Privacy Policy

Effective Date: 31 March 2022 | Last Updated: 17 August 2026

1. Introduction

This Privacy Policy describes how Khaitan Bio Energy (P) Ltd. (“the Company”, “we”, “us” or “our”) collects, uses, discloses, stores and protects the personal data of visitors and users (“you”, “your”) of the website www.khaitanbioenergy.com (the “Website”).

This Privacy Policy is published in compliance with (i) the Digital Personal Data Protection Act, 2023 (“DPDPA”) and rules made thereunder; (ii) Rule 3 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“SPDI Rules”); (iii) Rule 3 of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021; and (iv) Section 43A of the Information Technology Act, 2000.

By accessing the Website, submitting information through it, subscribing to any updates, downloading any material, contacting us or otherwise interacting with us, you acknowledge that you have read this Privacy Policy and freely, specifically and unambiguously consent to the collection, storage, processing, use and disclosure of your personal data in accordance with this Privacy Policy.

3. Personal Data We Collect

3.1 Information you provide directly to us:

Name, email address, phone number, designation, organisation and country provided through contact forms, enquiry forms, newsletter subscriptions or email correspondence;
Content of any queries, enquiries, requests for proposals, technical discussions or other correspondence you initiate with us;
Feedback, testimonials and comments submitted through the Website.

3.2 Information collected automatically:

Device and technical data – IP address, browser type and version, device type, operating system, referring URL and pages visited;
Usage data – time on page, click-stream data, session duration, scroll depth and interaction with Website elements;
Cookies and similar tracking technologies (see Clause 6 below).

3.3 Information from third parties:

Analytics data from Google Analytics, Google Tag Manager and any similar analytics platforms deployed on the Website;
Public profile information from professional networks (such as LinkedIn) if you connect with us through those channels.

4. How We Use Your Personal Data

To respond to your enquiries, requests for information and requests for proposals;
To provide, maintain, personalise and improve the Website and our services;
To send transactional and service communications relating to your enquiries;
To send periodic industry, technology and business updates, subject to your right to opt out at any time;
To operate, secure and improve the Website (analytics, security, troubleshooting, feature development);
To comply with applicable legal, regulatory, tax and accounting obligations;
To detect, investigate and prevent fraud, abuse and security incidents;
To enforce our Terms of Use and to protect our rights and property.

5. Lawful Basis for Processing

We process your personal data on one or more of the following lawful bases: (i) your consent under the DPDPA and applicable law; (ii) performance of a contract or taking of steps at your request prior to entering into a contract; (iii) compliance with a legal obligation; and (iv) our legitimate business interests, including responding to enquiries, business development, analytics and communications, where these are not overridden by your fundamental rights and interests.

6. Cookies and Similar Technologies

The Website uses cookies, web beacons, pixels and similar technologies to distinguish you from other users, remember your preferences, enable analytics and help us deliver a better user experience. The categories of cookies used include:

Strictly necessary cookies – required for the Website to function properly;
Analytics cookies – deployed via Google Analytics / Google Tag Manager to help us understand Website usage;
Functional cookies – remember your preferences (for example, language or region);
Third-party cookies – set by embedded services such as YouTube video embeds, LinkedIn plug-ins or hosting/CDN providers.

You may control cookies through your browser settings; however, disabling cookies may affect the functionality of parts of the Website.

We may share your personal data with the following categories of third parties, strictly for the purposes described in this Policy:

Hosting and infrastructure providers, content delivery networks (CDNs) and IT service providers;
Analytics providers – Google (via Google Analytics / Google Tag Manager) and similar platforms;
Communication and email platforms used by the Company;
Professional advisors – lawyers, accountants, auditors, insurers, subject to confidentiality obligations;
Group and affiliated entities of the Company, for internal business, administrative and reporting purposes;
Governmental, regulatory or judicial authorities where disclosure is required by applicable law.

We do not sell your personal data to any third party.

8. Cross-Border Data Transfers

Some of the third-party service providers listed above (including analytics and hosting providers) may be located outside India. Where personal data is transferred outside India, we take reasonable steps to ensure such transfers comply with applicable law, including by entering into appropriate contractual safeguards with such providers and, where required, obtaining your consent.

9. Data Retention

We retain personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law, tax, accounting or dispute-resolution requirements. Business enquiry records are typically retained for a period of up to eight (8) years, in line with applicable statutory and audit requirements. Analytics and usage data are retained for a shorter period, in accordance with the settings of the applicable analytics provider.

10. Data Security

We implement reasonable technical, administrative and physical safeguards designed to protect personal data from unauthorised access, use, alteration, disclosure or destruction, consistent with the requirements of the SPDI Rules and the DPDPA. These measures include access controls, encryption in transit (HTTPS/TLS), secure storage of confidential documents, and vendor due diligence. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

11. Your Rights

Subject to and in accordance with applicable law (including the DPDPA), you have the following rights in relation to your personal data:

Right to access – to obtain a summary of the personal data being processed about you;
Right to correction and erasure – to correct inaccurate data or request deletion where appropriate;
Right to withdraw consent – to withdraw consent to processing at any time (which shall not affect the lawfulness of processing carried out prior to withdrawal);
Right of grievance redressal – to raise a grievance with our Grievance Officer (see Clause 14);
Right to nominate – to nominate an individual to exercise the above rights in the event of your death or incapacity.

To exercise any of the above rights, please contact us at anant@khaitanbioenergy.com.

12. Children

The Website and our services are not directed at, and we do not knowingly collect personal data from, children under the age of eighteen (18) years. If you believe that a child has provided us with personal data, please contact us and we shall promptly delete such information.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The updated version shall be effective from the date indicated at the top of this Policy. We encourage you to review this Policy periodically.

14. Grievance and IP Officer

In compliance with the DPDPA, the SPDI Rules and the IT Intermediary Rules, the details of our Grievance Officer – who is also the designated point of contact for all intellectual-property notices – are as follows:

Name: Mr. Anant Khaitan (Director)

Designation: Grievance Officer and Designated Copyright / IP Officer

Email: anant@khaitanbioenergy.com (or anant@khaitanbioenergy.com)

Telephone: +91 98108 79600

Response Time Commitment: Grievances shall be acknowledged within forty-eight (48) hours and endeavoured to be resolved within thirty (30) days of receipt.

15. Governing Law and Jurisdiction

This Privacy Policy shall be governed by and construed in accordance with the laws of India. The courts at [Insert City], India shall have exclusive jurisdiction in respect of any dispute arising in connection with this Policy, subject to the arbitration agreement contained in our Terms of Use.

16. Contact

For any questions or concerns about this Privacy Policy, please contact:

Khaitan Bio Energy (P) Ltd.

Email: anant@khaitanbioenergy.com | Website: www.khaitanbioenergy.com | Tel: +91 98108 79600

By using this Website, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use and disclosure of your personal data as described herein.