Privacy Policy

1. Who we are

Gassol Solutions Private Limited is a private limited company incorporated in India, with its registered office at 6-32D, Betkeri Road, Moodbidri — 574227, Dakshina Kannada, Karnataka, India.

For the purposes of the DPDP Act, GASSOL is the Data Fiduciary in respect of personal data collected through this website.

2. The personal data we collect

We only collect personal data that you voluntarily provide to us. Specifically:

Through the contact form on our website, we collect: your name, your company name, your email address, your country code and phone number, the area of interest you select, and the description of your requirement.

Through the brochure request form on our website, we collect: your full name, your company name, your designation, your email address, your country code and phone number, and the verification code you enter to authenticate your identity.

Through engineering calculator unlock forms in our tools section, we collect: your full name, your company name, your email address, your country code and phone number, and the verification code you enter to authenticate your identity. We use this information to deliver detailed calculation results, branded engineering reports, and to follow up about related engineering requirements where you have consented.

Automatically when you visit our website, our systems and our service providers may collect: your IP address, the type of browser and device you use, the referring website that brought you to us, the pages you view on our website, and the date and time of your visit. This information is used for security, fraud prevention, and for understanding how our website is performing.

Through email correspondence and other direct communication, we collect any personal data you choose to share with us, such as the contents of messages you send, files you attach, and any contact information included in those communications.

We do not collect any sensitive personal data through the website. We do not knowingly collect personal data of children under the age of 18. If you believe we have inadvertently collected such data, please contact our Grievance Officer (details in Section 11) and we will promptly delete it.

3. The purposes for which we use your personal data

We use your personal data only for the following declared purposes:

To respond to your enquiries and provide information about our products, services, and capabilities.

To deliver brochures, technical literature, and other materials you have requested.

To verify your identity through one-time codes sent to your email or mobile phone, so that we can confirm you are the person who initiated a request.

To deliver detailed engineering calculation results, branded reports from our tools section, and to follow up about related engineering needs where you have consented.

To follow up with you about projects, opportunities, and engagements where there is a legitimate business interest, in accordance with the consent you have provided.

To send you occasional product updates and information about GASSOL's offerings, where you have specifically consented to receive such communications.

To maintain records of our business interactions for accounting, audit, regulatory, and legal compliance purposes.

To improve our website, our services, and our customer experience based on aggregated and anonymized usage patterns.

To protect the security of our website and our systems, prevent fraud and abuse, and respond to lawful requests from authorities.

We will not use your personal data for any purpose other than those listed above without first obtaining your fresh consent.

4. The legal basis for processing your personal data

Under the DPDP Act, we process your personal data on the following lawful bases:

Consent. Where you have voluntarily provided personal data through our forms and explicitly consented to its use for stated purposes (for example, by checking the consent box on our brochure form). You have the right to withdraw this consent at any time.

Legitimate uses. Where processing is necessary for purposes specifically permitted under the DPDP Act, such as responding to a communication you have initiated, complying with a legal obligation, or for the performance of a function under any law.

5. How long we retain your personal data

We do not keep your personal data for longer than is necessary for the purposes for which it was collected. Specifically:

After the retention period expires, we delete or anonymize the relevant data, except where we are required by law, regulation, or a legitimate audit, accounting, or legal-defence requirement to retain it for longer.

6. Who we share your personal data with

We do not sell your personal data. We share it only with the following categories of recipients, and only to the extent necessary to operate our services:

Email service provider. We use Resend (operated by Resend, Inc., a company based in the United States of America) to send transactional emails, including verification codes, brochure attachments, and notifications. Email addresses, names, and message contents are processed by Resend solely for the purpose of email delivery.

SMS service provider. We use Amazon Web Services Simple Notification Service (operated by Amazon Web Services, Inc., a company based in the United States of America, with delivery routed through India for Indian recipients) to send transactional SMS messages, including verification codes. Phone numbers and message contents are processed by AWS solely for the purpose of SMS delivery.

Hosting and content delivery provider. Our website is hosted on Cloudflare (operated by Cloudflare, Inc., a company based in the United States of America). Cloudflare processes IP addresses and request data to deliver our website, prevent abuse, and provide security services.

Email hosting provider. Our business email is hosted on Zoho Mail (operated by Zoho Corporation Pvt. Ltd., a company based in India). Zoho processes the contents of our incoming and outgoing emails for storage, delivery, and standard email functionality.

Customer engagement platform. We may from time to time use Interakt (operated by Interakt Tech Inc.) to manage customer communications. Where used, Interakt processes contact details and message contents solely for delivering our communications to you.

Authorized GASSOL personnel. Members of the GASSOL team — including sales, technical, and management staff — may access your personal data to respond to your enquiries, process your requests, and maintain our business relationship with you. GASSOL personnel access personal data only on a need-to-know basis and are instructed to maintain its confidentiality.

Legal and regulatory authorities. We may share your personal data with courts, regulatory authorities, law enforcement agencies, or government bodies where required by law, regulation, court order, or legal process; or where reasonably necessary to protect the rights, property, or safety of GASSOL, our customers, our employees, or the public.

We do not transfer your personal data to recipients in countries to which the Central Government has restricted such transfers under the DPDP Act. Where personal data is processed outside India by service providers listed above, we ensure that appropriate safeguards are in place through contractual arrangements with those providers.

7. How we protect your personal data

We implement reasonable technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

Encryption of data in transit, using HTTPS for all website communications and TLS for all email and SMS dispatches.

Access controls limiting personal data access to authorized GASSOL personnel on a need-to-know basis.

Industry-standard hosting infrastructure with built-in security features, including DDoS protection, web application firewall, and rate limiting.

Audit logging of significant data access events and consent records.

Regular review of our data handling practices and security configurations.

Service provider agreements that contractually require our processors to implement adequate security measures.

Despite our reasonable efforts, no method of internet transmission or electronic storage is 100% secure. We cannot guarantee absolute security but we will respond promptly to any incident as required under the DPDP Act.

8. Cookies and similar technologies

Our website uses a minimal set of cookies and similar technologies, limited to those necessary for the website to function and for security:

Functional cookies. Required for basic website functionality, such as remembering your session and ensuring our forms work correctly. These cannot be disabled without breaking the website.

Security cookies. Set by our hosting provider Cloudflare to detect malicious traffic, prevent abuse, and apply rate limiting. These are necessary for security.

We do not currently use marketing cookies, advertising cookies, or third-party tracking pixels on this website. If we introduce such technologies in future, we will update this Policy and, where required by law, request your consent before placing them.

You can manage cookies through your browser settings. Disabling functional cookies may prevent you from using parts of our website.

9. Your rights as a Data Principal

Under the DPDP Act, you have the following rights with respect to your personal data:

Right to access. You can request a summary of the personal data we hold about you and the processing activities we have undertaken with respect to it.

Right to correction. You can request that we correct any personal data that is inaccurate, incomplete, or misleading.

Right to erasure. You can request that we erase your personal data, subject to any legal, regulatory, or audit retention obligations that may require us to keep it for longer.

Right to withdraw consent. Where we process your personal data on the basis of your consent, you can withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Right to grievance redressal. You can raise a complaint with our Grievance Officer about any aspect of how we handle your personal data, and we will respond within the timelines prescribed under the DPDP Act.

Right to nominate. You can nominate another individual to exercise your rights under the DPDP Act on your behalf in the event of your death or incapacity.

To exercise any of these rights, please contact our Grievance Officer (details in Section 11). We will verify your identity before acting on your request, in order to protect your data from unauthorized access.

10. Withdrawal of consent

Where we rely on your consent to process your personal data, you can withdraw that consent at any time by writing to our Grievance Officer.

When you withdraw consent, we will stop processing your personal data for the purposes that were based on that consent, and we will delete or anonymize the relevant data within a reasonable timeframe, subject to any legal, regulatory, or audit retention requirements that may require us to keep it for longer.

Withdrawal of consent will not affect the lawfulness of any processing we have already carried out before the withdrawal.

11. Grievance Officer and contact

If you have any questions about this Policy, want to exercise any of your rights, or wish to raise a complaint about how we handle your personal data, please contact:

We will acknowledge your grievance within 7 (seven) working days of receipt and respond substantively within the timelines prescribed under the DPDP Act and applicable rules.

If you are not satisfied with our response, you have the right to escalate your complaint to the Data Protection Board of India, in accordance with the procedures prescribed under the DPDP Act.

12. Updates to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, our services, or applicable law. The "Effective from" date at the top of this Policy will indicate when the latest version came into effect. Where the changes are material, we will take reasonable steps to bring them to your attention, such as by posting a notice on our website or sending an email to individuals whose personal data we hold.

We encourage you to review this Policy periodically.

13. Governing law and jurisdiction

This Privacy Policy is governed by the laws of India. Any disputes arising out of or in connection with this Policy shall be subject to the exclusive jurisdiction of the courts at Moodbidri, Dakshina Kannada, Karnataka, India.