Privacy Policy

Effective from 12 Oct 2026 · Version 2026-10

Grant Controls ("we") is the Data Fiduciary for personal data processed through this website. This policy explains what we collect, why, who we share it with and the rights you have under the Digital Personal Data Protection Act, 2023.

1. What we collect

Account details: your name, e-mail address and mobile number, and your Google account identifier if you sign in with Google.
Order details: delivery and billing addresses, company name and GSTIN (if you ask for a GST invoice), products ordered, installation requests and invoices.
Payment details: payment reference numbers and status from Razorpay. We never receive or store your card number, CVV, UPI PIN or net-banking password.
Security data: IP address, browser type, sign-in times and security events (for example, failed verification attempts), used to protect your account and detect fraud.
Enquiry details: when you request a quote or a call back, or write to us through the contact form: your name, mobile number, e-mail (if given), your message and the product you asked about.
Advertising data: if you arrive from a Google ad, the click identifier and campaign tags in the link, so we can measure which ads lead to orders.

2. Why we use it

To create and secure your account and verify your e-mail with one-time codes.
To process payments, deliver orders, schedule installation, issue GST invoices and provide warranty support.
To send service messages about your orders. We do not send marketing e-mails without your consent.
To meet legal obligations, including tax and accounting record-keeping.
To understand and improve the website and the performance of our ads (only with your consent where required).

We process your data on the basis of the consent you give when you create an account, and for legitimate uses permitted under the DPDP Act such as fulfilling your orders and complying with law.

3. Who we share it with

Razorpay - to process payments.
India Post and courier partners - your name, mobile number and delivery address, to deliver your order.
Google - for "Continue with Google" sign-in, and Google Analytics / Google Ads measurement when enabled.
Our e-mail provider - to deliver one-time codes and order e-mails.
Authorities - when required by law, such as tax authorities.

We do not sell your personal data.

4. Cookies and similar technologies

Essential: a session cookie that keeps you signed in and protects forms, an optional "keep me signed in" cookie, and a cart cookie for visitors who are not signed in. Your browser's local storage also keeps your cart count, recent searches and the last pincode you checked on this device.
Attribution: a first-party cookie that remembers the ad or campaign that brought you here, for up to 90 days.
Measurement: Google Analytics and Google Ads cookies, which follow the choice you make in the cookie banner. You can change your choice by clearing this site's data in your browser.
On-device preferences: sound and vibration settings are saved only in your browser.

5. How long we keep it

Account data is kept while your account is active. Invoices and order records are kept for the period required by the Central Goods and Services Tax Act, 2017 and other applicable laws, even if you delete your account. Security logs are kept for up to one year.

6. How we protect it

The website uses HTTPS encryption, passwordless sign-in with short-lived single-use codes, rate limiting and lockouts against guessing attacks, and access controls with audit logs for our staff. No method is perfectly secure, but we work to protect your data and will notify you and the Data Protection Board as required if a breach affects you.

7. Your rights

You can ask us to give you a summary of your personal data, correct or update it, or erase it (subject to legal retention), and you can withdraw consent at any time. You may also nominate another person to exercise your rights. You can update your name and mobile number in My Account, or write to us for anything else.

8. Children

This website is meant for adults. We do not knowingly create accounts for anyone under 18.

9. Grievance officer

For questions or complaints about your personal data, contact our Grievance Officer at sales@grantcontrols.com or +91 94235 52965, Grant Controls, 110 Imperial Plaza, Opp. Anand Talkies, Somwar Bazar Road, Sitabuldi, Nagpur 440012, Maharashtra. We respond within 30 days. If you are not satisfied, you may approach the Data Protection Board of India.

10. Changes

We may update this policy. The version and effective date at the top of this page show which version applies. Significant changes will be notified by e-mail or on the website.