Privacy Policy for Gansons Pvt. Ltd. (www.gansons.com)

Introduction and scope
Gansons Pvt. Ltd. (“Gansons”, “we”, “our” or “us”) is committed to protecting the privacy and security of personal data collected via our website https://www.gansons.com (the “Site”), our sales and service interactions, and related online services. This Privacy Policy explains what information we collect, why we collect it, how we use and share it, and the choices available to individuals in India and other jurisdictions where we operate.

Governing laws and updates
We process personal data in accordance with applicable Indian laws (including the Information Technology Act and Rules and the Digital Personal Data Protection Act (DPDP Act) where in force) and other applicable international privacy laws as relevant. We may update this Policy from time to time; the “Last updated” date at the top of the page shows the most recent revision.

Contact and data-controller details
Data Controller: Gansons Pvt. Ltd.
Registered / Head Office: 157/158A, Akbar Camp Road, Sandoz Baug, Kolshet, Thane 400607, Maharashtra, India.
Email: marketing@gansons.com, sales@gansons.com.
Phone: +91 22 6988 8000. [web:contact-us]

Information we collect

  • Information you provide directly: contact details (name, company, job title, email, phone), enquiry content (project details, RFQs, technical questions), resumes or recruitment submissions, and any documents or attachments you upload.
  • Automatically collected information: technical data such as IP address, browser type and version, pages visited, timestamps, device identifiers, and cookies or similar technologies used to improve Site functionality and analytics.
  • Business and commercial information: purchase orders, quotations, contract and service history, invoicing and payment details where applicable (note: payment card data is processed only by our payment provider unless otherwise specified).
  • Sensitive personal data: we minimise collection of sensitive personal data; if any sensitive data (health, biometric, etc.) is necessary, we will collect it only with explicit consent and appropriate safeguards.

Purposes for processing
We use personal data for the following purposes:

    • To respond to enquiries, provide quotes, deliver equipment and services, and manage customer relationships.
    • To operate, maintain and improve the Site and our services, including technical support, analytics, and security monitoring.
    • To comply with legal, regulatory, tax and audit obligations and to respond to lawful requests by authorities.
    • For recruitment processes and onboarding of employees, contractors or candidates.
    • For marketing communications (newsletters, event invites, product updates) where lawful basis exists (consent or legitimate interests), with an option to opt-out.

    Legal basis for processing (where applicable)
    Where required by local law (for example under DPDP Act or EU law), we will rely on one or more lawful bases such as consent, performance of contract, compliance with legal obligations, or legitimate interests (e.g., to operate our business and improve services). Individuals will be informed of the lawful basis where required.

    Cookies and tracking technologies
    We use cookies and similar technologies for essential site functionality, analytics, performance improvement and optional marketing features. You may control or block cookies through your browser settings; however, disabling certain cookies may affect Site functionality. An explanation of cookie categories and how to opt out will be presented on first visit.

    Sharing and disclosure
    We do not sell personal data. We may share personal data with:

      • Service providers and vendors (e.g., hosting, CRM, analytics, logistics, payment processors) who act on our instructions and are subject to confidentiality and security obligations.
      • Affiliates and group companies where needed to provide services or support.
      • Professional advisors, auditors, courts, regulators, or law enforcement where required by law or to protect our rights.
      • Prospective buyers, investors or acquirers in the context of a business transfer, subject to confidentiality protections and notice to affected individuals where required.

      International transfers
      As a global company, personal data may be transferred to, stored, and processed in jurisdictions outside the country of origin (including India, the UK and other countries where our service providers operate). We implement appropriate safeguards (contracts, standard contractual clauses, and technical controls) as required by law.

      Data retention
      We retain personal data only for as long as necessary for the purposes set out in this Policy, to fulfil legal obligations, resolve disputes, and enforce our agreements. Retention periods vary by data type (e.g., enquiries and CRM records, contract documents, recruitment files). Exact retention schedules are available on request.

      Data security
      We implement reasonable technical, administrative and physical safeguards to protect personal data against unauthorised access, disclosure, alteration or destruction. These controls include access controls, encryption (where appropriate), secure hosting, vulnerability management and staff training. However, no internet transmission is fully secure; we encourage users to take care when sharing sensitive information.

      Your rights and choices
      Depending on applicable law, you may have rights including:

        • Access to the personal data we hold about you.
        • Correction or rectification of inaccurate data.
        • Deletion or restriction of processing in certain circumstances.
        • Portability of your personal data in a commonly used machine-readable format.
        • To object to processing for direct marketing or on grounds relating to your particular situation.
          To exercise any rights, or to withdraw consent where processing is based on consent, contact marketing@gansons.com or use the contact details above. We will respond within the timelines required by local law.

        Marketing communications
        We will send marketing e-mails only if you have given consent or where another lawful basis applies. Every marketing message includes an unsubscribe option or instructions to opt-out. If you opt-out, we will respect your choice promptly.

        Third-party links
        The Site may link to third-party websites and services that are not controlled by Gansons. This Policy does not apply to those websites; we encourage you to review their privacy policies before providing personal data.

        Children
        The Site is not directed to children and we do not knowingly collect personal data from children under applicable minimum ages. If we become aware that we have collected such data without parental consent, we will take steps to delete it.

        Data breach notification
        In the event of a confirmed data breach affecting personal data, we will take appropriate steps to contain and investigate the incident and notify affected individuals and regulators as required by applicable law.

        Contact, complaints and supervisory authority
        For questions or requests regarding this Privacy Policy or our data practices, contact: marketing@gansons.com and sales@gansons.com. You may also write to our registered office address above. If you believe your rights under applicable privacy law have been violated, you may lodge a complaint with the relevant supervisory authority.

        Additional industry-specific notes
        Where we collect or process customer technical project data, drawings, or confidential manufacturing specifications as part of quotations, service delivery or OEM agreements, such information will be treated as confidential and managed under contract terms and appropriate security measures. If you are a clinical or trial contact and share health or trial data, separate, more restrictive agreements and safeguards will apply.

        Changes to this policy
        We may update this Privacy Policy to reflect legal, technical or business developments. We will post the revised policy on the Site with an updated “Last updated” date and, where appropriate, notify users by email.

          Last updated: [insert date]