Privacy policy

1. Who we are and what this policy covers

Siddhi Global Incorporation ("Siddhi Global", "we", "us") is a Kolkata-based company that markets digital signage, commercial displays and solar energy solutions as the authorised marketing ally of Capital Infoart Private Limited and the authorised marketing partner of Integrated Systems Management Services (ISMS). This policy explains what personal data we collect through this website, why, how long we keep it, who we share it with and the rights you have.

This policy is published in accordance with Section 43A of the Information Technology Act, 2000 and Rule 4 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules"). It is also written to meet the notice and consent requirements of the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Digital Personal Data Protection Rules, 2025, whose substantive obligations come into force in phases up to 13 May 2027. We treat you as a Data Principal and ourselves as the Data Fiduciary under that Act.

2. Personal data we collect

Information you give us. When you use the enquiry form or contact us by phone or email we collect your name, email address, phone number, organisation (optional), the product or range you are interested in and the message you write. We do not ask for, and you should not send, sensitive personal data such as passwords, financial information, health information or biometric data.

Information collected automatically. Our hosting provider and content delivery network record standard server logs: IP address, browser type, device type, pages requested, referring page and the time of the request. These are used for security and to keep the site running.

Cookies. This website sets no advertising or analytics cookies. Our hosting provider and Cloudflare, which protect and accelerate the site, may set strictly necessary cookies for security and bot protection (for example, when the enquiry form is verified by Cloudflare Turnstile). The map on our contact page is embedded from Google Maps, which loads when you open that page and may set Google cookies. If we add analytics in future we will update this policy and ask for your consent first.

3. Why we use your data and on what basis

• To answer your enquiry and prepare a quotation. Basis: your consent, given when you submit the form or contact us, for that specified purpose.
• To arrange site surveys, supply and installation with the relevant manufacturer once you ask us to proceed. Basis: performance of the transaction you requested.
• To keep the site secure and prevent spam. Basis: our legitimate business need to protect our systems, as permitted by law.
• To comply with legal obligations, including tax, accounting and lawful requests from authorities.

We do not use your personal data for marketing emails or messages unless you have asked us to keep you informed, and you can withdraw that request at any time.

4. Who we share data with

• Our manufacturing partners, Capital Infoart Private Limited and ISMS (Integrated Systems Management Services), only to the extent needed to specify, quote, supply, install or service the products you have asked about.
• Service providers that host and protect this website and deliver our email (currently BigRock for hosting and email, and Cloudflare for content delivery and security). They process data on our instructions.
• Authorities, where disclosure is required by law or a valid legal order.

We do not sell personal data and we do not share it with data brokers or advertisers.

5. Transfers outside India

Our hosting is located in India. Cloudflare operates a global network and may process traffic data outside India. Any such transfer is made only to service providers bound by contractual safeguards, and only to countries not restricted by the Central Government under the DPDP Act.

6. How long we keep data

• Enquiries that do not lead to a purchase: up to 24 months from our last contact with you, then deleted.
• Enquiries that lead to a quotation or purchase: for the life of the business relationship and for the period required by Indian tax and company law thereafter (generally eight years).
• Server and security logs: up to 90 days.

When personal data is no longer needed for the purpose it was collected for, or when you withdraw consent and no legal basis remains, we erase it and ask our processors to do the same.

7. How we protect data

We follow reasonable security practices and procedures as required by Rule 8 of the SPDI Rules and Section 8 of the DPDP Act: the website is served only over HTTPS, the enquiry endpoint is rate-limited and protected against automated abuse, access to mailboxes is limited to the people who handle enquiries, and we review our providers' security measures. In the event of a personal data breach affecting you we will notify you and the Data Protection Board of India in the manner and time required by the DPDP Rules.

8. Your rights

Under the SPDI Rules you may review the personal data you have given us and ask us to correct anything inaccurate. Under the DPDP Act you also have the right to:

• access a summary of the personal data we hold about you and how it has been used and shared;
• have inaccurate or incomplete data corrected, and have data erased when it is no longer needed;
• withdraw consent at any time, as easily as you gave it, without affecting processing done before withdrawal;
• nominate another person to exercise these rights on your behalf in the event of your death or incapacity;
• have your grievance heard by us and, if unresolved, complain to the Data Protection Board of India.

To exercise any right, write to the Grievance Officer below. We will verify your identity and respond within 30 days, or sooner where the DPDP Rules require.

9. Children

This website and our services are intended for businesses and adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has sent us personal data, contact the Grievance Officer and we will delete it.

10. Grievance Officer

In accordance with Rule 5(9) of the SPDI Rules and Section 13 of the DPDP Act, our Grievance Officer is:

Billow Mukherjee, Grievance Officer
Siddhi Global Incorporation
8/1/1A, Dharmatala Road, Kolkata 700042, West Bengal, India
Phone: +91 96744 48825
Email: sales [at] siddhiglobal [dot] co [dot] in

Grievances are acknowledged within 48 hours and resolved within 30 days of receipt.

11. Changes to this policy

We may update this policy when our practices or the law change. The effective date at the top will be updated and material changes will be highlighted on this page. Continued use of the website after a change means you have read the revised policy.