Shri Krishna Industries (operating under the brand "Norton Power") respects your privacy. This document explains what personal data we collect, why we collect it, how we use it, and the rights you have under Indian law.
This privacy policy applies to nortonpower.in ("the Website") and all related WhatsApp, email, and telephone communications operated by Shri Krishna Industries.
| Legal entity | Shri Krishna Industries |
|---|---|
| GSTIN | 22AAFPL0353E1ZD |
| Registered office | 2nd Floor, B/8, Sector 5, Devendra Nagar, Raipur, Chhattisgarh, India |
| Works | 856, Sector D, Sarona, Urla Industrial Area, Raipur, Chhattisgarh, India |
| Brand | Norton Power |
| Contact | enquiry@nortonpower.in · +91 89599 04451 |
We are the "Data Fiduciary" under the Digital Personal Data Protection Act, 2023 (DPDPA). For data we collect through Meta's WhatsApp Business API, Meta acts as a separate processor under its own privacy terms.
When you submit an enquiry through our website form, WhatsApp, email, or phone, we collect:
When you message us on WhatsApp, Meta provides us with your WhatsApp display name, profile picture (if visible), and the phone number you used to message us. We do not receive your full Meta or Facebook profile.
We process your personal data only for the following specific purposes, each with a lawful basis under DPDPA Section 7:
| Purpose | Lawful basis |
|---|---|
| Respond to your sales enquiry | Necessary for taking steps before entering a contract (your request) |
| Send acknowledgement and quote on WhatsApp/email | Necessary for the requested service |
| Maintain enquiry records for tax and legal compliance | Legal obligation (GST, accounting laws) |
| Improve our website and services | Legitimate interest (anonymised data only) |
| Send marketing communications | Your express consent — you can withdraw anytime |
| Defend legal claims | Legitimate interest |
We do not use your data for automated decision-making or profiling that produces legal effects on you. We do not sell your personal data to anyone, ever.
We use Meta's WhatsApp Business Cloud API to communicate with you. By messaging us on WhatsApp or providing your WhatsApp number, you understand that:
The templates we use have been reviewed and approved by Meta. We retain WhatsApp message logs for 90 days for delivery confirmation and audit purposes.
We share personal data only with the following categories of recipients, and only as necessary:
| Recipient | Purpose | Location |
|---|---|---|
| Meta Platforms (WhatsApp Business API) | Message delivery | USA / Ireland |
| Resend (transactional email) | Email delivery | USA |
| Hosting provider | Website infrastructure | India |
| Government / legal authorities | When legally compelled | India |
| Logistics partners | Delivering products you've ordered | India |
| Tax / audit professionals | Compliance (under NDA) | India |
We do not share your data with advertisers, data brokers, or marketing platforms. We do not sell personal data under any circumstances.
We use a minimal set of cookies. There are no advertising or third-party tracking cookies on this website.
| Cookie | Purpose | Duration |
|---|---|---|
np_admin_session | Admin authentication (only set if you log into the admin panel) | 7 days |
| Browser session storage | Form draft preservation | Browser session |
We do not use Google Analytics, Facebook Pixel, or any third-party tracking. If we add anonymised analytics in future, this policy will be updated and you will be notified.
| Data category | Retention period |
|---|---|
| Active enquiries (status: new, contacted, quoted) | Up to 24 months from last activity |
| Closed enquiries (won/lost) | 7 years (tax and legal compliance) |
| WhatsApp message logs | 90 days |
| Server access logs | 30 days |
| Marketing consent records | Until consent withdrawn + 1 year |
After the retention period, we either delete the data or anonymise it so it can no longer be linked to you. Tax-related records (invoices, GST documents) are retained for 7 years as required by the Income Tax Act and CGST Act.
We protect your data using industry-standard measures:
Despite our measures, no system is 100% secure. If a personal data breach occurs that is likely to cause significant harm, we will notify you and the Data Protection Board of India within 72 hours, as required by DPDPA.
As a Data Principal under the DPDPA, you have the following rights:
To exercise any of these rights, email enquiry@nortonpower.in with the subject line "DPDPA Request". We will respond within 30 days.
If you are not satisfied with our response, you may file a complaint with the Data Protection Board of India established under the DPDPA Act.
Our website and services are intended for business buyers. We do not knowingly collect personal data from children under 18. If we learn that we have inadvertently collected such data, we will delete it. Parents or guardians who believe their child has provided personal information may contact us at enquiry@nortonpower.in.
Some of our service providers (Meta for WhatsApp, Resend for email) process data outside India. These transfers are made under contractual safeguards that protect your data to a standard equivalent to Indian law. We do not transfer data to any country listed under restricted jurisdictions notified by the Government of India.
We may update this policy from time to time. The "Last updated" date at the top reflects the latest version. Material changes will be notified to you via WhatsApp or email if you have provided contact details, and through a prominent notice on our website for 30 days. Continued use of our services after a change constitutes acceptance.
For any questions, complaints, or to exercise your rights:
| Grievance Officer | Rishabh Lath |
|---|---|
| enquiry@nortonpower.in | |
| Phone | +91 89599 04451 |
| Postal address | Shri Krishna Industries, 2nd Floor, B/8, Sector 5, Devendra Nagar, Raipur, Chhattisgarh, India |
| Response time | Within 30 days of receipt |