Privacy Policy

Effective Date: 15 July 2026

Last Updated: 15 July 2026

1. Introduction and Scope

Sundarban Chemicals Private Limited (“SBPL”, “we”, “us”, or “our”) is committed to protecting the privacy and personal data of every individual who interacts with us. This Privacy Policy explains what personal data we collect, why we collect it, how we use and safeguard it, with whom we share it, and the rights you may exercise in relation to it.

This Policy applies to personal data collected through our website www.sbplindia.com, our enquiry and pilot-trial forms, email and telephone communications, and in the course of providing our products and services. It is framed in accordance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”), the Digital Personal Data Protection Rules, 2025 (“DPDP Rules”), the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, as applicable and as amended from time to time.

For the purposes of this Policy, SBPL acts as a “Data Fiduciary” and you, the individual whose personal data is processed, are the “Data Principal”.

2. Definitions

• Personal Data means any data about an individual who is identifiable by or in relation to such data.
• Processing means any operation performed on personal data, including collection, recording, organisation, storage, use, sharing, disclosure, or erasure.
• Data Principal means the individual to whom the personal data relates, including, in the case of a child, the parent or lawful guardian.
• Data Fiduciary means the entity that, alone or with others, determines the purpose and means of processing personal data – in this case, SBPL.
• Data Processor means any entity that processes personal data on our behalf and under our instructions.

3. Personal Data We Collect

We collect only such personal data as is necessary for the specific purposes described in this Policy. Depending on your interaction with us, this may include:

• Identity and contact data: name, designation, organisation name, email address, and telephone number.
• Enquiry and technical data: site location, industry type, effluent or influent parameters (such as COD and flow rate), and other information you voluntarily provide through our enquiry or pilot-trial forms.
• Commercial data: information exchanged during quotations, orders, contracts, and after-sales support.
• Technical usage data: limited information generated automatically when you visit our website, such as browser type, device information, and pages viewed, where applicable.

We do not knowingly collect special categories of sensitive personal data through this website unless it is voluntarily provided by you and is necessary for a specific service.

4. How We Collect Your Data

We collect personal data directly from you when you complete an enquiry or pilot-trial form, correspond with us by email or telephone, or engage with us in a commercial or contractual capacity. We may also collect limited technical data automatically through standard web technologies when you browse our website.

5. Purposes of Processing

We process your personal data for the following specified, lawful purposes:

• To respond to your enquiries and provide the information, products, or services you request.
• To evaluate, schedule, and conduct pilot trials and technical assessments.
• To prepare quotations, fulfil orders, and administer contracts and after-sales support.
• To communicate with you regarding your enquiries, projects, and ongoing engagements.
• To comply with applicable legal, regulatory, and statutory obligations.
• To maintain the security, integrity, and proper functioning of our website and systems.

6. Lawful Basis and Consent

We process your personal data on the basis of your consent, or where processing is necessary for a legitimate purpose permitted under law, such as the performance of a contract or compliance with a legal obligation.

Where processing is based on consent, such consent is sought in a free, specific, informed, unconditional, and unambiguous manner through a clear affirmative action, and is limited to the purpose for which it is given.

You may withdraw your consent at any time by contacting us using the details in Section 13. Withdrawal of consent will not affect the lawfulness of processing carried out before such withdrawal, and may limit our ability to provide certain services to you.

7. Cookies and Website Analytics

Our website may use cookies and similar technologies that are necessary for its operation and to understand aggregate usage patterns. Where any non-essential cookies are used, they are deployed only with your consent. You may control or disable cookies through your browser settings, though this may affect certain website functionality.

8. Sharing and Disclosure of Personal Data

We do not sell your personal data. We may share your personal data only in the following limited circumstances:

• Service providers and Data Processors who process personal data on our behalf under written contracts requiring them to protect it and to process it only on our instructions.
• Professional advisers, auditors, and financial or regulatory bodies where required for legitimate business or compliance purposes.
• Government authorities, courts, or law enforcement agencies where disclosure is required by law or to protect our legal rights.
• Successor entities in connection with any merger, acquisition, or restructuring, subject to this Policy and applicable law.

9. Data Retention, Storage, and Erasure

We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required to comply with legal, regulatory, tax, accounting, or contractual obligations.

When personal data is no longer required, or upon withdrawal of your consent where consent was the basis of processing and no other lawful basis applies, we will erase it in a secure manner, unless retention is required or permitted by law.

10. Cross-Border Data Transfers

Where personal data is transferred to or stored on servers located outside India, such transfer is carried out in accordance with the DPDP Act and any conditions or restrictions notified by the Central Government from time to time, and appropriate safeguards are applied to protect your personal data.

11. Data Security

We implement reasonable technical and organisational security safeguards designed to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include access controls, encryption where appropriate, secure hosting, and internal governance practices. While we take reasonable steps to protect your personal data, no method of transmission or storage is entirely secure, and we cannot guarantee absolute security.

12. Your Rights as a Data Principal

Subject to applicable law, you have the following rights in relation to your personal data:

• Right to access a summary of the personal data we process about you and the processing activities undertaken.
• Right to correction and updating of inaccurate or incomplete personal data.
• Right to erasure of personal data that is no longer necessary for the purpose for which it was collected.
• Right to withdraw consent at any time, as easily as it was given.
• Right to grievance redressal through the mechanism set out in Section 13.
• Right to nominate another individual to exercise your rights in the event of death or incapacity.

To exercise any of these rights, please contact our Data Protection point of contact using the details in Section 13. We will respond to verified requests within the timelines prescribed under applicable law. We may require reasonable information to verify your identity before acting on a request.

13. Grievance Redressal and Contact

If you have any questions about this Policy, wish to exercise your rights, or have a grievance regarding the processing of your personal data, you may contact our designated point of contact:

Data Protection and Grievance Officer: Suvadeep Panty

Email: grievance@sbplindia.com

Phone: +91 9836707599

Address: Sundarban Chemicals Private Limited, MERLIN MATRIX, Suite 604, 6th Floor, Street No. 10, DN Block, Sector V, Bidhannagar, Kolkata 700091, West Bengal, India

We aim to acknowledge grievances within 48 hours and to resolve them within the period prescribed under applicable law. If you are not satisfied with our response, you may have the right to approach the Data Protection Board of India, once operational for such purposes, in accordance with the DPDP Act and DPDP Rules.

14. Children and Persons with Disabilities

Our website and services are intended for businesses and adult professionals and are not directed at children. We do not knowingly collect the personal data of any individual below the age of eighteen years without verifiable consent of a parent or lawful guardian, nor do we undertake tracking, behavioural monitoring, or targeted advertising directed at children. Where personal data of a person with a disability is processed, the consent of their lawful guardian is obtained as required by law.

15. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The revised Policy will be posted on this page with an updated “Last Updated” date. We encourage you to review this Policy periodically.

16. Governing Law and Jurisdiction

This Privacy Policy is governed by and construed in accordance with the laws of India. Any disputes arising in connection with it shall be subject to the exclusive jurisdiction of the competent courts at Kolkata, West Bengal.