Draft for review. Prepared with reference to India’s Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000. It is not legal advice; please have it reviewed before publication. Items in [PLACEHOLDER] brackets must be completed by the company.
JBM Energy Resources Pvt. Ltd. (“JBM”, “we”, “us”) respects your privacy. This policy explains how we collect, use, store and protect personal data when you visit www.jbmenergyresources.com, submit a request for quotation (RFQ) or contact us. We act as a Data Fiduciary under the DPDP Act.
1. Who we are
JBM Energy Resources Pvt. Ltd., V.P.O. Pawa, G.T. Road, Ludhiana, Punjab 141120, India. Email: info@jbmenergyresources.com. CIN: [PLACEHOLDER: CIN]. GSTIN: [PLACEHOLDER: GSTIN].
2. Personal data we collect
- Business contact details you provide: name, company, designation, business email and phone / WhatsApp number.
- Requirement details: service required, component, material, weight, quantities, current process, delivery location and your message.
- Drawings and documents you choose to upload (PDF, DWG, DXF, JPG, PNG, XLSX). These may contain confidential technical information of your company.
- Consent record: when you submit a form we record the date and time, IP address, browser user-agent and the version of the consent wording you agreed to.
- Technical and usage data: limited data such as IP address and browser type in security logs, and anonymous, cookieless usage counts (see section 8).
3. Why we use it
- to evaluate your requirement, prepare quotations and discuss technical details, trial lots and plant visits;
- to respond to enquiries and keep a record of our communication;
- to protect the website from spam and misuse; and
- to comply with applicable law.
Your drawings and technical information are used only to evaluate your requirement. We do not sell personal data and do not use it for unrelated marketing.
4. Consent and withdrawal
We process the data you submit on the basis of your consent, given by ticking the consent box on our forms. You may withdraw consent at any time by writing to info@jbmenergyresources.com. We will then stop processing and delete your data within a reasonable time, unless we must keep it by law. Withdrawal does not affect processing done before it.
5. Confidentiality of drawings
Uploaded files are stored in a private storage bucket that is not publicly accessible. They are available only to authorised JBM personnel through a protected admin area, or through private links that expire. We do not share your drawings with third parties except as needed to evaluate your requirement and with your agreement, or where required by law. [PLACEHOLDER: if an NDA is offered on request, mention it here]
6. Service providers
We use service providers (Data Processors) to run the website and handle enquiries, including Cloudflare (hosting, form processing, database, file storage, security checks and email routing) and Google Workspace (company email). Some providers may process data on servers outside India, only as permitted under the DPDP Act and any rules notified under it.
7. Retention
We keep enquiry data and drawings only as long as needed for the purposes above. [PLACEHOLDER: retention period, e.g. 24 months after the last communication for enquiries that do not proceed; longer for customers as required by contract and law]
8. Cookies and analytics
This website does not use advertising or third-party tracking cookies. We may use Cloudflare Web Analytics, which is cookieless and does not track individual visitors across sites. We also record a few anonymous events on our own server (for example, that a “Request a Quote” button was clicked, or that a form was submitted), without cookies and without storing your IP address with these events. The security check on our forms (Cloudflare Turnstile) may process technical signals to tell people and bots apart. The map on the Contact page loads from Google only if you click “Show map here”; Google’s privacy policy then applies.
9. Security
We use reasonable safeguards, including encrypted connections (HTTPS), private storage, access control for the admin area and limited access to those who need it. No method of transmission or storage is completely secure. If a personal data breach occurs, we will act as required under the DPDP Act.
10. Your rights
Subject to the DPDP Act, you may request a summary of your personal data; its correction, completion, updating or erasure; withdraw consent; nominate another person to exercise your rights; and have your grievances redressed.
11. Grievance officer
[PLACEHOLDER: name and designation of grievance officer], JBM Energy Resources Pvt. Ltd., V.P.O. Pawa, G.T. Road, Ludhiana, Punjab 141120, India. Email: info@jbmenergyresources.com (subject: “Privacy request”). We aim to respond within the time prescribed by law. You may also approach the Data Protection Board of India.
12. Changes
We may update this policy. The latest version will always be on this page with its date.