Privacy Policy

Mahakaushal Sugar and Power Industries Ltd (“MSPIL”, “we”, “us”) operates this website at mspil.in. Under the Digital Personal Data Protection Act, 2023 we are the Data Fiduciary for the personal data described below — we decide why it is processed and how.

It covers the personal data you give us through this website — the contact form is the only place on the site where you can enter any — together with the technical records the web server keeps automatically.

It does not cover personal data we hold about you for another reason, such as a cane supply relationship, employment or a vendor arrangement. Those are governed by the agreements and records that apply to them.

What you type into the contact form

Your name and email address, an organisation if you give one, the subject you pick from the list, and the message you write. Nothing is asked for that is not needed to answer you.

Technical records

Every request to this website is logged by the server that serves it: the IP address it came from, the page requested, the date and time, and the browser’s user-agent string. These records exist so that the site stays available, and so that abuse can be identified.

What we do not collect

This website sets no advertising or analytics cookies. We do not track you across other websites, we do not build profiles of visitors, and we never ask through this site for identity documents, bank details or any other sensitive personal data.

We use what you send us for these purposes and no others.

1. 01 To read your message and reply to it.
2. 02 To keep a record of the correspondence, so that we know what was asked and what we answered.
3. 03 To keep this website available, secure and free of abuse.
4. 04 To meet a legal obligation, or to establish, exercise or defend a legal claim, if that ever becomes necessary.

We do not use it for marketing, and we do not sell, rent or trade personal data to anyone.

We process what you send through the contact form on the basis of your consent, which you give by submitting the form. The notice beside the form says what you are consenting to.

You may withdraw your consent at any time, and it must be as easy to withdraw as it was to give. Write to the contact at the end of this policy.

Withdrawing consent does not affect anything lawfully done before you withdrew it. Once you withdraw it we stop processing your data and erase it, except where a law requires us to keep a specific record.

We keep the number of people and services involved as small as we can.

Our own people

Only the employees who need your message in order to answer it.

Our form processor

The contact form is delivered to us by a third-party form service, which acts as our Data Processor and processes the submission only on our instructions. [Form processor — to confirm]

Our hosting provider

The company that runs the server this website is served from, which necessarily handles the technical records described above.

Advisers and authorities

Professional advisers where we need their advice, and any authority or court where the law obliges us to disclose.

Where one of these services stores data outside India, the transfer is subject to the restrictions applicable under the Act. [Storage locations of our providers — to confirm]

We keep an enquiry for as long as it takes to deal with it, and then for a reasonable period afterwards as a record of the correspondence. When the purpose has been served and no law requires us to keep it, we erase it, and we ask our processor to do the same. [Retention period — to confirm]

Technical records are kept for a short period for security and troubleshooting, and are then overwritten.

The Digital Personal Data Protection Act, 2023 gives you the following rights over your personal data. Exercising them costs nothing.

Access

A summary of the personal data we hold about you and how we are processing it, and the identities of anyone we have shared it with.

Correction and completion

Correction of data that is inaccurate or misleading, and completion or updating of data that is incomplete or out of date.

Erasure

Erasure of personal data we no longer need for the purpose you gave it for, unless a law requires it to be kept.

Grievance redressal

A readily available means of complaining to us about how we have handled your data or your request — and an answer from us.

Nomination

The right to nominate another person to exercise these rights on your behalf if you die or become incapable of exercising them yourself.

Withdrawal of consent

The right to withdraw your consent at any time, as described above.

The Act also places duties on you: not to raise a false or frivolous grievance, not to impersonate anyone, and not to give false particulars when you exercise a right.

We apply reasonable security safeguards to prevent a personal data breach: the site is served over an encrypted connection, access to enquiries is limited to the people who need it, and the services we use are chosen for their own security practices.

If a personal data breach does occur, we will report it to the Data Protection Board of India and tell each affected person, in the manner and within the time the Act requires.

This website is not directed at children. We do not knowingly collect the personal data of anyone under the age of eighteen, and we carry out no tracking, behavioural monitoring or targeted advertising of any kind. If you believe a child has sent us personal data through this site, write to us and we will erase it.

If we change this policy we will publish the new version on this page and change the effective date at the top. A material change will be described plainly rather than buried in the text.

Write to our Grievance Officer with any question, request or complaint about personal data. Please say what you are asking for, so that we can answer properly.

If you are not satisfied with our answer, you may complain to the Data Protection Board of India in the manner provided under the Act.