Privacy policy

1. Who we are

Apex Rolls (India) Pvt. Ltd., Sherpur Road, Malerkotla 148023, Punjab, India ("we", "us"), decides why and how your personal data is used. Under India's Digital Personal Data Protection Act, 2023 (the "DPDP Act") we are the "Data Fiduciary".

To contact us about your data, write to sales@apexrolls.com, or call +91 94170 12679.

2. What this policy covers

This policy covers personal data that we collect through this website (including the enquiry form), and when you email us, call us or message us on WhatsApp about our products. It does not cover other websites that we link to; they have their own policies.

3. What we collect

We collect only what we need. We never ask for more than the purpose needs.

When you send the enquiry form: Your name, company or mill, email address, phone number (if you give it), the product you ask about, and your message. The form does not take file uploads.
When you email, call or message us on WhatsApp: Your name, email address or phone number, the content of your messages, and any drawings or files that you choose to send.
When you buy from us: The details needed for quotations, orders, invoices, delivery and after-sales service: contact person, billing and delivery address, GSTIN, order and payment records.
When you visit the website: Our web host (Cloudflare) keeps short server logs to run and protect the website: IP address, browser type, the pages requested, and the date and time. We do not use these logs to identify you.
In your browser: We do not set cookies and we do not use analytics, advertising or tracking tools. The Home page stores one small note in your browser's session storage ("the intro was seen"), so the 3D intro does not play again on every visit. It holds no personal data and is removed when you close the tab.

Please do not send us passwords, bank or card details, or health information. We do not need them, and the website does not take payments.

4. Why we use it

To answer your enquiry and prepare quotations and technical recommendations.
To make, test, deliver and invoice your order, and to handle warranty claims and after-sales service.
To keep business, tax and accounting records, and to meet other legal duties.
To keep the website working and safe.

We use your data only for the purpose for which you gave it, on the basis of your consent or because you gave it to us yourself for that purpose, as the DPDP Act allows. We also use it where a law requires us to. We do not sell your data, we do not send marketing emails unless you ask for them, and we make no automated decisions about you.

When you send us an enquiry or a message, you agree that we use your details to answer it. You can withdraw your consent at any time, as easily as you gave it: write to sales@apexrolls.com. We will then stop using your data for that purpose and delete it, unless a law requires us to keep it.

Withdrawing consent does not affect what we did lawfully before. If you withdraw it during an open enquiry or order, we may not be able to complete it.

We share personal data only when it is needed for the purposes above, and only with people and services that must keep it safe:

Resend: The service that delivers the enquiry form to our email inbox. It handles the form content only to deliver it.
Cloudflare Turnstile: The check on the enquiry form that tells people from automated spam. It looks at technical signals from your browser, not at what you type in the form.
Google (Gmail): Our company email service, where enquiries and emails arrive and are kept.
WhatsApp (Meta): Only if you choose to message us on WhatsApp. WhatsApp's own privacy terms also apply.
Our web host: Cloudflare, which serves this website and keeps the short server logs described above.
OpenStreetMap: Only if you press "Show the map here" on the Contact page. Your browser then loads the map from openstreetmap.org, which receives your IP address.
Partners in making and delivering your order: Partner foundries and workshops that make parts of an order, transport companies and banks — only the details they need, and under a duty of confidentiality.
Authorities: When a law, a court or a government authority requires it.

We do not sell or rent personal data to anyone.

7. Data outside India

Some of the services above (for example Resend, Cloudflare, Google, WhatsApp and our web host) may store or process data outside India. The DPDP Act allows this, except to countries that the Government of India restricts. We use established providers that protect the data they hold.

8. How long we keep it

Enquiries that do not lead to an order: Up to 3 years after our last contact, then deleted.
Customer and order records: For as long as the law requires us to keep business, tax and company records (generally 6 to 8 years), and while a warranty or claim is open.
Server logs: Only as long as the web host keeps them, usually a few days to a few weeks.
The session note in your browser: Until you close the tab.

When a purpose ends and no law requires us to keep the data, we delete it.

9. How we protect it

Only the people who need your data to do their work can see it.
Our email and business accounts use strong passwords and two-step sign-in.
The website uses a secure (HTTPS) connection and takes no payments.
If a breach puts your data at risk, we will tell you and the Data Protection Board of India, as the law requires.

10. Your rights

Under the DPDP Act you can ask us to:

Give you a summary of your personal data that we hold and of how we use it, and tell you who we have shared it with.
Correct, complete or update your data.
Delete your data, when it is no longer needed and no law requires us to keep it.
Answer a complaint about how we handled your data (grievance redressal).
Accept a person you nominate, who can use these rights for you in case of death or incapacity.

To use a right, write to sales@apexrolls.com with "Personal data" in the subject. We may ask you to confirm who you are. We will reply as soon as we can, and within 90 days at the latest.

11. Children

This website is for businesses and is not meant for children. We do not knowingly collect personal data of anyone under 18. If you think a child has sent us personal data, write to sales@apexrolls.com and we will delete it.

12. Who to contact

For any question or complaint about your personal data, contact our Managing Director at Apex Rolls (India) Pvt. Ltd., Sherpur Road, Malerkotla 148023, Punjab, India. Email sales@apexrolls.com, phone +91 94170 12679.

If you are not satisfied with our answer, you can complain to the Data Protection Board of India, after you have first given us the chance to resolve it.

13. Changes to this policy

We may update this policy when the law or our work changes. The date at the top shows the last update. If we make an important change, we will say so on this page.