Privacy Policy

Engineers India Corporation ("EIC", "we", "our", or "us") is committed to protecting the privacy of every person who interacts with our website at eicorp.in (the "Site"). This Privacy Policy explains what personal data we collect through our enquiry form, how we use and store it, and the rights you have over it under India's Digital Personal Data Protection Act, 2023 (DPDP Act).

By submitting the enquiry form on our Site, you acknowledge that you have read this policy and consent to the processing of your personal data as described herein.

Data Fiduciary (Controller):

• Engineers India Corporation (EIC)
• Plot No. 213, Sector 6, IMT Manesar, Gurugram — 122052, Haryana, India
• ISO 9001:2015 Certified | MSME Udyam Registration: UDYAM-HR-05-0011697
• Email: engineersindiac@gmail.com
• Phone: +91 83688 09472

EIC is a manufacturer of precision injection-moulded plastic components and custom wiring harnesses. Our Site is a business-to-business (B2B) platform used primarily by procurement managers, engineers, and OEM manufacturers.

We collect personal data only when you voluntarily submit the enquiry form on our Site. The fields collected are:

• Full Name — to address you correctly in our response.
• Company / Organisation Name — to understand the business context of your enquiry.
• Business Email Address — our primary channel to respond to your enquiry.
• Phone Number — used only if you indicate a preference for a call-back or if email clarification is insufficient.
• Division of Interest — whether your enquiry relates to Plastic Moulding, Wiring Harnesses, or both; used to route your request internally.
• Requirement / Message — your technical specifications, drawings references, or other details you choose to share voluntarily.

All data collected is used solely for the following legitimate business purposes:

• Responding to your enquiry — our production or sales team will review your requirement and reply within one business day.
• Preparing a quotation — your specifications and contact details allow us to prepare a relevant, accurate quotation.
• Internal routing — your division of interest (moulding / harness) helps us assign the correct technical team to your request.
• Follow-up communication — if you have not received our response or wish to revisit a previous enquiry, we may use your contact details to follow up, provided this is within a reasonable time-frame and relevant to your original request.

We do not use your data for unsolicited marketing, newsletters, or automated profiling.

The only limited disclosures that may occur are:

• Form submission via email: Our enquiry form works by opening your own email client (via a mailto: link) with the details you entered pre-filled. No form data is transmitted to or stored on EIC's servers or any third-party server at the point of submission — the email is sent directly from your own email account using your own mail provider. Your email provider's privacy policy governs that transmission.
• Legal obligation: We may disclose data if required to do so by a valid court order, government authority, or applicable Indian law, and only to the extent required.
• Business succession: In the unlikely event of a merger, acquisition, or sale of EIC's business, enquiry records may be transferred to the successor entity, who will be bound by the same or equivalent data protection obligations.

Our enquiry form works by opening your default email client (e.g., Gmail, Outlook, Apple Mail) with the details you entered pre-filled in the message body. No form data passes through or is stored on EIC's web server at the point of submission. The email is composed and sent entirely by your own email client and email account.

Once that email arrives in our inbox, it is received and stored within our internal email system (Google Workspace / Gmail), hosted by Google. Google's own terms and privacy policy govern the storage of emails in our inbox.

We retain enquiry data for a period of up to three (3) years from the date of submission, or as long as necessary to fulfil the business purpose for which it was provided (e.g., an ongoing business relationship), whichever is later. After this period, data is securely deleted.

If an enquiry does not result in a business engagement, we retain the record for a maximum of twelve (12) months before deletion.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include:

• HTTPS/TLS encryption for all data transmitted between your browser and our Site.
• Strict HTTP security headers (X-Frame-Options, X-Content-Type-Options, Referrer-Policy) applied to all Site responses.
• Access to enquiry data is restricted to authorised EIC personnel on a need-to-know basis.
• Our email platform (Google Workspace) provides encryption at rest and in transit.

No method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee absolute security. In the event of a personal data breach that is likely to adversely affect Data Principals, we will endeavour to notify affected individuals in accordance with the DPDP Act 2023.

India's Digital Personal Data Protection Act, 2023 (DPDP Act) grants you the following rights as a Data Principal with respect to your personal data processed by EIC:

• Right to Access Information: You may request a summary of the personal data we hold about you and how it is being processed.
• Right to Correction and Erasure: You may request that we correct inaccurate or incomplete personal data, or erase data that is no longer necessary for the purpose for which it was collected, subject to any overriding legal retention obligations.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time by contacting us. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Right to Grievance Redressal: You have the right to lodge a grievance with us, and we are obligated to respond within the period prescribed under the DPDP Act.
• Right to Nominate: You may nominate another individual to exercise your rights on your behalf in the event of your death or incapacity.

To exercise any of these rights, please contact our designated Privacy Point of Contact (details in Section 10 below). We will respond within 30 days of receiving your request. We may request proof of identity before processing your request.

Our Site is a static website. We currently do not use persistent tracking cookies, advertising cookies, or third-party analytics services such as Google Analytics. Your visit to the Site does not result in any tracking cookie being set on your device.

The only browser storage in use is localStorage, used solely to remember your theme preference (light or dark mode) between visits. This data never leaves your device and is not transmitted to our servers.

Should we introduce any analytics or cookie-based features in the future, this policy will be updated accordingly and a consent mechanism will be put in place before any such data is collected.

Our Site and services are directed exclusively at businesses and business professionals. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that we have inadvertently collected data from a minor, we will delete it promptly. If you believe a minor has submitted an enquiry through our Site, please contact us immediately.

We may update this Privacy Policy from time to time to reflect changes in our data practices, business operations, or applicable law (including amendments to the DPDP Act and its Rules). Any material changes will be reflected with an updated "Last Updated" date at the top of this page.

We encourage you to review this policy periodically. Continued use of the Site after any changes constitutes acceptance of the revised policy.