Privacy Policy

Section 01

Who We Are

This Privacy Policy applies to the website hariyanapapercentre.com operated by Hariyana Paper Centre, a wholesale paper supplier registered and operating from Aminabad, Lucknow, Uttar Pradesh, India.

Business Address:
56, Gwyne Road, Aminabad,
Lucknow, Uttar Pradesh – 226018, India

Contact:
Phone: +91 94150 22221
WhatsApp: +91 94150 22221
Email: sumit30.agarwal@gmail.com

For the purposes of GDPR, Hariyana Paper Centre is the Data Controller of your personal information.

Section 02

Data We Collect

We only collect personal data that you voluntarily provide when you submit a bulk quote request through our website. We do not collect data passively without your knowledge, except for basic cookies described in Section 10.

Personal Data Collected via Quote Form

Data Collected Automatically

When you visit our website, we may automatically receive basic technical information including your browser type, device type, approximate location (country/city level), and pages visited. This is collected through Google Analytics and is used only in aggregate, non-identifiable form.

We do not collect:

• Payment or financial information
• Government ID or Aadhaar numbers
• Biometric data
• Sensitive personal information of any kind
• Data from children under 18

Section 03

How We Use Your Data

We use your personal data strictly for the following purposes:

• Responding to your quote request — contacting you via phone, WhatsApp or email with pricing and product availability
• Processing your bulk order enquiry — understanding your requirements and connecting you with the right products
• Improving our service — understanding what products and categories our customers enquire about most (in aggregate only)
• Legal compliance — maintaining records as required by applicable Indian business and tax regulations

We will not use your data for:

• Unsolicited marketing or spam
• Selling or renting to third parties
• Automated profiling or decision-making
• Any purpose unrelated to your enquiry

Section 04

Legal Basis for Processing

Under GDPR and applicable data protection law, we process your personal data on the following legal grounds:

• Contractual necessity — processing is necessary to respond to your quote request and fulfil a potential business transaction
• Legitimate interests — we have a legitimate business interest in responding to enquiries submitted through our website
• Consent — by submitting the quote form, you consent to us using your contact details to respond to your enquiry
• Legal obligation — we may retain certain records as required by Indian law (Income Tax Act, GST regulations)

Section 05

Data Sharing

We do not sell, rent, or trade your personal data to any third party. Ever.

We use the following trusted third-party service providers who may process your data solely to help us operate this website:

All third-party providers are required to handle your data securely and only for the specified purpose. We do not authorise them to use your data for their own purposes.

We may disclose your data to government or legal authorities if required to do so by applicable Indian law or a valid legal order.

Section 06

Data Retention

We retain your personal data only for as long as necessary for the purpose it was collected:

• Quote enquiries — retained for up to 2 years from the date of submission, to allow for follow-up and repeat business communication
• Completed transactions — retained for up to 7 years as required under Indian tax and accounting law
• Analytics data — retained by Google Analytics for 14 months (our configured retention period)

After the retention period, your data is securely deleted from our systems. You may also request earlier deletion at any time (see Section 7).

Section 07

Your Rights

Regardless of where you are located, you have the following rights regarding your personal data:

To exercise any of these rights, contact us at sumit30.agarwal@gmail.com or WhatsApp +91 94150 22221. We will respond within 30 days.

Section 08

GDPR — European Users

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) applies to our processing of your data.

International Data Transfers

Your data may be transferred to and processed in countries outside the EEA (including India, where our database and business operations are based, and the United States, where our hosting provider Vercel is based). Where such transfers occur, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) where applicable.

Data Protection Officer

As a small business, we are not required to appoint a formal Data Protection Officer. However, all data protection enquiries can be directed to Sumit Agarwal at sumit30.agarwal@gmail.com.

Supervisory Authority

If you are based in the EU/UK and believe we have not handled your data appropriately, you have the right to lodge a complaint with your local supervisory authority. A list of EU supervisory authorities is available at: edpb.europa.eu

Section 09

CCPA — California Users

If you are a resident of California, USA, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) give you specific rights regarding your personal information.

Your California Rights

• Right to Know — You may request disclosure of the categories and specific pieces of personal information we have collected about you
• Right to Delete — You may request deletion of personal information we have collected, subject to certain exceptions
• Right to Opt-Out of Sale — We do not sell personal information. No opt-out is required.
• Right to Non-Discrimination — We will not discriminate against you for exercising your CCPA rights
• Right to Correct — You may request correction of inaccurate personal information

Categories of Personal Information Collected

Under CCPA categories, we collect: Identifiers (name, email, phone number, company name) and Commercial information (products enquired about).

How to Submit a CCPA Request

Submit requests by emailing sumit30.agarwal@gmail.com with subject line "CCPA Request". We will respond within 45 days. We may need to verify your identity before processing the request.

Section 10

Cookie Policy

Cookies are small text files stored on your device when you visit a website. Our website uses a minimal number of cookies.

Managing Cookies

You can control and delete cookies through your browser settings. Note that disabling certain cookies may affect website functionality. Instructions for major browsers:

• Google Chrome
• Mozilla Firefox
• Apple Safari
• Microsoft Edge

Section 11

Data Security

We take reasonable technical and organisational measures to protect your personal data from unauthorised access, alteration, disclosure or destruction. These include:

• HTTPS encryption on all pages (SSL/TLS certificate)
• Row-Level Security (RLS) enabled on our Supabase database — ensuring only authorised personnel can access quote submissions
• Limited access — only Sumit Agarwal and Shaurya Agarwal have access to submitted enquiry data
• No storage of payment or financial data on our systems

While we implement strong security measures, no method of internet transmission is 100% secure. If you believe your data has been compromised, please contact us immediately.

Section 12

Children's Privacy

Our website is intended for business use only and is directed at adults and professionals. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has submitted data through our website, please contact us and we will delete it promptly.

Section 13

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will update the "Last Updated" date at the top of this page.

We encourage you to review this policy periodically. Continued use of our website after changes are posted constitutes acceptance of the updated policy.

Section 14

Contact Us

For any questions, concerns or requests regarding this Privacy Policy or how we handle your personal data, please contact us:

Governing Law

This Privacy Policy is governed by the laws of India, including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (DPDPA). For users in other jurisdictions, the additional rights described under GDPR (Section 8) and CCPA (Section 9) also apply where relevant law requires.

Any disputes shall be subject to the exclusive jurisdiction of the courts of Lucknow, Uttar Pradesh, India.