Privacy Policy

This Privacy Policy applies to personal data collected, stored, or processed by KP Fasteners ("we", "us", or "our"), operating as a sole proprietorship under GSTIN 24ARDPP9803A1Z3, with registered manufacturing and operational premises at 23/4, Ghanshyam Industrial Estate, Margha Farm, Bapunagar, Ahmedabad, Gujarat 380024, India.

Under the Digital Personal Data Protection Act, 2023 ("DPDPA 2023"), KP Fasteners acts as the Data Fiduciary in respect of personal data submitted by visitors, procurement officers, engineering buyers, and prospective clients through our website (kpfasteners.com), web enquiry forms, drawing upload tools, electronic mail communications, and WhatsApp Business channels.

We collect minimal personal and technical information strictly necessary to process commercial fastener enquiries, provide accurate price quotes, coordinate logistics, and maintain secure website functionality. The categories collected comprise:

• Contact & Identity Data: Full name, company or business entity name, work email address, telephone / mobile number, and destination PIN code or delivery site address provided via our Request a Quote or Contact forms.
• Technical Procurement Data: Product types, diameter and length parameters, material metallurgy (e.g. 8.8, 10.9, SS 304, SS 316), protective coatings (HDG, zinc, passivation), bill of quantities (BOQ), and user-uploaded engineering drawings, blueprints, or CAD files (PDF, DWG, DXF, STP, PNG, JPG).
• Electronic Log & Network Data: Internet Protocol (IP) address (truncated for privacy where analytics are configured), browser type, device operating system, referring URL, pages viewed, session duration, and date/time stamps.
• Third-Party Platform Leads: When you contact us through verified B2B marketplaces such as IndiaMART or direct WhatsApp links, basic lead metadata forwarded by those platforms in accordance with their respective terms of service.

Data We Do Not Collect: We do not operate an online checkout, and we do not store, collect, or process credit card numbers, debit card details, net banking credentials, PAN cards, Aadhaar numbers, or biometric identifiers.

We process your personal data exclusively for specified, lawful purposes directly connected to our commercial fastener manufacturing and distribution operations:

• Commercial RFQ Fulfillment: Evaluating technical drawing specifications, calculating raw material requirements, issuing formal price quotes, and following up on procurement timelines (Lawful basis: Specified purpose consented to upon enquiry submission and steps taken prior to entering a contract under DPDPA 2023 §4 & §7).
• Order Execution & Dispatch: Coordinating batch production, issuing dispatch challans, generating GST tax invoices, preparing Mill Test Certificates (EN 10204 3.1 MTC), and arranging freight transport (Lawful basis: Performance of contract and compliance with Indian tax statutes).
• Security & Abuse Prevention: Mitigating automated bot attacks, rate-limiting form submissions via honeypot fields, and ensuring network integrity (Lawful basis: Legitimate business interest and infrastructure protection).

Personal data is stored in access-controlled corporate email mailboxes and serverless cloud infrastructure hosted by Vercel Inc. All data in transit across our website is encrypted using Transport Layer Security (TLS 1.3 / HTTPS) with strict HTTP Strict Transport Security (HSTS) headers. Access to commercial quote repositories is restricted to authorized sales and engineering personnel.

We maintain retention limits consistent with statutory mandates and commercial necessity:

• RFQ & Enquiries (Unconverted): Retained for 36 months to accommodate recurring engineering procurement cycles, following which records are archived or securely deleted.
• Uploaded Engineering Blueprints: Retained for 24 months for unconverted RFQs; retained for the duration of manufacturing warranty and statutory product liability periods for fulfilled orders.
• Invoices, Challans & Mill Test Certificates: Retained for a minimum of 8 years in strict compliance with the Central Goods and Services Tax (CGST) Act, 2017 and Indian accounting standards.
• Web Server & Security Logs: Retained for 90 days for operational forensics.

No Data Brokering: KP Fasteners does not sell, rent, monetize, or trade your contact details or engineering specifications with third-party advertising networks, data brokers, or marketing firms.

We disclose personal data strictly to trusted third-party service providers acting as Data Processors under contractual confidentiality obligations:

• Cloud Hosting Infrastructure: Vercel Inc. (hosting, edge network routing, serverless execution).
• Transactional Communications: Resend Inc. (routing website form submissions to our internal sales desk via authenticated SMTP/API).
• Logistics & Transport Carriers: Registered surface transport agencies and courier services to deliver physical fastener shipments to your designated delivery PIN code.
• Statutory Authorities: Central or State tax authorities, law enforcement agencies, or courts where mandatory under Indian law.

Our website uses standard HTTP cookies to support core site operation and evaluate aggregate traffic trends. We do not use third-party advertising cookies or cross-site tracking pixels.

• Strictly Necessary Cookies: Session tokens and consent-choice cookies required to navigate the site, preserve form state, and record cookie banner preferences (stored for up to 12 months).
• Aggregate Analytics Cookies: First-party analytics cookies (such as Google Analytics 4 client identifiers) that capture aggregated metrics regarding page views, browser resolution, and download activity without identifying individual natural persons.

Visitors can modify browser preferences to decline non-essential cookies or delete stored cookies. Disabling essential cookies may impair form submission functionality.

Under the Digital Personal Data Protection Act, 2023, individuals whose personal data is processed by KP Fasteners ("Data Principals") possess specific statutory rights:

• Right to Access: The right to obtain a summary of your personal data processed by us and the identities of any Data Processors with whom such data has been shared.
• Right to Correction and Erasure: The right to correct inaccurate or incomplete data, update contact details, and request erasure of personal data that is no longer required for the purpose for which it was collected, subject to statutory retention obligations under tax and commercial laws.
• Right of Grievance Redressal: The right to register a grievance with our Grievance Officer and receive resolution within statutory timelines, with subsequent right of escalation to the Data Protection Board of India once established.
• Right to Nominate: The right to nominate another individual to exercise your rights under the Act in the event of death or incapacity.
• Right to Withdraw Consent: Where processing is predicated exclusively on voluntary consent, the right to withdraw such consent by formal written notice.

To exercise any of these rights, submit a written communication to our Grievance Officer at sales@kpfasteners.com with the subject line "DPDPA Data Principal Request".

In accordance with Section 13 of the Digital Personal Data Protection Act, 2023, KP Fasteners has designated the following internal compliance contact for data protection queries and grievance redressal:

We acknowledge receipt of all formal grievances within 48 hours and endeavor to provide substantive written resolution within 30 business days or statutory timelines prescribed under operative DPDPA rules.

KP Fasteners operates strictly as a Business-to-Business (B2B) industrial manufacturer and supplier. Our services and digital properties are directed solely at commercial procurement officers, engineering professionals, and business enterprises. We do not knowingly solicit or collect personal information from children or individuals under the age of 18. If you become aware that a minor has submitted personal data through our website, please notify us immediately for expedited record deletion.

We may periodically update this Privacy Policy to reflect modifications in our manufacturing processes, website enhancements, or amendments to the rules and regulations under the Digital Personal Data Protection Act, 2023. When revisions occur, we will update the "Effective Date" at the top of this page. Continued interaction with our website following such updates constitutes acknowledgement of the revised terms.

For general questions regarding our data governance practices, commercial quote confidentiality, or to review our commercial terms, please contact our Ahmedabad headquarters:

Please also review our Terms of Supply and Website Use governing commercial quotes, manufacturing tolerances, and delivery conditions.