• address.
• Professional and organisation details: company name, job title, department, business role, market and relationship to your organisation.
• Enquiry and commercial information: messages, product interests, catalogue requests, specifications, quotation requests, order or project context, correspondence and follow-up history.
• Comment and content data: the name, website address and comment you choose to submit, together with moderation and anti-spam information.
• Technical and usage data: IP address, browser and device information, operating system, referring page, pages or files requested, date/time, security events, cookie or similar identifiers, and server or application logs.
• Preferences and consent records: marketing choices, cookie preferences, unsubscribe/objection records and communications settings.
• Information from business sources: relevant professional contact information from referrals, trade fairs, customers, suppliers, business directories, professional networking platforms or other lawful public sources.

We do not intentionally request passwords, payment-card details, banking credentials, health data, biometric data, government identity documents or other highly sensitive personal data through the Website. Please do not include such information in an open enquiry or comment.

4. How we collect personal data

• Directly from you when you complete a form, request a catalogue or quotation, post a comment, email or call us, meet us at an event, or otherwise communicate with us.
• Automatically through the Website, hosting environment, security systems, cookies and similar technologies.
• From your organisation, a colleague, business partner, referral, trade-event organiser, professional platform, public business source or service provider, where lawful.

5. Why we use personal data and our lawful bases

We process personal data only for lawful and stated purposes. Where consent is required, we seek a clear affirmative choice and allow withdrawal. Submitting an enquiry authorises us to respond; it does not by itself subscribe you to optional marketing.

Activity	Purpose	Lawful basis where applicable
Enquiries, catalogues and quotations	Provide the requested material; understand requirements; respond; arrange samples, meetings or quotations; and follow up on the request.	Your request and steps before a contract; legitimate business interests; consent where required.
Customer, distributor and supplier relationships	Manage accounts, orders, specifications, quality matters, delivery, support, payments, records and relationship communications.	Contractual necessity; legal obligation; legitimate business interests.
Relevant B2B updates	Send product, capability, participation or company updates that may be relevant to a professional contact.	Consent where required; otherwise legitimate business interests subject to opt-out and applicable marketing law.
Website operation and security	Deliver pages and files; prevent spam, misuse and attacks; troubleshoot; back up; monitor availability; and investigate incidents.	Legitimate business interests; legal obligation; strictly necessary technologies.
Analytics and improvement	Understand aggregated usage, improve navigation/content and measure Website performance.	Consent where required for non-essential technologies; otherwise a lawful business interest where permitted.
Comments and moderation	Publish and manage comments, respond, detect spam and enforce Website rules.	Your submission/request; consent where required; legitimate interests in moderation and security.
Compliance and legal claims	Maintain required records, respond to lawful requests, enforce agreements, protect rights and handle privacy requests or disputes.	Legal obligation; legitimate interests; establishment, exercise or defence of legal claims.

6. Cookies and similar technologies

Cookies and similar technologies are small files, identifiers or scripts used to operate a website, remember choices, protect forms, understand use or support third-party features.

We use strictly necessary technologies needed for core operation, security, form submission and preference storage. Depending on the Website configuration, we may also use analytics, functionality or marketing technologies. Where prior consent is required, non-essential technologies will remain disabled unless you enable them through the cookie banner or Cookie Settings.

You can accept, reject or manage non-essential categories through Cookie Settings. Withdrawing consent does not affect processing that occurred lawfully before withdrawal. Blocking strictly necessary technologies in your browser may affect Website functions.

The current Cookie Settings panel or Cookie Policy should identify each active provider, purpose, cookie or technology, category and duration. We may link to external services such as Google Maps and social platforms. If you choose those links or embedded features, the third party may process information under its own privacy policy.

7. How we share personal data

We may share personal data only as reasonably necessary with:

• Website hosting, content-management, form, anti-spam, email, analytics, CRM, cloud-storage, IT support, cybersecurity and communications providers acting for us.
• Our employees and authorised representatives who need the information for sales, customer service, engineering, quality, logistics, accounts, management, legal or compliance purposes.
• Professional advisers, auditors, insurers, banks and other advisers where relevant.
• Government, regulatory, judicial, law-enforcement or other authorities where disclosure is required or lawfully requested.
• A buyer, investor, lender or successor in connection with a proposed or completed corporate transaction, subject to appropriate confidentiality and legal controls.

We do not sell or rent personal data for money. We do not share telephone numbers or email addresses with unrelated advertisers for their independent marketing.

8. International data transfers

Mech Choice Tools is based in India. If you contact us from another country, your personal data may be transferred to and processed in India. Our service providers may also process data in other countries.

Where data-protection law requires safeguards for an international transfer, we use or require a legally recognised transfer mechanism and appropriate contractual, technical and organisational protections. Depending on the jurisdiction, this may include standard contractual clauses, a UK transfer mechanism, transfer-risk measures or another lawful safeguard. You may contact us for information about safeguards relevant to your data.

9. How long we keep personal data

We retain personal data only for as long as reasonably necessary for the purpose collected, an active business relationship, applicable limitation periods, legal or regulatory duties, dispute resolution, security, backups and enforcement of agreements. Typical periods are:

• Enquiry and catalogue records: normally up to 24 months after the last meaningful interaction, unless the matter becomes an active business relationship or must be retained for a legal claim.
• Quotation and prospect records: normally up to 3 years after the last meaningful interaction.
• Customer and supplier transaction records: for the relationship and normally up to 8 years afterwards, or longer where applicable law requires.
• Marketing records: until you opt out, withdraw consent or after a reasonable period of inactivity; we may retain minimal suppression information to honour your choice.
• Security and server logs: normally up to 12 months, unless needed longer for an incident, legal hold or compliance requirement.
• Published comments: while the comment remains published, subject to moderation, legal requirements and valid deletion or anonymisation requests.

We may securely delete, anonymise or aggregate information when it is no longer required. Backup copies are removed or overwritten according to normal backup cycles unless a legal hold applies.

10. Security

We use reasonable administrative, technical and physical safeguards designed to protect personal data against unauthorised access, alteration, disclosure, loss, misuse or destruction. Measures may include access controls, role-based permissions, secure transmission, device and account security, backups, logging, malware protection, vendor controls, staff confidentiality and incident response.

No website or transmission method is completely secure. You should not send confidential credentials, payment data or other highly sensitive information through an open Website form. If a personal-data breach occurs, we will investigate, mitigate and make notifications where applicable law requires.

11. Your choices and rights

Subject to the law that applies to you and any permitted exceptions, you may have the right to:

• Ask whether we process your personal data and request access to relevant information.
• Request correction, completion or updating of inaccurate or incomplete personal data.
• Request erasure of personal data that is no longer required or is processed unlawfully.
• Withdraw consent where processing relies on consent, without affecting earlier lawful processing.
• Object to or request restriction of certain processing, including direct marketing.
• Request data portability where that right applies.
• Raise a grievance with us and, where applicable, complain to the relevant data-protection authority or board.
• Nominate another person to exercise rights in circumstances provided by applicable Indian law.

We do not use Website data to make decisions based solely on automated processing that produce legal or similarly significant effects about you.

To exercise a right, email info@mechchoice.com with the subject line Privacy Request. Describe the request and identify the interaction involved. We may ask for proportionate information to verify identity and authority before acting. We will respond within the period required by applicable law.

12. Direct marketing

Where lawful, we may send relevant B2B communications to professional contacts. We will seek consent where required. You can unsubscribe through the message or email info@mechchoice.com. Opting out of marketing does not stop operational communications about an enquiry, quotation, order, quality matter, delivery, account or legal notice.

13. Children

The Website is designed for business and professional audiences and is not intended for children under 18. We do not knowingly seek personal data from children through the Website. If you believe a child has provided personal data, contact us so we can review and take appropriate action.

14. Third-party links

The Website may link to social networks, mapping services, trade-event pages, catalogues or other third-party sites. We do not control their privacy, cookies or security. Review the third party’s privacy information before providing personal data or using its service.

15. Changes to this policy

We may update this policy to reflect changes in law, technology, vendors or business practices. We will publish the revised version on this page and change the Last updated date. If a change materially affects how we use personal data, we will provide additional notice or seek consent where required.

16. Contact and grievances

Privacy and Grievance Officer / authorised privacy contact

Mech Choice Tools
Dhogri Industrial Park, Dhogri Village Road
Jalandhar, Punjab 144025, India

Email: info@mechchoice.com
Phone: +91 181 5211100
Subject line: Privacy Request

Please include enough information for us to understand the request. If you are not satisfied with our response, you may use any complaint or appeal mechanism available under the data-protection law applicable to you.