Privacy Policy

CFlo World Limited, CIN U29230WB2000PLC118249, is the controller of the personal data described in this notice. Our registered office is at Ecospace Business Park, Block 4A, 6th Floor, Action Area II, New Town Rajarhat, Kolkata, North 24 Parganas, West Bengal 700160, India, and you can reach us by email at [email protected].

For the United Kingdom. CFlo Europe Limited, at Donegall Square North, Belfast, Northern Ireland, is our United Kingdom establishment, and enquiries from the UK and Europe are handled there. Where your personal data is processed through that office, UK data protection law applies to it and the Information Commissioner's Office is the regulator. You can contact that office at [email protected] or on +44 78687 88960.

Elsewhere. Enquiries from the Gulf are handled by CFlo World FZE in the Hamriyah Free Zone, Sharjah, United Arab Emirates, and enquiries from Asia by our Kolkata head office. Whichever office replies to you, the practices in this notice apply, and you can use any of the addresses above.

If you want to raise something specifically about privacy rather than about a project, use the subject line "Information Request" and it will be routed to the right person.

Data protection law requires us to have a lawful basis for each purpose rather than a general permission. Ours are as follows.

• Answering your enquiry and quoting for a plant. Necessary to take steps towards a contract with you, or in our legitimate interests where you are enquiring on behalf of a company.
• Keeping a record of enquiries so a later conversation makes sense. Our legitimate interests in running a sales and engineering business, balanced against a fixed 24-month retention period.
• Preventing abuse of the forms. Our legitimate interests in keeping the site available. This is the only thing we use your IP address for beyond serving the page.
• Sending you marketing about our plants. Your consent where the law requires it, and otherwise our legitimate interests in telling existing business contacts about relevant equipment. You can stop it at any time and we will not ask you to justify the request.
• Measuring the site and our advertising. Your consent, given through the cookie banner and withdrawable at any time.
• Meeting legal, tax and accounting obligations, and defending claims. Compliance with a legal obligation, and our legitimate interests in establishing or defending our legal position.

Where we rely on legitimate interests, you have the right to object and we will stop unless we can show a compelling reason not to. We do not make any decision about you by automated means, and we do not profile you in a way that has legal effects.

When you send an enquiry the details you give us are recorded by us and passed to Salesforce, the customer relationship system our sales teams work in, so that the right regional team can reply. HubSpot may recognise you as a returning visitor, where you have accepted cookies, so a reply can be made with context. Google and Meta receive website measurement data as described under Cookies and tracking. Where a page carries a video embed, Google receives your IP address, browser details and the address of the page you are on.

These are processors or independent controllers acting on defined terms, not parties we sell data to. We do not sell your personal data, and we do not share it for anyone else's marketing.

Transfers out of your country. Our offices are in India, the United Kingdom and the United Arab Emirates, and the providers above operate outside the United Kingdom and the European Economic Area, principally in the United States. So if you enquire from the UK or Europe, your enquiry is likely to travel to our head office in India and to our sales system in the United States in order to be answered.

Neither India nor the United States is covered by a United Kingdom adequacy decision for this purpose, so those transfers are made under the transfer mechanisms the law provides, including the UK International Data Transfer Addendum and the European Commission's standard contractual clauses, with an assessment of the protection available in the destination country and the additional safeguards our providers commit to. You can ask us which mechanism applies to a particular transfer and we will tell you.

Subject to the conditions in the law that applies to you, you have the right to:

• be told what personal data we hold about you and get a copy of it
• have inaccurate data corrected
• have data deleted where we no longer have a good reason to keep it
• restrict how we use your data while a dispute about it is resolved
• object to processing we base on legitimate interests, including any direct marketing, which we will stop on request
• receive data you gave us in a portable form, where we hold it on the basis of consent or contract
• withdraw consent at any time, which does not affect anything done before you withdrew it

Email [email protected] with the subject line "Information Request". We will respond within one month. If your request is complex we may take longer and will tell you why within that first month. We do not charge for this. We may ask you to confirm your identity before we release personal data, so that we do not disclose it to the wrong person.

If we cannot delete everything, for example because we are required to keep a commercial record, we will tell you what we have kept and why, and it will be excluded from marketing.

We use technical, administrative and physical safeguards appropriate to the sensitivity of the data, including transport encryption on this website, access controls on the systems that hold enquiry records, and automatic deletion when the retention period expires. No system can be guaranteed secure, and we will tell you and the relevant regulator about a breach where the law requires it.