Privacy Policy

1. Introduction

Formpack (a brand of Indu Thermoformers, "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal information when you visit formpack.org (the "Website"). By using our Website, you agree to the practices described in this policy.

We comply with applicable data protection laws, including the European Union's General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and India's Digital Personal Data Protection Act, 2023 (DPDP Act).

2. Data Controller

The data controller responsible for your personal data is:

3. Information We Collect

3.1 Information You Provide Voluntarily

When you fill out a form on our Website (such as the Request a Quote form, Instant Estimate tool, North America Program inquiry, or exit-intent popup), we collect the information you submit, which may include:

• Full name
• Email address
• Company name
• Phone number
• Part specifications (dimensions, material, quantity)
• Messages and project descriptions
• File attachments (CAD drawings, part specifications)

3.2 Information Collected Automatically

When you visit our Website, we automatically collect certain technical information to understand how visitors use our site and to improve our services. This includes:

• Pages visited — which pages you view and how long you spend on each page
• Device information — device type (desktop, mobile, tablet), browser type, and operating system
• Approximate location — country, region, and city derived from your IP address (we do not collect your precise GPS location)
• Referral source — the website or search engine that directed you to our site
• UTM parameters — campaign tracking tags from marketing links (e.g., source, medium, campaign name)
• Anonymous visitor identifier — a randomly generated ID stored in your browser's local storage to associate page views within a session (this is not a cookie and does not identify you personally)

3.3 Information We Do Not Collect

We do not collect payment information, government-issued identification numbers, health information, or any special categories of personal data. We do not use browser fingerprinting techniques beyond the anonymous visitor identifier described above.

4. How We Use Your Information

We use the information we collect for the following purposes:

5. Cookies and Tracking Technologies

Our Website uses the following tracking technologies:

We do not use third-party advertising cookies or cross-site tracking pixels. You can clear your browser's local storage at any time to remove the anonymous visitor identifier.

6. Data Sharing and Third Parties

We do not sell, rent, or trade your personal information to third parties for marketing purposes. We may share your data in the following limited circumstances:

• Service providers — We use cloud hosting and database services to operate our Website. These providers process data on our behalf under strict contractual obligations.
• IP geolocation services — We use third-party IP geolocation APIs to determine your approximate location (country and city) from your IP address. Your IP address is sent to these services solely for this purpose.
• Legal requirements — We may disclose your information if required by law, court order, or governmental authority.

7. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes described in this policy:

• Form submissions and lead data — Retained for up to 3 years to support ongoing business relationships and follow-up.
• Analytics and page view data — Retained for up to 12 months, after which it is aggregated or deleted.
• File attachments — Retained for up to 12 months after the related inquiry is resolved.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• HTTPS encryption for all data transmitted between your browser and our servers
• Secure cloud hosting with access controls and encryption at rest
• Role-based access to admin dashboards containing personal data
• Regular review of data handling practices

While we strive to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security of your information.

9. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

Under GDPR (EU/EEA residents)

• Right of access — Request a copy of the personal data we hold about you
• Right to rectification — Request correction of inaccurate data
• Right to erasure — Request deletion of your personal data
• Right to restrict processing — Request limitation of how we use your data
• Right to data portability — Receive your data in a structured, machine-readable format
• Right to object — Object to processing based on legitimate interest

Under CCPA (California residents)

• Right to know — Request disclosure of what personal information we collect and how it is used
• Right to delete — Request deletion of your personal information
• Right to opt-out — We do not sell personal information, so this right does not apply
• Right to non-discrimination — We will not discriminate against you for exercising your rights

Under India's DPDP Act (Indian residents)

• Right to access — Obtain a summary of your personal data and processing activities
• Right to correction and erasure — Request correction of inaccurate data or erasure of data no longer necessary
• Right to grievance redressal — Lodge a complaint with us or the Data Protection Board of India
• Right to nominate — Nominate another person to exercise your rights in case of death or incapacity

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

10. International Data Transfers

Our Website is operated from India, and our cloud infrastructure may process data in various locations globally. If you are accessing our Website from outside India, your data may be transferred to and processed in India or other countries where our service providers operate. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

11. Children's Privacy

Our Website is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a minor, please contact us immediately and we will take steps to delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

13. Contact Us

If you have any questions about this Privacy Policy, your personal data, or wish to exercise your rights, please contact us:

For EU/EEA residents: If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.
For Indian residents: You may lodge a complaint with the Data Protection Board of India.