Privacy Policy

[LEGAL_ENTITY_NAME], trading as Blue Metals, of [REGISTERED_ADDRESS], is the Data Fiduciary for the personal data described here. You are the Data Principal.

• Identity and contact data — your name, mobile number and email address.
• Delivery data — site address, landmark, access notes and the name and number of the person receiving the delivery.
• Order data — materials or services requested, quantities, quotations, invoices and delivery records.
• Payment reference data — UPI or bank transaction references you share so we can reconcile a payment. We do not collect or store card numbers, UPI PINs or banking credentials.
• Business data — your GSTIN, where you provide one for invoicing.
• Technical data — IP address, browser type and pages visited, collected through our website. See cookies below.

• To prepare quotations and respond to your enquiry.
• To process, schedule and deliver your order, including sharing the delivery address and your contact number with the driver.
• To raise GST invoices and maintain the accounting records the law requires us to keep.
• To handle claims, refunds and support requests.
• To comply with legal obligations and respond to lawful requests from authorities.

We process your data on the basis of the consent you give when you submit an enquiry or place an order, and, where applicable, on the "certain legitimate uses" permitted by the DPDP Act — for example where you voluntarily provide data for a purpose and have not indicated that you object. [VERIFY]

You may withdraw consent at any time by contacting our Grievance Officer. Withdrawal does not affect processing already carried out, and we may still need to retain records we are legally required to keep.

• Lorry operators and drivers — your site address and contact number, so they can deliver.
• Machinery operators — site details, where you have hired equipment.
• Banks and payment processors — to confirm and reconcile payments.
• Our accountants and tax advisers — for invoicing and statutory filings.
• Government or judicial authorities — where disclosure is required by law.

We do not sell your personal data, and we do not share it for third-party advertising.

We keep order and invoice records for as long as tax and company law requires — currently [RETENTION_YEARS] years [VERIFY] — and enquiry data for [ENQUIRY_RETENTION_PERIOD] after last contact, unless you ask us to erase it sooner and we are not obliged to retain it.

As a Data Principal under the DPDP Act, 2023, you have the right to:

• Obtain a summary of the personal data we hold about you and how we process it.
• Have inaccurate or incomplete data corrected, and have data updated.
• Have your data erased, where we are not required to retain it.
• Nominate another person to exercise these rights on your behalf in the event of your death or incapacity.
• Raise a grievance with us, and escalate to the Data Protection Board of India if we do not resolve it.

To exercise any of these, contact our Grievance Officer below. We will respond within [RESPONSE_DAYS] days [VERIFY].

Name: [GRIEVANCE_OFFICER_NAME]. Email: [GRIEVANCE_OFFICER_EMAIL]. Phone: [GRIEVANCE_OFFICER_PHONE]. Address: [REGISTERED_ADDRESS].

We apply reasonable security safeguards appropriate to the data we hold, including restricting access to staff who need it and securing our systems and accounts. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Our website uses [COOKIE_DESCRIPTION — e.g. essential cookies only / essential and analytics cookies]. [VERIFY — update this section to match the analytics or tag manager actually deployed before launch.] You can block or delete cookies in your browser settings; essential cookies are needed for the site to function.

Our services are intended for businesses and adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us data, contact our Grievance Officer and we will erase it.

We may update this policy. Changes take effect when published here, with a revised "last updated" date. Where a change materially affects how we use your data, we will tell you directly.