Privacy Policy

Last Updated: August 14, 2026

Kirti Steels (“Kirti Steels”, “we”, “us”, or “our”) respects your privacy and is committed to protecting the personal information you provide to us through our website.

This Privacy Policy explains how we collect, use, store, protect, and disclose personal information when you visit or interact with our website, https://kirtisteels.com/. It also explains your rights regarding your personal information and how you can contact us if you have questions, concerns, or requests relating to your personal information.

By using our website or voluntarily providing your personal information through our website, you acknowledge that you have read and understood this Privacy Policy. This Privacy Policy is intended to operate in accordance with applicable Indian law, including the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the Digital Personal Data Protection Rules, 2025, to the extent and from the time the relevant provisions apply to Kirti Steels.

1. About Kirti Steels

Kirti Steels is located at:

Kirti Steels
B/h. Perfect Tata Motors Showroom
Nr. Poonam Dumper, Vavdi
Survey No. 32, Gondal Road
Rajkot – 360004, Gujarat, India

For privacy-related questions or requests, you can contact us using the details provided in the Contact Us section of this Privacy Policy.

2. Information We May Collect

Depending on how you interact with our website, we may collect personal information that you voluntarily provide to us.

2.1 Information You Provide Directly

When you contact us, submit an enquiry, request information, or otherwise communicate with us through the website contact form, we may collect personal information such as:

• Full name
• Email address
• Telephone or mobile number
• Address or location information
• Company or organisation name (where provided)
• Details of your enquiry or request
• Any other information that you voluntarily provide to us

You should provide only information that is reasonably necessary for us to respond to your enquiry or provide the requested service or information.

2.2 Information Collected Automatically

When you visit our website, certain technical information may be collected automatically by the website, hosting infrastructure, security systems, and analytics tools used to operate the website:

• Internet Protocol (IP) address
• Browser type and version
• Device type and operating system
• Pages visited and time spent on pages
• Date and time of access
• Referring website or source
• Technical and diagnostic information
• Approximate geographical location (based on IP)
• User interactions with website features

This information may be collected using cookies, web beacons, and similar tracking technologies. This information is used for website operation, security, troubleshooting, performance monitoring, and improving the website experience.

2.3 Google Analytics

Our website uses Google Analytics 4 (GA4) to collect and analyze visitor information. Google Analytics collects data about how you interact with our website, including:

• Pages you visit and time spent on those pages
• Links you click
• Downloads and file interactions
• Events and user engagement
• Device and browser information
• Geographic and demographic information (derived from IP address)

This data helps us understand how visitors use our website, which content is most useful, and how we can improve the user experience. Google Analytics uses cookies and similar technologies to track this information. For more details about Google Analytics data collection and privacy practices, please see the Google Privacy Policy and Google Analytics Help Center.

You can opt-out of Google Analytics tracking by:

• Installing the Google Analytics Opt-Out Browser Add-on
• Adjusting your browser cookie settings to disable or delete cookies
• Using browser privacy modes (such as Incognito mode in Chrome)

3. How We Use Your Personal Information

Responding to Enquiries

We may use your name, contact details, and enquiry information to respond to your questions, requests, or business inquiries and to understand your requirements.

Providing Information and Services

We may use information you provide to deliver information about our products, services, business activities, or other requested information.

Communication

We may use your contact information to communicate with you regarding an enquiry, request, transaction, or service you have initiated with us.

Website Operation and Improvement

We may process technical information to operate, maintain, secure, and improve our website and user experience.

Security and Fraud Prevention

We may use information to identify, prevent, investigate, and respond to security incidents, fraud, misuse, unauthorised access, or other activities that may harm our website, business, or users.

Legal and Regulatory Compliance

We may process and retain information where necessary to comply with applicable laws, regulations, legal proceedings, governmental requests, or other lawful obligations.

Business Analytics and Improvement

We may use information, including aggregated or anonymised information, to understand website usage patterns, improve our website, services, communications, and overall business operations.

We will not use personal information for purposes that are incompatible with the purpose for which it was collected unless permitted or required by applicable law, or unless you provide additional consent.

4. Legal Basis for Processing (DPDPA 2023 Compliance)

Under the Digital Personal Data Protection Act, 2023 (DPDPA), we process personal information on the following legal basis:

a) Consent

Where you voluntarily submit an enquiry through our website contact form, request information, or otherwise provide your personal information to us, where processing is based on consent, Kirti Steels will seek consent through an appropriate affirmative mechanism and will provide information about the purpose for which the personal data is being collected and used.

b) Other permitted uses

We may process personal information where necessary to:

• Respond to your business enquiry and maintain business communication
• Maintain business records and documentation
• Understand website usage and improve user experience
• Protect the security and integrity of our website and business operations

We may also process personal data where processing is otherwise permitted as a legitimate use or is required or permitted by applicable law

c) Legal Obligation

We may process personal information where required by applicable laws, regulations, court orders, or other legal requirements in India.

You can withdraw your consent at any time by contacting us using the details in the Contact Us section. However, withdrawal of consent will not affect the lawfulness of processing that occurred before the withdrawal.

5. Enquiry and Contact Information

When you submit an enquiry through our website contact form, we collect the information necessary to understand and respond to your request. This may include your name, email address, phone number, company name, address, enquiry details, and other information you voluntarily include in your message.

We use this information primarily to respond to your enquiry, communicate with you regarding your request, and maintain business records. We may also use this information to send you relevant product or service information related to your enquiry.

Please do not submit sensitive personal information (such as payment card information, national identification numbers, or health information) through our website enquiry form unless it is specifically requested and necessary for your enquiry. If you accidentally submit sensitive information, please contact us immediately.

6. Cookies and Similar Technologies

Our website may use cookies and similar technologies to help operate the website, enhance functionality, and improve performance.

A cookie is a small text file that may be stored on your device when you visit a website. Cookies may be used for:

• Enabling essential website functionality (such as form submission)
• Remembering your preferences and settings
• Understanding how visitors interact with the website
• Analyzing website performance and usage patterns
• Maintaining website security
• Supporting analytics and measurement functions (Google Analytics)

Cookie Types:

• Essential Cookies: Required for the website to function properly. These cannot be disabled.
• Analytics Cookies: Used by Google Analytics to track visitor behavior and website performance.
• Performance Cookies: Used to understand how visitors interact with the website and optimize performance.

You can control or disable cookies through your browser settings. However, disabling certain cookies may affect the functionality or performance of parts of the website. Most browsers allow you to:

• View and delete stored cookies
• Block cookies from specific websites
• Enable “Do Not Track” signals
• Use private/incognito browsing modes

7. Third-Party Services

We may use third-party service providers to support the operation, security, hosting, maintenance, analytics, and other functionality of our website. These service providers may process personal information on our behalf where necessary to provide their services.

Third-Party Services Used:

• Google Analytics 4: For website analytics and performance measurement. See Google Privacy Policy for details.
• Website Hosting Providers: For hosting and infrastructure services
• Email Service Providers (if applicable): For sending email responses to enquiries
• Security and CDN Services: For website security and performance optimization

We expect all third-party service providers to process personal information only for authorised purposes and to maintain appropriate security safeguards.

Our website may contain links to third-party websites, applications, platforms, or services. These third parties operate independently and are not controlled by Kirti Steels. They may have their own privacy policies and terms. We encourage you to review their privacy policies before providing personal information to them. Kirti Steels is not responsible for the privacy practices, content, security, or policies of third-party websites.

8. Sharing of Personal Information

We do not sell your personal information.

We may share personal information where reasonably necessary for the purposes described in this Privacy Policy, including with:

• Third-party service providers: Who assist us in operating our website, providing services, or conducting business operations (hosting providers, analytics providers, email service providers)
• Business partners: Where relevant to responding to your enquiry or fulfilling your request
• Legal authorities: Where required by law, court order, or governmental request
• With your consent: Where you have explicitly agreed to share your information with specific third parties

In all cases, we ensure that recipients of your personal information are bound by appropriate confidentiality and security obligations.

9. Data Security

We take reasonable steps to protect personal information against unauthorised access, loss, misuse, alteration, disclosure, or destruction. Safeguards may include:

• Encryption of sensitive data in transit (HTTPS/SSL)
• Secure storage of data at rest
• Access controls and authentication mechanisms
• Regular security audits and vulnerability assessments
• Employee training and data protection procedures

However, no method of transmission over the internet or electronic storage can be guaranteed to be completely secure. While we implement reasonable security measures, we cannot guarantee absolute security against all threats.

If you believe your personal information may have been compromised, please contact us immediately using the details in the Contact Us section.

10. Retention of Personal Information

We retain personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected, including:

• Responding to your enquiry and following up with you
• Providing requested services or information
• Maintaining business records and documentation
• Protecting our legal rights and defending against claims
• Resolving disputes and preventing fraud
• Complying with applicable legal or regulatory requirements

The appropriate retention period may vary depending on:

• The nature and sensitivity of the information
• The purpose for which it was collected
• Whether there is an ongoing business relationship
• Legal, regulatory, accounting, or reporting requirements
• Security and fraud-prevention requirements
• The need to establish, exercise, or defend legal claims

Generally, we retain enquiry information for a period of 1-2 years after your last interaction with us. After this period, we securely delete or anonymise the information in accordance with our data protection procedures.

When personal information is no longer required, we may securely delete, anonymise, or otherwise dispose of it in accordance with our internal procedures and legal obligations.

11. Your Privacy Rights (Data Principal Rights under DPDPA 2023)

Subject to the Digital Personal Data Protection Act, 2023, you have the following rights regarding your personal information:

a) Right to Access

You have the right to access and obtain a copy of the personal information we hold about you. You can request this information by contacting us.

b) Right to Correction

You have the right to request correction or update of any inaccurate, incomplete, or outdated personal information we hold about you.

c) Right to Erasure (Right to Be Forgotten)

Subject to legal requirements, you have the right to request deletion of your personal information in certain circumstances, such as when the data is no longer necessary for the original purpose, or when you withdraw consent.

d) Right to Withdraw Consent

If we are processing your personal information based on your consent, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing before the withdrawal.

e) Right to Data Portability

We do not state a general or unconditional right to data portability in this Privacy Policy. Any request for data transfer or a similar facility will be considered according to the rights and obligations applicable under Indian law.

f) Right to Lodge a Complaint

If you believe your personal information has been processed in violation of the DPDPA, you have the right to lodge a complaint with the Data Protection Board of India.

12. How to Exercise Your Rights

If you wish to exercise any of your privacy rights, including requesting access, correction, deletion, withdrawal of consent, or filing a complaint, you may contact us using the details provided in the Contact Us section.

When making a request, we may need sufficient information to:

• Verify your identity and confirm you are the data principal
• Locate your information in our systems
• Understand the specific nature of your request

We will consider and respond to legitimate requests within the period prescribed by applicable law.

If you withdraw consent, the withdrawal will not affect the lawfulness of processing that occurred before the withdrawal, but we will cease processing your data for that purpose going forward.

13. Children’s Privacy

Our website is intended for general business audiences and is not specifically directed toward children (defined as individuals under 18 years of age).

We do not knowingly seek to collect personal information from children where such collection is prohibited by applicable law.

If you are a parent or legal guardian and believe that a child has provided personal information to us in circumstances where such collection was not appropriate, please contact us immediately.

If we become aware that we have collected personal information from a child in violation of applicable law, we will take reasonable steps to address the situation in accordance with legal requirements, which may include deletion of the information and notification to relevant authorities.

14. Links to Other Websites

Our website may contain links to third-party websites, applications, platforms, or services. These third-party websites are not controlled by or affiliated with Kirti Steels.

If you follow a link to a third-party website, you should review that website’s privacy policy and terms of use before providing any personal information.

Kirti Steels is not responsible for and does not endorse the privacy practices, content, security, accuracy, or policies of third-party websites or services. Use of third-party websites and services is at your own risk and is subject to their terms and policies.

15. International Data Transfers

Depending on the service providers and technologies used to operate our website, personal information may be processed or stored at locations in India or potentially outside India.

Where personal information is processed or stored outside India, Kirti Steels will take the measures required under applicable Indian law, including any restrictions, safeguards or requirements that apply to such processing at the relevant time.

16. Marketing Communications

If you voluntarily provide your contact information through our website contact form, we may communicate with you regarding information, updates, or offers related to your enquiry or similar products and services we offer.

Where Indian law requires consent for marketing communications, we will obtain the required consent before sending such communications.

You may request that we stop sending marketing communications at any time by contacting us or using the unsubscribe option in our communications.

However, you may still receive necessary communications relating to an enquiry, transaction, service, security matter, or other communication that is not promotional in nature and is required for the operation of our services.

17. Personal Information Provided by You

You are responsible for ensuring that the personal information you provide to us is accurate, complete, and up to date.

If you provide personal information relating to another individual, you represent and warrant that:

• You have the authority to provide such information on their behalf
• You have obtained their consent where required by law
• You have informed them of the purposes for which their information will be used

We encourage you to provide only information that is necessary for the relevant purpose and to notify us immediately if any of your information changes.

18. Data Breach and Security Incidents

We maintain reasonable security measures designed to protect personal information against unauthorised access, disclosure, or misuse.

If we become aware of a personal data breach or security incident that poses a risk to the rights and freedoms of data principals, we will:

• Promptly assess, investigate, and contain the incident
• Take necessary measures to prevent similar incidents
• Where notification to affected individuals, the Data Protection Board of India or another authority is required, Kirti Steels will make such notification in the manner and within the period prescribed by applicable law.
• Cooperate with law enforcement and regulatory authorities

Breach notifications will include information about the nature of the breach, affected data, and steps we have taken to address the incident.

19. Changes to This Privacy Policy

We may update or modify this Privacy Policy from time to time to reflect:

• Changes in our website or business practices
• Changes in the information we collect or how we use it
• Changes in technology and data handling methods
• Changes in applicable laws, regulations, or legal interpretations
• Other operational or legal requirements

When we make changes, we will update the “Last Updated” date at the top of this Privacy Policy. For material changes that significantly affect your rights or our handling of your information, we may provide additional notice.

We encourage you to review this Privacy Policy periodically to remain informed about how we handle personal information. Your continued use of the website after updates are posted constitutes your acceptance of the revised Privacy Policy.

20. Data Protection Board of India – Complaint Channel

If you believe that our handling of your personal information violates the Digital Personal Data Protection Act, 2023, or if you are not satisfied with our response to your privacy requests or complaints, you have the right to lodge a complaint with the Data Protection Board of India.

Data Protection Board of India
Website: https://www.dpdp.gov.in/

Where the DPDP Act and applicable Rules provide a right to approach the Data Protection Board of India, you may use that mechanism in accordance with the procedure and requirements prescribed by applicable law.

21. Grievance and Privacy Concerns

If you have any question, concern, complaint, or request regarding the handling of your personal information or this Privacy Policy, you may contact Kirti Steels using the details below.

We will review and address privacy-related requests and complaints in accordance with applicable law and our internal procedures. We aim to resolve concerns promptly and fairly.

If you are not satisfied with our response or resolution of your complaint, you may have additional rights or remedies available to you under applicable law, including the right to lodge a complaint with the Data Protection Board of India.

22. Contact Us

If you have any questions, requests, or concerns regarding this Privacy Policy or the handling of your personal information, you can contact us at:

Kirti Steels
B/h. Perfect Tata Motors Showroom
Nr. Poonam Dumper, Vavdi
Survey No. 32, Gondal Road
Rajkot – 360004, Gujarat, India

Email: Kirtisteels11@gmail.com
Phone: +91 9081922122
Website: https://kirtisteels.com/
Contact Page: https://kirtisteels.com/contact-us/

23. Acknowledgement

By using the Kirti Steels website and voluntarily providing personal information to us, you acknowledge that:

• You have read and understood this Privacy Policy
• You understand how your personal information will be collected and processed
• You have had the opportunity to ask questions and seek clarification

Where additional consent is required under applicable law for specific processing activities, we will obtain such consent through appropriate mechanisms (such as explicit consent via email or website forms).

Last Updated: August 14, 2026

This Privacy Policy is intended to operate in accordance with applicable Indian law, including the Digital Personal Data Protection Rules, 2025, to the extent and from the time the relevant provisions apply to Kirti Steels. This policy addresses Google Analytics usage and provides comprehensive information about personal data collection, processing, and the rights of data principals under Indian data protection law.