Privacy policy

1. Who we are

Vinayak Garments is a garment manufacturer based at H-140, DLF Garden City, Phase 2A, Indore, Madhya Pradesh, India (GSTIN 23ALGPK9271JIZU, IEC ALGPK9271J). We decide why and how your personal data is used, so we are the data fiduciary under Indian law and the controller under the GDPR and UK GDPR.

Contact for privacy questions and grievances: info@vinayakgarments.com, or by post at the address above.

2. Laws we follow

We handle personal data in line with the Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025 (their main duties start in phases, with full effect from May 2027, and we apply their principles now), the Information Technology Act, 2000 and the SPDI Rules, 2011 while they remain in force. Where it applies to you, we also follow the EU GDPR, the UK GDPR and comparable laws such as those of Switzerland, Canada, Australia, Brazil, the UAE and US states. We extend the rights in section 11 to visitors from every country.

3. What we collect

• Enquiry details you give us: name, company, country, email, phone, your role, products, quantity, timeline, preferred way to reply and your notes.
• Messages you send us by email, phone or WhatsApp.
• Technical data: IP address, browser and device type and pages requested, kept in our hosting provider's server logs for security and reliability.
• Enquiry basket: the products you add are stored on your own device and reach us only when you send an enquiry.

We do not ask for payment card details, government ID numbers or sensitive data through this website. It is meant for business users aged 18 or over, and we do not knowingly collect data from children.

4. Why we use it and our legal basis

• To answer your enquiry, prepare quotations and samples, and take steps you ask for before a contract (consent and pre-contract steps).
• To perform contracts, deliver orders, issue invoices and export documents (contract).
• To meet tax, GST, customs, export and accounting obligations (legal obligation).
• To keep the website secure and understand how it is used (legitimate interests).
• To send news or offers, only if you ask for them or agree (consent). You can opt out at any time.

We do not make decisions about you by automated means and we do not sell personal data.

5. Consent and withdrawing it

The enquiry form has a tick box that you must select before sending. Withdrawing consent is as easy as giving it: email us and we will stop using your data for the purpose you withdraw. This does not affect what we did before you withdrew, or processing we must continue for legal reasons.

6. Who we share it with

Only as needed: email, hosting and messaging providers (including WhatsApp if you use that button), our business software such as an ERP or CRM, freight forwarders, customs brokers, banks and insurers when an order is placed, professional advisers, and government authorities when the law requires. Providers act on our instructions and are bound to protect the data.

7. International transfers

We are in India, so data you send us is processed in India and by providers in other countries. If you are in the EU, UK or another region with transfer rules, we rely on your request to contact us, steps before a contract, and safeguards such as contractual clauses with our providers where required. We also follow any limits on transfers set under Indian law.

8. Cookies and similar technologies

This website sets no cookies and uses no advertising, tracking or analytics tools and no third-party fonts. The enquiry basket uses your browser's local storage, which is strictly necessary for a feature you requested; clear it any time in your browser. If we add analytics or marketing tools, we will update this page and ask for your consent first where the law requires.

9. How long we keep it

Enquiries that do not lead to business are deleted after about 24 months. Customer and order records are kept for the periods Indian tax, GST, customs and company law require, and for as long as needed to handle claims. We then delete or anonymise them.

10. Security

We use reasonable safeguards: encrypted connections, access limited to staff who need the data, and checks on our providers. If a personal data breach affects you, we will tell you and the authorities as the law requires, including the Data Protection Board of India within the time its rules set.

11. Your rights

You may ask to see the personal data we hold, correct or complete it, erase it, withdraw consent, or nominate another person to exercise your rights if you cannot. If the GDPR or UK GDPR applies, you may also ask us to restrict processing, receive your data in a portable format, or object to processing based on legitimate interests. US residents may ask what we collect, and to correct or delete it; we do not sell or share personal data for advertising, and we will not treat you worse for asking.

Email info@vinayakgarments.com. We may need to confirm your identity, and we aim to reply within 30 days.

12. Complaints and grievances

Please contact us first at info@vinayakgarments.com and we will acknowledge within 3 working days and aim to resolve within 30 days. You can also complain to the Data Protection Board of India or, if you are in the EU or UK, to your local data protection authority.

13. Other websites and services

Buttons such as WhatsApp or email open services run by other companies under their own privacy policies. Our B2B store, when launched, will have its own notice for account and order data.

14. Changes

We will post updates here and change the date above. If a change affects how we use data you already gave us, we will ask for your consent again where required.