Legal
Privacy Policy
This policy explains what personal data Nafis Engineering Works collects through this website, why we collect it, how long we keep it, and the rights you have over it.
Last updated 28 August 2026
1. Data we collect
- Enquiry data — your name, email address, phone number, selected product category and the requirement details you type into our contact form.
- Technical data — IP address, browser type and pages visited, recorded in ordinary server logs.
- Correspondence — emails, WhatsApp messages and call notes relating to a quotation or order.
We do not collect payment card details on this website, and we do not run advertising or tracking cookies.
2. Why we use it
- To respond to your enquiry and prepare a quotation.
- To manufacture, invoice and despatch an order you place.
- To meet GST, tax and other statutory record-keeping obligations.
- To keep the website secure and diagnose faults.
Our lawful bases are your consent when you submit the form, performance of a contract once an order is placed, and our legitimate interest in operating a secure website.
3. Cookies
We set only strictly necessary cookies — a session cookie and a CSRF token — which the enquiry form needs in order to work securely. They expire when your browsing session ends and are not used for analytics or profiling.
4. Sharing
We do not sell or rent personal data. We share it only with hosting and email providers acting on our instructions, with transporters where a delivery address is required, with our accountants, and with authorities where the law requires it.
5. Retention
Enquiries that do not lead to an order are deleted within 24 months. Order and invoice records are retained for the period required by Indian tax and company law, typically 8 years. Server logs are rotated within 90 days.
6. Security
Data is transmitted over TLS and stored on access-controlled systems available only to staff who need it to process your enquiry or order. No system is perfectly secure, but we review access and patch levels regularly.
7. Your rights
- Ask for a copy of the personal data we hold about you.
- Have inaccurate or incomplete data corrected.
- Request deletion where no legal obligation requires us to retain it.
- Object to or restrict processing based on legitimate interest.
- Withdraw consent at any time, without affecting processing already carried out.
To exercise any of these, reach us through the contact page. We respond within 30 days.
8. Third-party platforms
If you contact us through IndiaMART or a similar marketplace, that platform collects and processes your data under its own privacy policy before passing the enquiry to us.
9. Children and changes
This website is aimed at business buyers and is not directed at children under 18. Material changes to this policy will be posted here with an updated revision date.