Privacy notice

This website is operated by Structural Engineering Services, an India-based outsourced engineering practice providing structural design, steel detailing, piping, pressure-vessel and FEA services to fabricators, EPC contractors and asset owners worldwide.

For the purposes of the Digital Personal Data Protection Act, 2023 (the DPDP Act), we are the Data Fiduciary — the party that decides why and how your personal data is processed. You are the Data Principal — the person the data is about.

• Registered entityREGISTERED LEGAL ENTITY NAME & CIN trading as Structural Engineering Services
• Websitestructuralengineeringservices.io
• Email[email protected]
• Phone+91 96731 98867

This notice applies to personal data you give us through structuralengineeringservices.io — the enquiry popup, the chat assistant, the quotation page and the contact details published on this site — and to personal data you send us by email, phone or WhatsApp in connection with those enquiries.

It does not cover other websites we link to. If you follow a link to a software vendor, a standards body or a client site, that organisation's own privacy notice applies, not ours.

We ask for as little as possible, and every item has one specific, stated purpose. We do not collect anything “just in case”, and we do not use data collected for one purpose for an unrelated one.

• Your name

  So we can address you properly in our reply and on any proposal or quotation we prepare for you.

• Your phone number

  So an engineer can call or message you about your enquiry, and reach you quickly when a drawing, load case or specification needs clarifying.

• Your email address

  So we can send you our written reply, the quotation, and any documents or sample deliverables you ask for.

• Project details you type

  Scope, discipline, country, tonnage, timeline and your free-text message — so a senior engineer can understand the work, scope it and price it accurately.

• The page you were on

  Captured automatically with the form, so the engineer who replies knows which service or location page prompted your enquiry and can answer in context.

• Files you choose to send

  Drawings, models, specifications and data sheets you email or attach — used only to estimate, quote and carry out the engineering work you asked for.

We do not ask for sensitive data. This website never requests financial or card details, government identity numbers, health information or biometric data, and you should not send them to us. If you include such data in a message anyway, we will delete it once we have dealt with your enquiry.

We do not run advertising pixels, cross-site trackers or device fingerprinting on this site, and we build no behavioural profile of visitors.

Our legal basis for processing your personal data is your consent under the DPDP Act — free, specific, informed, unconditional and unambiguous, given by a clear affirmative action.

In practice, you give consent when you deliberately type your details into the enquiry popup, the chat assistant or the quotation form and press send, after being shown a link to this notice; when you email, call or message us; or, separately, when you press Accept on the analytics consent banner. Nothing is pre-ticked and nothing is inferred from merely browsing.

Your personal data is used for these purposes and no others:

• Reading, understanding and replying to your enquiry.
• Preparing and sending you a quotation or technical proposal.
• Asking you follow-up questions needed to scope or price the work.
• Delivering and supporting the engineering work if you appoint us.
• Keeping the records we are required to keep as a business — contracts, invoices and statutory filings.

What we never do. We do not sell, rent, licence or trade personal data to anyone, for any amount, ever. We do not use it to build advertising or behavioural profiles, we do not feed it to automated decision-making or scoring systems, and we do not add you to a marketing list unless you specifically ask us to. If we ever wanted to use your data for a new purpose, we would come back and ask you first.

We keep your enquiry inside a very small circle. These are the only parties that can see it, and exactly why:

• IRPR — lead endpoint

  Every form on this site submits to https://io.irpr.network/api/lead, a lead-capture service operated by IRPR, which receives and stores the submission and notifies our team. It acts as our Data Processor — it processes the data on our instructions for this purpose only.

• Our email provider

  Enquiries and replies pass through, and are stored in, the business email service we use to correspond with you.

• Google Analytics 4

  Loaded only if you press Accept on the consent banner. It measures page visits — it never receives your name, phone number, email address or enquiry text. Full detail is in the cookie policy.

• WhatsApp (Meta)

  Only if you choose to contact us on WhatsApp. That conversation is carried on Meta's platform and is also governed by WhatsApp's own privacy terms. Use email or phone instead if you would rather not involve them.

• Professional advisers and authorities

  Our accountants, auditors or lawyers where genuinely necessary, and government or judicial authorities where we are legally compelled to disclose. We disclose the minimum required.

We require every processor to use your data only for the purpose we engaged them for and to protect it with reasonable security safeguards. We do not share your data with data brokers, list sellers or advertising networks.

We are based in India, but some of the services above — our lead endpoint, email, cloud storage and analytics — may store or process data on servers located outside India.

Section 16 of the DPDP Act permits a Data Fiduciary to transfer personal data outside India, except to a country or territory that the Central Government restricts by notification. We monitor those notifications and will not transfer personal data to a restricted territory. Where a sectoral law imposes a stricter localisation requirement on particular data, that stricter rule prevails and we follow it.

If you would like to know the current locations of the servers used for your data, email [email protected] and we will tell you what we know.

We keep personal data only for as long as the purpose it was collected for still needs it, and then we erase it.

• Enquiries that go nowhere

  Retained for RETENTION PERIOD — e.g. 24 months from our last contact with you, so we can pick the conversation back up, then erased.

• Enquiries that become projects

  Retained for the life of the engagement and afterwards for POST-PROJECT PERIOD — e.g. 8 years where contract, tax, audit or professional-liability obligations require it.

• Analytics

  Aggregate measurement data held by Google under its own retention settings — see the cookie policy.

When you withdraw consent or ask for erasure, we erase your data and instruct our processors to erase their copies, unless a specific law requires us to keep it — in which case we tell you what we are keeping, and why.

We take reasonable security safeguards to prevent a personal data breach, as the DPDP Act requires. These include:

• Encrypted transport (HTTPS/TLS) for everything submitted through this website.
• Access limited to the people who actually need it to answer your enquiry or deliver your project.
• Individual accounts and passwords, with multi-factor authentication on business email.
• Confidentiality obligations and NDAs covering our engineers and staff.
• Project files kept in access-controlled folders, separated client by client.
• No secrets or personal data stored in this website's published code — it is a static site with no database of its own.
• Periodic review of who has access to what, and removal of access that is no longer needed.

We will be straight with you: no safeguard is perfect, and no organisation can promise absolute security. What we can promise is that we take it seriously and that we tell you promptly if something goes wrong.

If we become aware of a personal data breach affecting your data, we will notify both the Data Protection Board of India and every affected Data Principal, in the form, manner and timeframe required by the DPDP Act and the rules made under it, without undue delay.

Our notification to you will describe, as far as we know it, the nature and extent of the breach, when it happened, the likely consequences, what we have done to contain it and what you can do to protect yourself — plus a contact point for your questions.

The DPDP Act gives you real, enforceable rights over your personal data. All of them are free to exercise.

The Act also places duties on Data Principals: please give us accurate details, do not impersonate anyone, and do not file a grievance or complaint you know to be false. Those duties are yours, not something we enforce.

If anything about this notice, or about how we have handled your data, is not right — tell us first. We would far rather fix it ourselves.

Our services are business-to-business and are not directed at children. We do not knowingly collect personal data from anyone under 18.

The DPDP Act treats everyone under 18 as a child. We will not process a child's personal data without the verifiable consent of a parent or lawful guardian, and we will not track a child, monitor their behaviour or direct advertising at them — the Act prohibits it, and we have no interest in doing so. The same protection applies to a person with a disability who has a lawful guardian.

If you believe a child has given us personal data, email [email protected] and we will erase it promptly.

This site sets no cookies by default. Nothing is stored on your device for tracking unless you accept the analytics banner, and the site works fully if you never do.

Google Analytics 4 — the only optional measurement tool we use — loads only after you press Accept, and it never receives your name, phone number, email address or the content of your enquiry.

Engineering deliverables often carry personal data that is not yours or ours — approver names, checker initials, signatures, site contact numbers in a drawing title block or a vendor data sheet.

When you send us project files, we handle any personal data inside them only on your instructions and only to carry out the engineering work, under the NDA and the contract between us. We do not extract, reuse or market from it. If you need us to return or destroy those files at the end of a project, say so and we will, subject to the record-keeping periods described above.

We will update this notice when our practices change, when the DPDP Rules are notified or amended, or when we add or remove a service provider. The Last updated date at the top of this page always reflects the current version.

If a change materially affects how we use personal data you have already given us, we will ask for fresh consent rather than assume the old one still covers it.

Questions about this notice, your data, or anything else on this page — just ask. A person reads every message.

Website: structuralengineeringservices.io