Privacy Policy

URL: /privacy Effective Date: 01/09/2026 Last Updated: 01/09/2026

1. Introduction

NFORT Industries (OPC) Private Limited, a company incorporated under the Companies Act, 2013, bearing CIN U47711DL2025OPC446296 (“NFORT”, “the Company”, “we”, “us”, “our”), operates the website www.nfortindustries.com and its associated Client Portal (collectively, the “Platform”). This Privacy Policy describes how we collect, use, disclose, store, and protect information relating to visitors, prospective and registered B2B buyers, distributors, channel partners, job applicants, and other individuals (“you”, “User”) who interact with the Platform.

This Policy is published in compliance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (to the extent notified and applicable), as amended from time to time.

By accessing or using the Platform, submitting an enquiry, registering a Client Portal account, or otherwise providing your information to us, you acknowledge that you have read, understood, and agree to the practices described in this Policy. If you do not agree, please discontinue use of the Platform.

2. Scope of This Policy

This Policy applies to: - Visitors browsing the public website without registering an account. - Prospective buyers submitting Request for Quotation (RFQ), contact, or enquiry forms. - Registered B2B buyers, distributors, and channel partners using the Client Portal. - Applicants submitting resumes or applications through the Careers page. - Any individual whose information NFORT receives in connection with a business relationship (e.g., contact persons at a buyer’s organisation).

This Policy does not apply to information collected by third-party websites linked from our Platform, or by third-party services (such as our payment gateway or logistics partners) operating under their own privacy policies, which we encourage you to review separately.

3. Information We Collect

3.1 Information You Provide Directly

• Identity and contact details: full name, designation/job title, company name, email address, phone number, WhatsApp number.
• Business verification details: GSTIN, business registration/incorporation documents, PAN, and other documentation submitted to unlock verified wholesale pricing on the Client Portal.
• Billing and shipping information: registered office address, factory/warehouse address, alternate delivery locations for multi-branch buyers.
• Order and transaction details: products enquired about or ordered, quantities, purchase order numbers, delivery instructions, special handling requirements.
• Communication content: messages sent via enquiry forms, RFQ forms, live chat, support tickets, or email correspondence with our sales and support teams.
• Career application data: resume/CV, cover letter, employment history, educational qualifications, references, and any other information voluntarily submitted through the Careers page.
• Newsletter subscription data: email address provided for marketing communications (opt-in only).

3.2 Information Collected Automatically

Since the Platform does not deploy cookies, web analytics, or tracking pixels (such as Google Analytics or Meta Pixel), we do not automatically collect browsing behaviour, device fingerprints, or third-party advertising identifiers. The only automatically processed data is: - Essential session data: a session identifier is temporarily created when you log into the Client Portal, solely to keep you authenticated during your session. This data is not used for tracking or profiling and is discarded when the session ends or expires. - Server log data: our hosting infrastructure may, as a standard technical function, record IP address, browser type, and access timestamps for security and abuse-prevention purposes only, not for marketing or analytics.

3.3 Information Collected From Third Parties

• Payment confirmation data: Razorpay, our payment gateway partner, shares transaction status (success/failure), payment reference ID, and amount with us to reconcile orders. Razorpay does not share full card, UPI, or bank account numbers with NFORT.
• Logistics status data: Bluedart and Delhivery, our courier partners, share shipment tracking status and delivery confirmation with us to update your order status.
• Business verification data: where relevant, publicly available business registries (e.g., GST portal, MCA portal) may be referenced to verify the authenticity of a business account.

4. Legal Basis and Purpose of Processing

We process your information for the following purposes, each grounded in a legitimate business need, contractual necessity, or your consent:

Basis: Consent / pre-contractual necessity

5. Cookies and Tracking Technologies

NFORT does not use cookies for analytics, advertising, or behavioural tracking. We do not use Google Analytics, Meta Pixel, or any comparable third-party tracking tool. The only cookie-like mechanism in use is a strictly necessary session token required to keep a Client Portal user logged in, which is deleted automatically upon logout or session expiry. Should this practice change in the future, this Policy will be updated in advance and a cookie consent mechanism will be introduced.

6. How We Share Your Information

We do not sell, rent, or trade your personal or business information to any third party for their own marketing purposes. We share information strictly on a need-to-know basis with:

• Razorpay (Payment Gateway): to process advance and balance payments securely. Razorpay processes payment data under its own PCI-DSS compliant security framework.
• Bluedart and Delhivery (Logistics Partners): to enable order dispatch, delivery, and shipment tracking. These partners receive only the shipping address, contact number, and order reference necessary for delivery.
• Government and Regulatory Authorities: where legally required, including GST authorities, customs authorities (for export shipments), and courts or law enforcement agencies pursuant to a valid legal request.
• Professional Advisors: our accountants, auditors, company secretary, or legal counsel, strictly for compliance, audit, or dispute-resolution purposes, under confidentiality obligations.
• IT and Hosting Service Providers: who host our website, Odoo ERP/CRM system, and Client Portal infrastructure, under contractual confidentiality and data-protection obligations.
• Business Successors: in the event of a merger, acquisition, or sale of business assets, your information may be transferred to the successor entity, subject to the same privacy commitments described here.

7. International Data Transfer

For export orders, certain information (buyer name, company, shipping address, order details) may be included in shipping and customs documentation transmitted to freight forwarders, customs authorities, and logistics partners in the destination country, as necessary to complete the export transaction. We take reasonable steps to ensure such transfers are limited to what is necessary for the shipment.

8. Data Security Measures

We implement reasonable technical and organisational measures to protect your information, including: - Access-controlled systems for Client Portal accounts and internal ERP/CRM data, restricted to authorised personnel on a need-to-know basis. - Payment processing exclusively through Razorpay’s PCI-DSS compliant infrastructure; NFORT never stores full card, UPI, or net-banking credentials on its own servers. - Secure transmission of data via encrypted connections (HTTPS/TLS) between your browser and our servers. - Periodic review of access permissions for staff handling business and financial records.

While we take reasonable precautions, no method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security of information transmitted to us.

9. Data Retention

We retain business, transactional, and financial records for a period of 10 years from the date of the relevant transaction, in order to meet contractual obligations, tax record-keeping requirements under Indian law, and potential dispute-resolution needs.

Newsletter and marketing data is retained until you unsubscribe or request deletion, whichever is earlier. Career application data that does not result in employment is retained for a reasonable period for future recruitment consideration, unless you request earlier deletion.

10. Your Rights

Subject to applicable law and the retention obligations described above, you may request to: - Access the personal information we hold about you. - Correct inaccurate or outdated information. - Delete your personal information, where it is not required to be retained for legal, tax, or contractual purposes. - Withdraw consent for marketing communications at any time by using the unsubscribe link in any newsletter email, or by writing to us directly. - Object to processing carried out on the basis of legitimate interest, where you believe your rights outweigh our interest in processing

To exercise any of these rights, write to support@nfortindustries.com with your request and sufficient detail to verify your identity. We will respond within a reasonable timeframe, and in any case within the period prescribed by applicable law.

11. Marketing Communications

We send newsletter or promotional communications only to individuals who have explicitly opted in (e.g., via the newsletter signup strip on our website). You may opt out at any time; opting out of marketing communications does not affect transactional communications related to your active orders, invoices, or Client Portal account, which are necessary for us to fulfil our contractual obligations to you.

12. Children’s Privacy

The Platform is intended for business use by adults acting on behalf of their organisations. We do not knowingly collect information from individuals under the age of 18. If we become aware that we have inadvertently collected such information, we will take steps to delete it promptly.

13. Third-Party Links

Our website may contain links to third-party websites (e.g., social media platforms, courier tracking pages, payment gateway pages). This Policy does not extend to such third-party websites. We encourage you to review the privacy policies of any third-party site before providing your information.

14. Data Breach Notification

In the unlikely event of a data breach that is reasonably likely to result in a risk to your rights or interests, we will notify affected individuals and relevant regulatory authorities as required under applicable law, within the timeframe prescribed by law.

15. Grievance Officer

In accordance with the Information Technology Act, 2000 and rules made thereunder, the following Grievance Officer has been designated to address any complaints or concerns regarding this Privacy Policy or the handling of your information:

Grievance Officer: Syed Aayanur Rahman Email: support@nfortindustries.com Phone: +91 92177 23949 Address: B-165, Ground Floor, Madanpur Khadar Part-3, Sarita Vihar, South Delhi, New Delhi, Delhi, India — 110076

Complaints will be acknowledged within a reasonable period and resolved as expeditiously as possible, in accordance with applicable law.

16. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. Material changes will be notified via a notice on the website or, where you have a registered account, via email. The “Last Updated” date at the top of this Policy indicates when it was last revised. Continued use of the Platform after such changes constitutes acceptance of the revised Policy.

17. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or your personal information, please contact:

NFORT Industries (OPC) Private Limited Email: support@nfortindustries.com Phone: +91 92177 23949 Registered Office: B-165, Ground Floor, Madanpur Khadar Part-3, Sarita Vihar, South Delhi, New Delhi, Delhi, India — 110076 CIN: U47711DL2025OPC446296 | GSTIN: 07AAKCN3687M1ZP