Privacy Policy

1. Introduction

Creative Engineering ("Company", "we", "us", or "our"), established in 2015 and based at Sudama Industrial Estate, Dadhal, Ankleshwar, Bharuch, Gujarat, India, is engaged in the design, engineering and fabrication of reactors, pressure vessels, heat exchangers and industrial piping for the chemical, petrochemical, agrochemical, pharmaceutical (API/intermediates), fertilizer and distillation industries. We are certified to ASME U-Stamp, R-Stamp and ISO 9001:2015 standards.

This Privacy Policy explains how we process personal data when you visit creative-engineering.in (the "Website"), submit an enquiry, request a quotation, apply for a job or otherwise interact with us. It is written to meet the requirements of the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Rules made under it. Under that Act, Creative Engineering is the Data Fiduciary and you are the Data Principal.

Note: This Website is a corporate and product information platform for an industrial equipment manufacturer. We do not run e-commerce, online payments or consumer checkout. Personal data is mainly limited to business enquiries, quotation requests, job applications and general correspondence.

2. Personal Data We Collect

We collect only the personal data needed for the purposes in Section 3.

3. Purposes & Lawful Basis

We process personal data only for a lawful purpose, for which you have given consent or which the DPDP Act recognises as a legitimate use. Our purposes are to:

• Respond to product enquiries and requests for quotation that you have voluntarily made
• Prepare technical proposals, drawings and commercial offers for our equipment
• Communicate about ongoing or prospective projects and orders
• Maintain business, accounting and statutory records
• Understand website traffic and improve the Website (only with your consent)
• Evaluate job applications, where you have submitted one
• Comply with applicable law, court orders and regulatory requirements

We do not use your data for any purpose other than those stated here without a fresh notice and, where required, your fresh consent. We do not sell, rent or trade personal data.

4. Notice & Consent

Where we rely on consent, it is free, specific, informed, unconditional and unambiguous and is given by a clear affirmative action, such as accepting analytics cookies in the consent notice shown on the Website, or submitting a form after reading the notice next to it.

• Analytics cookies are switched off until you accept them. Declining does not limit your access to any part of the Website.
• You can change or withdraw your choice at any time, as easily as you gave it, using the shield button at the bottom-left of the page or the "Consent Settings" link in the footer.
• You can also withdraw consent for other processing by writing to us (Section 12). Withdrawal does not affect processing done lawfully before it.
• We keep a record of your cookie choice (your choice and its date) in your own browser's local storage.

5. Cookies & Tracking Technologies

Some pages show third-party content, such as an embedded YouTube video or a Google Map on the Contact page. These providers may set their own cookies under their own policies. You can also control cookies through your browser settings.

6. Sharing & Disclosure

We share personal data only where needed and only with those who need it:

• Service providers (Data Processors): providers that host the Website, deliver form submissions (Web3Forms), provide analytics (Google) or support our email and records, bound by confidentiality and data-protection obligations
• Business partners: sub-contractors, third-party inspection agencies (for example for ASME or TEMA compliance) and logistics partners, only for a specific project
• Legal requirements: where law, a court or a government authority requires disclosure
• Business transfers: in a merger, acquisition or sale of assets, with confidentiality safeguards

7. Transfers Outside India

Some of our service providers (for example Google) may process data on servers outside India. Such transfers are made in line with Section 16 of the DPDP Act, that is, not to any country or territory the Central Government has restricted by notification.

8. Security & Breach

We take reasonable security safeguards to protect personal data against unauthorised access, alteration, disclosure, loss or destruction, including encrypted transmission (HTTPS) and restricted internal access to enquiry and client records. No method of transmission or storage is completely secure. If a personal data breach occurs, we will inform the Data Protection Board of India and affected Data Principals in the manner required by law.

9. Retention & Erasure

We keep personal data only as long as needed for the stated purpose, or as required by law (for example accounting, taxation and project or warranty records). Enquiry and RFQ data that does not become a business relationship is kept only for a reasonable period needed for follow-up. When the purpose is over, the data is erased or anonymised, unless the law requires us to retain it.

10. Your Rights as a Data Principal

Under the DPDP Act you have the right to:

• Access information: obtain a summary of the personal data we process about you and the processing activities, and the identities of the other Data Fiduciaries and Data Processors we have shared it with
• Correction, completion and updating of your personal data
• Erasure of personal data that is no longer needed for its purpose or that you withdraw consent for, unless retention is required by law
• Withdraw consent at any time (Section 4)
• Grievance redressal (Section 12)
• Nominate another person to exercise these rights on your behalf in the event of your death or incapacity

To exercise a right, write to us using the details in Section 15. We may ask you to verify your identity before acting on a request.

11. Children's Data

The Website is for business and industrial audiences and is not directed at anyone under 18. We do not knowingly process the personal data of children, and we do not track, monitor the behaviour of or target advertising at children. If a child's data is processed, we will do so only with verifiable consent of the parent or lawful guardian. If you believe a child has sent us personal data, please write to us and we will erase it.

12. Grievance Redressal

If you have a concern about how we handle your personal data, or want to exercise a right, please contact our Grievance Officer / Data Protection Contact:

If your concern is not resolved, you may complain to the Data Protection Board of India as provided in the DPDP Act, after first using our grievance redressal process.

13. Third-Party Links

The Website may link to third-party sites, such as certification bodies, industry associations and social media platforms. We are not responsible for their content or privacy practices, and we encourage you to read their policies.

14. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices, technology or the law. The revised policy is posted on this page with an updated "Last Updated" date. Where a change needs fresh consent, we will ask for it.

15. Contact Us

For any question about this Privacy Policy or our data practices, contact us: