Privacy Policy

Hastimal Valchand LLP decides how and why the personal data described here is used. Our address and contact details are in section 13.

By using this website or sending us information, you acknowledge the practices described in this policy.

This website is for trade and household buyers of utensils and is not directed at children. If you believe a child has sent us personal data, please write to us and we will review the matter and act on it.

Enquiries. When you send an enquiry through the form on this website, we collect:

• Your name, and your business name when you give it
• Your phone number, your email address, or both
• Your country, business type and GSTIN, when you give them
• The products, sizes and quantities in your enquiry list, and your message
• The product you enquired about, when you start from a product page

With each enquiry we also store the date it was sent and the country your connection came from, as reported by Cloudflare.

Newsletter. When you subscribe, we collect your email address, your first and last name when you give them, and the date you subscribed.

Direct contact. When you write, call or message us on WhatsApp, we keep the details of that conversation. We need them to answer you and keep business records.

Orders. When you buy from us, we keep the details needed for quotations, invoices, delivery and tax records.

Technical data. The servers that send you this website receive your IP address, browser type, device details and the pages you request. Cloudflare processes this data to serve the website and protect it from misuse.

This website does not ask for payment card or bank details, and we do not collect them through it.

We use personal data for these business purposes:

• To answer enquiries and requests for quotations
• To send product details, availability and other information you asked for
• To prepare quotations, confirm and fulfil orders, and issue invoices
• To understand your needs and communicate about a potential or existing business relationship
• To keep customer, supplier and business records
• To send our newsletter to people who subscribed
• To improve our website and product information
• To protect our website, our business and our users against spam, fraud and misuse
• To meet our legal, tax and regulatory obligations

The enquiry form asks your permission to store your details and reply to you. The newsletter forms ask your permission to send you email updates.

We may also send relevant business updates where applicable law permits. You can ask us to stop them at any time.

These services run parts of this website for us. Each processes your data to provide its service, under its own privacy terms.

• Cloudflare: hosts this website and runs the code that receives the enquiry and newsletter forms. Its servers receive your IP address and browser details on every visit.
• Google Firebase (Cloud Firestore): stores enquiries and newsletter subscriptions in our database.
• Resend: emails each enquiry to our team, and sends the welcome email to new newsletter subscribers.
• Cloudinary: stores and serves the product photographs. Your browser loads the images from Cloudinary’s servers.
• Google Maps: shows the map of our shop on the contact page and in the footer. The map loads only as it scrolls into view, and Google then receives your IP address and browser details.
• WhatsApp: when you choose to message us on WhatsApp, or share your enquiry list there, WhatsApp handles that message under its own terms.
• Cloudflare Turnstile: a spam check the enquiry form can use. When it is in use, Cloudflare checks your browser and IP address before the form is sent.

To stop spam, the code that receives our forms counts recent requests from each IP address for a short time. That count is held only in the server's memory and is not stored with your enquiry.

Some of these providers process data on servers outside India.

Links to WhatsApp, Google Maps and other websites take you to services we do not control. Their own privacy policies apply when you use them, so please read those before sharing personal data there.

We do not sell your personal data. We share it only in these cases:

• Service providers: the services named in section 4, and others who help us run our website or business.
• Business and logistics partners: when this is needed to answer your request, send an order or provide an agreed service.
• Professional advisers: such as our lawyers and accountants, where a legitimate business purpose requires it.
• Authorities and regulators: when the law, a regulation, a court order or a valid legal request requires disclosure.
• Business transactions: in a merger, restructuring or transfer of our business, subject to applicable law.

In each case we share only what is reasonably necessary for that purpose.

We do not use analytics, advertising or tracking cookies, and we run no analytics service on this website.

Some features keep small records in your browser’s storage. These records stay in your browser and are not sent to us.

• Enquiry list: the products, sizes and quantities you add. They reach us only when you send an enquiry.
• Recently viewed: the last 12 products you opened, shown at the foot of product pages.
• Newsletter pop-up: whether you subscribed to or closed the pop-up, and when, so that it is not shown again too soon.
• Pages this visit: a count of pages viewed, kept only until you close the browser tab.

You can clear these records at any time in your browser settings. The Google map is provided by Google, which may set its own cookies when the map loads.

You subscribe by entering your email address and agreeing to receive our emails. We do not ask you to confirm your subscription by email.

Our welcome email contains an unsubscribe link made for your address, and supports your email program’s own unsubscribe button. You can also unsubscribe by writing to info@hvmumbai.com.

When you unsubscribe, we mark your address as unsubscribed and stop sending you the newsletter. We keep that record so that we do not add your address again by mistake.

We keep enquiries and our conversations with you for as long as we need them to answer you and continue our business relationship.

We keep order, invoice and tax records for as long as Indian law requires us to.

We keep newsletter subscribers until they unsubscribe. After that, we keep only the unsubscribed record described in section 7.

When we no longer need information, we take reasonable steps to delete it or otherwise handle it as applicable law requires.

Records in your browser’s storage stay there until you clear them.

We take reasonable measures to protect the data we hold against unauthorised access, disclosure, alteration or loss.

This website is served only over an encrypted (HTTPS) connection. Enquiries and subscriber records can be read only by people we authorise with an admin login. Our database rules stop browsers from reading them directly.

No website, transmission or storage system can be guaranteed to be completely secure. Please do not send payment card, bank or other sensitive details through the enquiry form or other unsecured channels.

Subject to applicable law, including India’s Digital Personal Data Protection Act, 2023, you may ask us to:

• Tell you what personal data we hold about you
• Correct data that is inaccurate or incomplete
• Delete your data, where the law allows
• Stop processing that is based on your consent, by withdrawing it
• Stop or restrict certain processing, where that right applies
• Stop sending you marketing emails
• Accept a person you nominate to exercise these rights for you if you die or cannot act yourself

You can withdraw consent as easily as you gave it. For the newsletter, use the unsubscribe link in any of our emails. For an enquiry, write to legal@hvmumbai.com and say that you withdraw your consent; we then stop using your details for that enquiry, except where the law requires us to keep them.

We may need to verify your identity before we act on a request. We may have to keep some information to meet legal obligations or for other lawful purposes.

If a breach of security affects your personal data, we will tell you and the Data Protection Board of India, as the Digital Personal Data Protection Act, 2023 and its Rules require.

Write to legal@hvmumbai.com with any question or complaint about your personal data. It is our desk for privacy requests and grievances, and we will reply as soon as we can.

Please give your name, the email address or phone number you used with us, and what you would like us to do.

If you are not satisfied with our reply, you can complain to the Data Protection Board of India under the Digital Personal Data Protection Act, 2023.

We may update this policy when our website, our services or the law changes.

We publish each new version on this page, with the new effective date at the top.

To ask about this policy, or to see, correct or delete your personal data, please contact us.

We will review and respond to privacy requests in accordance with applicable law.