support contractors, each engaged under contractual terms requiring confidentiality and security safeguards, and permitted to process personal data only as instructed by us;
• Professional advisers — including our auditors, legal counsel and insurers, where necessary and under a duty of confidentiality;
• Statutory and regulatory disclosure — where required by any applicable law, rule, regulation, court order or direction of a competent authority; and
• Corporate transaction — in connection with any merger, amalgamation, restructuring or transfer of business, subject to the transferee being bound by obligations no less protective than those in this Policy.

6. Cross-border transfer

Certain of our service providers, including our transactional email provider and hosting infrastructure, may store or process data on servers located outside India. Such transfers are undertaken in accordance with Section 16 of the Digital Personal Data Protection Act, 2023 and are made only to jurisdictions not restricted by the Central Government, under contractual arrangements providing appropriate safeguards.

7. Data retention

Personal data is retained only for as long as is necessary for the purposes for which it was collected, or for such longer period as is required to comply with statutory obligations under applicable tax, corporate and commercial law.

• Enquiries that do not result in a contract are retained for a period of up to twenty-four (24) months from the date of last correspondence, after which they are deleted or irreversibly anonymised;
• Records relating to executed contracts are retained for the statutory retention periods applicable under Indian law, including those under the Income-tax Act, 1961 and the Central Goods and Services Tax Act, 2017; and
• Server and security logs are retained for a limited period consistent with security and diagnostic requirements.

8. Security safeguards

We implement reasonable security practices and procedures commensurate with the nature of the personal data held, including transport-layer encryption (HTTPS) across the Website, access controls restricting personal data to authorised personnel on a need-to-know basis, credential management for third-party processing services, and automated measures to detect and limit abusive submissions.

Notwithstanding these measures, no method of transmission over the internet or method of electronic storage is completely secure. While we take the safeguarding of personal data seriously, we cannot and do not guarantee absolute security, and any transmission of data to us is undertaken at your own risk to that extent permitted by law.

9. Your rights as a Data Principal

Subject to and in accordance with the Digital Personal Data Protection Act, 2023, you have the right to:

• Access — obtain a summary of the personal data we process about you and the processing activities undertaken;
• Correction and erasure — request correction of inaccurate or misleading data, completion of incomplete data, updating of data, and erasure of data no longer necessary for the purpose for which it was collected;
• Grievance redressal — have your grievance addressed by us in the first instance, as set out in Clause 12; and
• Nomination — nominate another individual to exercise your rights in the event of your death or incapacity.

Requests may be made in writing to info@aquastag.com. We will respond within the period prescribed by applicable law. We may require reasonable verification of your identity before acting on a request, and may decline requests that are manifestly unfounded, repetitive, or that would prejudice the rights of others or our legal obligations.

10. Cookies and similar technologies

The Website is designed to operate without behavioural advertising cookies or third-party marketing trackers. Fonts are self-hosted, so no request is made to any external font provider when you browse this Website.

Certain pages embed a third-party map service to display our office location. Where such an embed is loaded, the third-party provider may set cookies and receive technical data including your internet protocol address, governed by that provider’s own privacy policy over which we exercise no control. You may prevent this by not loading pages containing the map, or by configuring your browser to block third-party content.

11. Children

The Website is directed at businesses and adult consumers and is not intended for children. We do not knowingly collect personal data of any individual below the age of eighteen (18) years. If we become aware that such data has been collected without verifiable consent of a parent or lawful guardian, we will delete it promptly.

12. Grievance redressal

In accordance with the Information Technology Act, 2000 and the rules made thereunder, and with the Digital Personal Data Protection Act, 2023, any grievance concerning the processing of personal data may be addressed to our Grievance Officer:

• Designation: Grievance Officer / Data Protection Officer
• Entity: AQUASTAG Technologies LLP
• Address: Unit No. 203, Suite 579, SBR CV Towers, Sector 1, Sy No. 64, HUDA Techno Enclave, Madhapur, Hyderabad, Telangana 500081, India
• Email: info@aquastag.com
• Telephone: +91 93477 62937
• Working hours: Monday to Saturday, 10:00 AM – 6:00 PM IST

Grievances will be acknowledged within a reasonable period and resolved within the timelines prescribed under applicable law.

13. Amendments

We reserve the right to amend this Policy at any time to reflect changes in our practices, technology, legal requirements or business operations. The revised Policy takes effect from the date of publication on this page, and the “Effective date” above will be updated accordingly. Continued use of the Website after publication constitutes acceptance of the amended Policy.

14. Governing law and jurisdiction

This Policy is governed by and construed in accordance with the laws of India. Subject to the dispute resolution provisions of our Terms & Conditions, the courts and tribunals at Hyderabad, Telangana, India shall have exclusive jurisdiction over any dispute arising out of or in connection with this Policy.