This policy explains how KSP Enterprises collects, uses, stores and discloses personal data when you contact us, request a quotation or place an order. It is issued in accordance with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000, together with the rules made under them.
For the purposes of the Digital Personal Data Protection Act, 2023, KSP Enterprises is the Data Fiduciary and you are the Data Principal.
1. Who we are and how to reach us
KSP Enterprises manufactures paper bags and non-woven bags in India. For any question, request or complaint about personal data, contact us at sales@ksppackaging.com.
2. What personal data we collect
We collect only what we need in order to respond to you and to perform a contract with you.
2.1 Data you give us directly
- Identity and contact data: your name, the name of your company or organisation, email address, telephone or messaging number, and your city and country.
- Enquiry data: the bag type, size, paper weight, quantity, printing requirement, required delivery date and any notes you add to the quotation form.
- Artwork and files: any design, logo, wording or file, or any link to a file, that you send us for printing.
- Order and transaction data: purchase orders, delivery addresses, invoices, tax registration details of your business, and correspondence relating to your order.
2.2 Data we do not collect
We do not operate analytics, advertising or tracking cookies on this website. We do not build behavioural profiles, we do not take automated decisions about you, and we do not knowingly collect the personal data of children. We do not ask for and do not want financial account details or government identity numbers through this website.
3. Why we use your personal data, and on what basis
Under the Digital Personal Data Protection Act, 2023 we process personal data either with your consent or, where the Act permits, for the legitimate uses it specifies. Our purposes are:
- To answer your enquiry and prepare a quotation. Basis: the consent you give when you submit the form, and the legitimate use of responding to a purpose you have voluntarily approached us for.
- To produce and deliver an order. Basis: performance of our contract with you.
- To communicate about an open quotation or a live order, including samples, approvals and dispatch. Basis: performance of our contract, or your consent.
- To keep accounting, tax and statutory records. Basis: compliance with law.
- To establish, exercise or defend a legal claim. Basis: compliance with law and the legitimate use permitted for legal claims.
We do not sell personal data. We do not send marketing communications unless you ask us to, and if you do, you can withdraw at any time.
4. Your artwork and confidential information
Artwork, designs, specifications and pricing you send us remain yours. We use them only to quote, sample and manufacture your order. We do not disclose them to another customer, use them as a sample or display them in our own marketing without your prior written permission.
5. Who we share personal data with
We share personal data only with Data Processors who help us operate, and only to the extent each one needs. Each acts on our instructions under contract:
- the service that delivers this website's enquiry form to our inbox;
- our email and business software providers;
- our transporter, courier or freight forwarder, for a consignment you have ordered;
- our accountants and auditors, and our legal advisers where required;
- a government authority, court or regulator, where we are required by law to disclose.
We do not otherwise transfer personal data to any third party for their own purposes.
6. Transfers outside India
Some of the service providers described above process data on servers located outside India. Where that happens, the transfer is made in accordance with section 16 of the Digital Personal Data Protection Act, 2023 and is limited to the purposes set out in this policy.
If you contact us from the United Kingdom or the European Economic Area, the UK GDPR or the EU GDPR may also apply to our handling of your enquiry. In that case we rely on your consent, or on our legitimate interest in responding to a business enquiry you initiated, and on the performance of any contract that follows. You may exercise the rights described in section 8 by writing to us.
7. How long we keep personal data
| Category | Retention period |
|---|---|
| Enquiries that do not become orders | 24 months from your last contact with us |
| Artwork for an order that was not placed | 12 months, then deleted |
| Order, invoice and tax records | 8 years, as required by Indian tax and company law |
| Printing plates, dies and screens | 12 months after your last order, unless you ask us to keep them |
| Records relating to a dispute | Until the dispute is finally resolved, and then for the period allowed for appeal |
When a retention period ends we delete the data or anonymise it so that it can no longer be linked to you.
8. Your rights
As a Data Principal under the Digital Personal Data Protection Act, 2023, you have the right to:
- Access a summary of the personal data we hold about you and of how we process it, and the identities of those with whom we have shared it;
- Correction and completion of inaccurate or incomplete data, and updating of data that has changed;
- Erasure of your personal data, where we are not required by law to retain it;
- Withdraw consent at any time, as easily as you gave it. Withdrawal does not affect processing already carried out;
- Grievance redressal through the route in section 9 below, before approaching the Data Protection Board of India;
- Nominate another person to exercise your rights on your behalf in the event of your death or incapacity.
To exercise any of these, write to sales@ksppackaging.com. We will respond within 30 days. We may ask you for enough information to confirm your identity before we act, so that we do not disclose your data to someone else.
You also have duties under section 15 of the Act, including not to raise a false or frivolous grievance and not to furnish false particulars.
9. Grievance redressal
If you are not satisfied with how we have handled your personal data, our Grievance Officer will deal with your complaint:
Grievance Officer: The Proprietor, KSP Enterprises
Email: sales@ksppackaging.com
Response time: we acknowledge within 7 days and resolve within 30 days.
If your complaint is not resolved, you may refer the matter to the Data Protection Board of India under the Digital Personal Data Protection Act, 2023. If the UK GDPR or EU GDPR applies to you, you may also complain to your own supervisory authority.
10. Security
We take reasonable security safeguards to protect personal data against unauthorised access, disclosure, alteration and loss, including restricting access to those who need it, using access-controlled accounts, and keeping our software up to date. No transmission over the internet can be guaranteed completely secure. If a personal data breach occurs we will notify the Data Protection Board of India and each affected Data Principal as required by the Act.
11. Cookies
This website sets no cookies of its own and uses no analytics or advertising cookies. Web fonts are loaded from Google Fonts, which means your browser makes a request to Google's servers and Google may log your IP address in the course of serving that file. If we add analytics in future we will update this policy and, where consent is required, ask for it before any non-essential cookie is set.
12. Third party links
Where this website links to a third party site, that site's own privacy policy applies to anything you do there. We are not responsible for the content or the data practices of sites we do not operate.
13. Changes to this policy
We may update this policy. The effective date and version number at the top of this page will change when we do. Where a change materially affects how we use your personal data, we will tell you directly if we hold your contact details.