Enquiry data

Why it is collected

Enquiry details are used to respond to the enquiry, to prepare a proposal if one is requested, and to carry out the engagement that follows if the work proceeds. They are used for no other purpose. Advik Protofab does not send marketing material and does not add enquirers to a mailing list.

The basis for this use is the consent given by ticking the box on the enquiry form. The enquiry is sent once the box is ticked, and the answer is recorded alongside the enquiry. That consent may be withdrawn at any time, by writing to the address below.

IP addresses are processed on the separate basis of protecting the site against automated abuse, and are held only for as long as that purpose requires. The form carries an automated check for the same purpose. A submission that it flags is set aside for manual review rather than discarded, so that a genuine enquiry caught in error is not lost, and it is then kept or deleted on the same terms as any other enquiry.

Who has access

Enquiry details are accessible to the officers of Advik Protofab Private Limited. They are not sold, rented, or disclosed to any third party for that party's own purposes.

Two service providers necessarily handle the data in transit or in delivery:

• Cloudflare carries traffic between your browser and the company's server and terminates the encrypted connection, and in doing so processes connection data including the IP address. Cloudflare operates a global network.
• Google, only where a visitor chooses a language other than English on a descriptive page. The text of that page is sent to Google Translate to be translated, and Google receives the visitor's IP address and browser details in the usual way. Nothing is sent to Google otherwise.
• The company's email provider delivers a notification of the enquiry to the company's mailbox, and carries any correspondence that follows.

Where an engagement proceeds, technical documents supplied by a client remain confidential and are covered by the terms of that engagement, not by this notice.

Where it is held, and for how long

Enquiry records are stored on a server controlled by Advik Protofab Private Limited in India. Access to the stored records requires a password held by the company, and the connection to the site is encrypted.

• Enquiries that do not lead to an engagement. Kept for three years after the last correspondence, after which they are deleted.
• Records of an engagement that proceeds. Kept for eight years from the end of the relevant financial year, because the Companies Act, 2013 and the tax legislation require the underlying books and records to be retained for that period.
• IP addresses used for rate limiting. Deleted automatically within twenty-four hours.
• Server logs. Retained under the ordinary log rotation of the server, and not used for any purpose other than security and fault diagnosis.

An enquiry can be deleted earlier on request, unless it has become part of the records of an engagement that the legislation above requires to be retained.

Your rights

Under the Digital Personal Data Protection Act, 2023, a person whose personal data is held may:

• ask what personal data is held about them, and how it has been used;
• ask for it to be corrected, completed or updated;
• ask for it to be erased, where it is no longer needed for the purpose it was given for;
• withdraw consent, after which the data is erased unless it must be retained for a legal reason;
• raise a grievance about how the data has been handled.

Any of these can be exercised by writing to the Grievance Officer at [email protected], stating what is being asked for. A request is acknowledged on receipt and answered within ninety days, the period allowed by the Digital Personal Data Protection Rules, 2025; in practice most are answered well inside it.

Consent may be withdrawn at any time by writing to the same address, and withdrawal is as straightforward as giving consent was. If a grievance is not resolved, it may be taken to the Data Protection Board of India, established under the Digital Personal Data Protection Act, 2023.