Privacy Policy

Graphler Technology Solutions ("Graphler", "GTS", "we", "our" or "us") respects your privacy and is committed to protecting the personal information of individuals who visit our website, contact us, request quotations, apply for employment or engage with our engineering services.

This Privacy Policy explains how we collect, use, store, disclose and protect personal information when you access or use our website: https://www.graphlertech.com

This policy is intended to comply with the European Union General Data Protection Regulation (EU) 2016/679 ("GDPR"), where applicable, and other relevant data protection laws, including applicable Indian data protection legislation.

The website is operated by:

For privacy-related questions, requests or complaints, please contact us using the details above.

Where required by applicable law, we will designate an appropriate Data Protection Officer or privacy representative and publish their contact details.

Depending on how you interact with our website and services, we may collect the following categories of information:

3.1 Personal Identification Information

• Full name
• Business email address
• Contact number
• Job title and designation
• Company or organisation name
• Country and business location

3.2 Business and Project Information

When you request engineering services or submit an enquiry, we may collect:

• Project descriptions and technical requirements
• Engineering specifications and drawings
• CAD files, models and technical documents
• Product images and reference materials
• Project budgets and delivery expectations
• Other information voluntarily submitted for quotation or consultation purposes

3.3 Website and Technical Information

When you browse our website, certain technical information may be collected, including:

• IP address
• Browser type and version
• Operating system and device information
• Pages visited and browsing duration
• Referring website or source
• Date and time of website access
• Website interaction and diagnostic information

3.4 Communication Information

We may retain information contained in communications sent through:

• Website contact forms
• Email correspondence
• Telephone enquiries
• Business consultation requests
• Recruitment and career applications

3.5 Recruitment Information

If you apply for employment or submit your CV, we may collect your professional qualifications, employment history, skills, portfolio, contact details and other recruitment-related information.

Please do not submit sensitive personal information unless it is specifically required and requested through an appropriate process.

We collect information through:

1. Direct interactions: When you submit contact forms, request quotations, share project information or communicate with our team.
2. Website interactions: Through cookies, server logs and similar technologies, where enabled.
3. Business communications: Through email, telephone and other professional communication channels.
4. Third-party sources: Where permitted by law, we may receive business contact information from professional directories, referrals, recruitment platforms or business partners.

We only collect information that is reasonably necessary for the relevant business purpose.

We process personal information for the following purposes:

• Responding to enquiries and quotation requests.
• Understanding your engineering and product development requirements.
• Providing CAD, FEA, CFD, product design, prototyping and manufacturing services.
• Preparing proposals, estimates and project documentation.
• Managing client relationships and contractual obligations.
• Communicating project updates and service-related information.
• Improving website performance, usability and functionality.
• Maintaining website security and preventing fraudulent activity.
• Managing recruitment and employment applications.
• Sending relevant business updates and marketing communications, where legally permitted.
• Complying with applicable legal, regulatory and accounting requirements.

We will not use your personal information for purposes incompatible with those originally communicated to you without an appropriate lawful basis.

Where GDPR applies, we process personal data based on one or more of the following legal grounds:

Consent – Article 6(1)(a)

Where you have voluntarily consented to receive marketing communications, accept non-essential cookies or participate in other optional data-processing activities.

Contractual Necessity – Article 6(1)(b)

Where processing is necessary to respond to a request before entering into a contract or to perform an existing contract for engineering or consulting services.

Legal Obligation – Article 6(1)(c)

Where processing is necessary to comply with applicable legal, tax, accounting or regulatory requirements.

Legitimate Interests – Article 6(1)(f)

Where processing is necessary for legitimate business interests, including website security, service improvement, business communications and protection against fraudulent activity, provided these interests do not override your fundamental rights and freedoms.

Where we rely on legitimate interests, we will consider and document the relevant balancing assessment.

Our website may use cookies and similar technologies to improve functionality, understand website usage and support website security.

Cookies may include:

• Strictly Necessary Cookies: Required for essential website functionality and security.
• Functional Cookies: Used to remember user preferences.
• Analytics Cookies: Used to understand website traffic and improve website performance.
• Marketing Cookies: Used for advertising measurement or personalised marketing, where applicable.

Where required by GDPR and applicable ePrivacy rules, non-essential cookies will only be activated after obtaining your consent.

You may accept, reject or customise non-essential cookies through the website's cookie preference mechanism.

You can also manage cookies through your browser settings. Disabling certain cookies may affect website functionality.

Withdrawing cookie consent will not affect the lawfulness of processing performed before withdrawal.

We do not sell or rent your personal information to third parties.

However, we may share relevant information with trusted third parties where necessary for legitimate business operations, including:

• Website hosting and cloud infrastructure providers.
• IT maintenance and technical support providers.
• CRM and business communication platforms.
• Analytics and website performance providers.
• Professional consultants, auditors and legal advisors.
• Recruitment and application management providers.
• Subcontractors and engineering partners, where necessary for project execution.
• Government authorities or regulatory bodies where legally required.

Such third parties will only receive information necessary for their assigned purposes.

Where a third party processes personal data on our behalf, we will implement appropriate contractual safeguards, including data-processing agreements where required under GDPR Article 28.

Graphler Technology Solutions operates from India and may work with customers, suppliers and business partners located in other countries.

Your personal data may therefore be transferred to or accessed from countries outside the European Economic Area (EEA).

Where GDPR applies, international transfers will be carried out in accordance with Chapter V of the GDPR, using appropriate safeguards such as:

• European Commission adequacy decisions, where applicable.
• Standard Contractual Clauses (SCCs).
• Appropriate transfer risk assessments and supplementary measures, where required.
• Other legally recognised transfer mechanisms.

You may contact us to obtain further information about the safeguards applicable to your personal data transfers.

We retain personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected, including legal, contractual, accounting and regulatory requirements.

Our general retention approach is:

• Website enquiries: Up to 24 months after the last meaningful interaction, unless further retention is necessary.
• Quotation and proposal records: Up to 3 years after the last relevant interaction, unless a contract or legal requirement applies.
• Client and project records: For the duration of the contractual relationship and the applicable statutory limitation or retention period.
• Marketing information: Until you withdraw consent or object to the relevant marketing activity.
• Recruitment records: Up to 12 months after the recruitment process concludes, unless a different period is legally required or separately agreed.
• Website logs and analytics: According to the retention periods configured with the relevant service providers.

These are proposed retention periods and will be applied subject to actual business requirements and applicable laws.

When information is no longer required, it will be securely deleted, anonymised or otherwise disposed of.

If GDPR applies to the processing of your personal data, you may have the following rights:

Right to Access – Article 15

Request confirmation of whether we process your personal data and obtain a copy of that information.

Right to Rectification – Article 16

Request correction of inaccurate or incomplete personal information.

Right to Erasure – Article 17

Request deletion of your personal data in circumstances permitted by law.

Right to Restriction – Article 18

Request that we restrict the processing of your personal information in certain circumstances.

Right to Data Portability – Article 20

Receive certain personal data in a structured, commonly used and machine-readable format and request its transfer to another controller where technically feasible and legally applicable.

Right to Object – Article 21

Object to processing based on legitimate interests, including direct marketing.

Right to Withdraw Consent

Withdraw consent at any time where processing is based on consent. Withdrawal does not affect the lawfulness of previous processing.

Rights Relating to Automated Decision-Making – Article 22

Where applicable, you may have rights concerning decisions based solely on automated processing that produce legal or similarly significant effects.

How to Exercise Your Rights

Use the subject line: "GDPR – Data Subject Rights Request".

We may request reasonable information to verify your identity before responding.

We generally respond to GDPR requests within one month of receipt. Where permitted, this period may be extended by up to two additional months for complex or numerous requests. We will inform you of any extension within the initial month.

There is generally no charge for exercising these rights unless a request is manifestly unfounded or excessive, as permitted by law.

If you believe your personal information has been processed in violation of applicable data protection laws, you have the right to lodge a complaint with the competent supervisory authority.

For individuals in the EEA, this may include the data protection authority in the country of your habitual residence, place of work or alleged infringement.

You may also contact us first so that we can investigate and attempt to resolve your concerns.

We implement reasonable technical and organisational measures designed to protect personal information against:

• Unauthorised access.
• Accidental loss or destruction.
• Unauthorised disclosure.
• Alteration or misuse.
• Other unlawful processing activities.

These measures may include access controls, secure communication protocols, backups, security monitoring and internal access restrictions.

Where GDPR applies, we will handle personal data breaches in accordance with applicable notification obligations, including Articles 33 and 34.

However, no internet-based transmission or electronic storage method can be guaranteed to be completely secure.

Graphler recognises that engineering projects may involve confidential commercial and technical information.

Technical drawings, CAD models, product specifications, simulation files, design concepts, manufacturing data and other project-related materials submitted through our communication channels will be handled for the relevant enquiry or contractual purpose.

Access to such information will be restricted to authorised personnel and relevant service providers who require it for legitimate business purposes.

Where required, confidentiality and non-disclosure obligations will be governed by a separate Non-Disclosure Agreement (NDA), service agreement or project contract.

Please avoid submitting highly confidential or export-controlled technical information through general website forms unless appropriate secure arrangements have been agreed.

Our website may contain links to external websites, platforms or third-party services.

Graphler does not control the privacy practices, content or security of external websites.

We recommend reviewing the privacy policies of those websites before sharing personal information.

Our website and engineering services are intended for business users and professionals.

We do not knowingly collect personal information from children for marketing or commercial purposes.

If we become aware that personal information has been collected from a child in circumstances where appropriate consent or authorisation is required, we will take reasonable steps to address the issue in accordance with applicable law.

We may update this Privacy Policy from time to time to reflect changes in our business operations, website functionality, technology or applicable legal requirements.

Any updates will be published on this page with a revised effective date.

We encourage visitors to review this page periodically.

For questions, concerns or requests regarding this Privacy Policy or your personal data, please contact: