Privacy Policy

Laxcon Steels Limited ("Laxcon") is the data fiduciary, and for visitors in the European Economic Area and the United Kingdom the data controller, for the personal data handled through www.laxconsteels.com. This notice states what data the website handles, for what purposes, for how long, who receives it and the rights available to you. It is issued under the Digital Personal Data Protection Act 2023, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules 2011 and, where they apply, the General Data Protection Regulation. The Laxcon Steels mobile application has its own privacy policy.

Who is responsible

Laxcon Steels Limited, CIN U27100GJ1999PLC036413, registered office at Plot No. 235, Sarkhej-Bavla Road, NH8A, Village Sarai, Taluka Sanand, Ahmedabad 382220, Gujarat, India. Questions about this notice go to info@laxconsteels.com.

Cookies and third parties

This website sets no cookies and stores nothing in your browser. It loads no scripts, fonts or images from third-party servers, uses no advertising network and no third-party analytics service, and does not sell or rent personal data. Site usage is measured by Laxcon on its own systems, as described below.

Information you provide

When you contact Laxcon through the enquiry form, by email or by telephone, Laxcon handles the details you give: your name, email address, telephone number, company and the content of your enquiry. They are used to respond to you, to prepare a quotation where you ask for one and to carry on the resulting correspondence and business relationship. The legal basis is the steps taken at your request before and during a contract and Laxcon's legitimate interest in answering enquiries about its products; under the Digital Personal Data Protection Act 2023 the data is processed with the consent you give by sending the enquiry. An enquiry is kept for as long as the correspondence and any resulting business relationship require, and thereafter for the period the law requires business records to be kept.

An enquiry sent through the form is stored with the page it was sent from, the page or website that led to it, any campaign tags in the address used to reach the site, the country reported for the connection and the daily visit value described below, so that a reply can address what the enquiry concerns. That value is removed from the enquiry after 90 days.

Site usage measurement

Laxcon measures the use of its own website on its own systems, without cookies and without any third party. The record of a page view holds which page was viewed and when; the website that referred the visit, or the page on this site that led to it; the country and city reported for the connection and the network operator; the browser and device type and the screen and window size; any campaign tags in the address; how long the page stayed in view and how far down it was read; and a random value that pairs a page's opening with its closing. The record of a link or button used holds its visible label and the address it leads to. Nothing typed into a form is part of this record.

To count a visitor once a day rather than once a page, the server derives a short value from the date and the network address; the network address itself is not stored, and the value changes every day, so it cannot follow a visitor from one day to the next. Visitors who share one network address on the same day share the same value. If you send an enquiry, the pages you viewed on this site that day are shown beside it to the staff who answer it, and that link is removed after 90 days. Beyond that, no profile of any individual is built from this data and no decision about any individual is based on it. Measurement records are deleted from the working database after 400 days; daily totals that identify no one are kept longer. The legal basis is Laxcon's legitimate interest in understanding and improving its own website.

Automated visitors

Requests from search engine and AI crawlers are logged separately, so that Laxcon can see which of them read the site. The log holds the time and the path requested, the response the site gave, the name under which the crawler is recognised, the browser string it sent and whether its identity was confirmed by the network that serves the site. Ordinary visitors are not recorded in this log. Entries are deleted after 180 days.

Certificate verification

A Laxcon test certificate carries a link and a QR code for confirming that the document is genuine. A verification records the certificate reference, the result, the country and city reported for the connection and the browser string. The location and the browser string are deleted after 90 days and the record after 730 days. The network address is held for no longer than one day, solely to prevent automated bulk guessing, and is not used for measurement.

Who receives your data

Three service providers process personal data on Laxcon's instructions: Cloudflare, Inc., which hosts the website, its security layer and its database on a global network and keeps its own short-term request logs, including the network address, which Laxcon does not use for measurement; Zoho Corporation, whose ZeptoMail service delivers enquiry notifications from its India data centre; and Backblaze, Inc., which holds encrypted backup copies of the databases. All three act under their published data processing terms. Backup copies are kept in locked storage, separately from the working systems, for business continuity and for as long as the company's records require, and are used for no other purpose. Personal data is otherwise disclosed only where the law requires it, to a competent authority on a lawful request, or where necessary to establish, exercise or defend a legal claim.

Where data is processed

Laxcon processes personal data in India. Cloudflare may handle a request at the location of its network nearest to the visitor. For visitors in the European Economic Area and the United Kingdom, the personal data sent with an enquiry is transferred to India because the transfer is necessary to respond to the enquiry you sent and to take the steps you ask for before any contract (Article 49(1)(b) GDPR). The service providers named above process it under their published data processing terms.

Your rights

You may ask what personal data Laxcon holds about you, have it corrected or erased, withdraw the consent given with an enquiry, which ends further correspondence on it, and nominate a person to exercise these rights on your behalf. Visitors in the European Economic Area and the United Kingdom also have the rights to restrict processing, to object to processing based on legitimate interest, including the measurement described above, and to receive the data they provided in a portable form. A request goes to info@laxconsteels.com; Laxcon may ask for enough information to confirm that the request comes from the person concerned, and answers within one month. A complaint may be made to the Data Protection Board of India, or, for visitors in the European Economic Area and the United Kingdom, to the supervisory authority of the place where you live.

Grievance Officer

Grievances about the handling of personal data are addressed to the Grievance Officer, Laxcon Steels Limited, at the registered office above or at info@laxconsteels.com. A grievance is acknowledged on receipt and resolved within one month.

Security

The website is served over an encrypted connection, access to personal data is limited to the staff who need it to respond to you, and the service providers named above operate certified infrastructure. No method of transmission or storage is entirely secure, and Laxcon cannot guarantee absolute security.

Children

This website is a business-to-business site and is not directed at children. Laxcon does not knowingly collect personal data from anyone under 18.

Changes to this notice

Laxcon may revise this notice. The date at the top states when it was last revised, and the current version is always the one published on this page.

Governing law

This notice is governed by the laws of India, and any dispute is subject to the jurisdiction of the courts at Ahmedabad, Gujarat, without limiting any right that applies to you under the law of the place where you live.