प्रभावी तिथि: 29 अक्टूबर 2026अंतिम अपडेट: 29 अक्टूबर 2026
This Privacy Policy explains how Malkar Industries ("Malkar Industries", "we", "us", "our") collects, uses, shares and protects personal data when you visit malkar.in (the "Website"), submit a form, subscribe to updates or otherwise contact us. It applies to the Website and to the brands and product lines presented on it, including Rapid, Apex and Malkar.
It is published in accordance with the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and is intended to meet the requirements of the Digital Personal Data Protection Act, 2023 ("DPDP Act") and, for visitors in the European Economic Area or the United Kingdom, the General Data Protection Regulation ("GDPR").
1. Who we are
The data fiduciary (under the DPDP Act) and controller (under the GDPR) of your personal data is:
Malkar Industries, a partnership firm D-260, MIDC TTC Industrial Area, Turbhe, Navi Mumbai, Maharashtra 400705, India GSTIN: 27AAFFM6816M1ZU Udyam Registration Number: UDYAM-MH-33-0041427
You can reach us about privacy matters through our Grievance Officer (section 13).
2. Personal data we collect
We collect only what we need for the purposes in section 3.
Information you give us
| Where | What we collect |
|---|---|
| Enquiry and quotation forms | Name, email, phone number, company, city, product or service of interest, quantity, your message, and any drawings or files you attach |
| Contact form | Name, email, phone number (optional), company, country, topic, product line, your message, and any files you attach |
| Job applications | Name, email, phone number, the position, your answers to the application questions, your CV/résumé, and any recordings or documents you choose to upload |
| Newsletter | Email address and, if you provide them, your name and company, together with the consent wording you agreed to and the time you agreed |
| Push notifications | A device identifier issued by your browser, the topics you chose, your browser type and the page you subscribed from |
| Correspondence | Anything you send us by email, phone or messaging, and our replies |
Please do not send us sensitive personal data (such as financial, health or biometric information). Our forms do not ask for it.
Information collected automatically
| What | How |
|---|---|
| How the forms were reached | The page you submitted from, the first page of your visit, the referring website and campaign tags in the link (UTM parameters). Used to understand which pages and campaigns bring enquiries. |
| Usage statistics | With your consent, pages visited, time on site, approximate location (country/city), device and browser type, via Google Analytics (section 6). Without consent, Google Analytics receives only cookieless, aggregate signals. |
| Privacy choices | A random identifier and your cookie choices, so we can respect them and show that consent was given. |
| Contact-detail requests | When you click "Show contact" for a team, we record the page and a one-way hashed (pseudonymised) code derived from your IP address and browser, to count requests and prevent automated harvesting. |
| Server logs | Our hosting infrastructure records technical data such as IP address, date and time, requested page and browser type, for security and troubleshooting. |
3. Why we use it, and our legal basis
| Purpose | Data used | Legal basis |
|---|---|---|
| Answering enquiries, preparing quotations, and providing products, services and technical support | Form and correspondence data, attachments | Steps you request before entering into a contract, and performance of a contract; legitimate interest in responding to business enquiries; your consent where required |
| Processing job applications | Application data and uploads | Your consent, and steps taken at your request before a possible employment contract |
| Sending the newsletter | Newsletter data | Your consent, which you can withdraw at any time |
| Sending push notifications | Device identifier, topics | Your consent, which you can withdraw at any time |
| Understanding and improving the Website, measuring campaigns | Usage statistics, attribution data | Your consent (analytics cookies); legitimate interest for aggregate, non-identifying measurement |
| Keeping the Website secure and preventing abuse and spam | Server logs, hashed request codes, form timing checks | Legitimate interest in protecting our systems and users |
| Meeting legal, tax and regulatory obligations, and establishing or defending legal claims | Records of orders and correspondence | Legal obligation; legitimate interest |
Under the DPDP Act we process your data on the basis of your consent or for legitimate uses permitted by the Act, such as a purpose for which you have voluntarily provided it.
We do not sell your personal data, and we do not use it for automated decision-making that has legal or similarly significant effects on you.
4. Cookies and similar technologies
The Website uses cookies and browser storage that are strictly necessary for it to work, and, only with your consent, cookies for preferences, analytics, embedded media and notifications. You choose when you first visit and can change your choice at any time through Privacy settings at the bottom of every page. Details of each cookie and service are in our Cookie Policy.
5. Who we share it with
We share personal data only as follows:
- Our team and group entities: within Malkar Industries and its associated brands, with staff who need it to answer you or fulfil an order.
- Service providers (data processors) who act on our instructions, under confidentiality and security obligations:
- providers that host the Website and our content-management system, on servers in Mumbai, India;
- workflow and business-software providers that deliver form submissions to our team;
- Google LLC, for website analytics (Google Analytics) and for delivering push notifications;
- our email newsletter service provider;
- couriers and logistics partners, for delivery of orders.
- Embedded content providers: videos (YouTube, Vimeo) and the interactive map (Google Maps) load only when you choose to load them, and their providers then process data under their own privacy policies.
- Authorities and advisers: where required by law, court order or a government authority, or to establish, exercise or defend legal claims, and to our professional advisers under confidentiality.
- Business transfers: if our business or part of it is reorganised, merged or sold, to the party that takes it over, subject to this Policy.
6. Google Analytics
With your consent, we use Google Analytics (Google LLC) to understand how visitors use the Website. We use Google's Consent Mode: until you accept analytics cookies, no analytics cookies are stored and only cookieless, aggregate signals are sent. Google may process data on servers outside India. You can withdraw consent at any time in Privacy settings.
7. International transfers
Our team is in India, and the Website and the systems that store your personal data are hosted on servers in Mumbai, India. Some service providers (such as Google) may process data in other countries. Where we transfer personal data outside India, we do so in accordance with the DPDP Act and any restrictions notified under it. For visitors in the EEA or UK, transfers to India and other countries rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses where required.
8. How long we keep it
We keep personal data only as long as needed for the purpose it was collected for, then delete or anonymise it:
| Data | Retention |
|---|---|
| Enquiries, quotations and correspondence that did not lead to an order | 2 years |
| Order and invoice records | 8 years, as required by tax and company law |
| Job applications | 12 months after the position is filled, unless you agree to a longer period for future openings |
| Newsletter subscription | Until you unsubscribe, after which we keep a record of the unsubscription so we do not contact you again |
| Push notification subscription | Until you unsubscribe or the browser identifier expires |
| Privacy choice records | 1 year |
| Server logs | 1 year |
Files you attach to forms are stored privately (not publicly accessible) and are deleted when the record they belong to is deleted.
9. How we protect it
We use reasonable security practices appropriate to the nature of the data, including encrypted connections (HTTPS), access restricted to authorised staff with individual accounts, private storage for uploaded files with time-limited access links, logging of access to those files, rate limiting and spam protection on forms. No method of transmission or storage is completely secure; if a personal data breach occurs that affects you, we will notify you and the relevant authority as required by law.
10. Your rights
Subject to applicable law, you have the right to:
- access a summary of the personal data we hold about you and how we use it;
- correct, complete or update inaccurate or incomplete data;
- erase data that is no longer needed or that you no longer consent to us processing;
- withdraw consent at any time, as easily as you gave it: for cookies via Privacy settings, for the newsletter via the unsubscribe link, for notifications via the bell icon or your browser settings. Withdrawal does not affect processing already carried out;
- grievance redressal: have your complaint handled by our Grievance Officer, and if unresolved, approach the Data Protection Board of India;
- nominate another person to exercise your rights in the event of your death or incapacity (DPDP Act).
If you are in the EEA or UK you also have the rights to restrict or object to processing, to data portability, and to lodge a complaint with your local supervisory authority.
To exercise any right, contact the Grievance Officer (section 13). We may need to verify your identity before acting on a request. We respond within 30 days.
11. Children
The Website is intended for businesses and professionals and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, contact us and we will delete it.
12. Links to other websites
The Website links to other websites, including our social media profiles. We are not responsible for their privacy practices; please read their policies.
13. Grievance Officer and contact
For questions, requests or complaints about your personal data or this Policy, contact our Grievance Officer:
Shoaib Shaikh, Grievance Officer Malkar Industries, D-260, MIDC TTC Industrial Area, Turbhe, Navi Mumbai, Maharashtra 400705, India Email: [email protected]
We acknowledge complaints within 48 hours and aim to resolve them within 30 days.
14. Changes to this Policy
We may update this Policy to reflect changes in our practices or the law. The "Last updated" date at the top shows the latest version. Where changes are significant, we will highlight them on the Website and, where required, ask for your consent again.