Privacy Policy

Last Updated: May 23, 2026

Forge Renewables ("we", "us", "our") operates the website https://forgerenewables.in/. We are committed to safeguarding the privacy and security of the personal and business data of our website users, prospective clients, and sourcing partners. This Privacy Policy details how we collect, store, process, and transfer information in accordance with Indian and global data protection standards.

---

1. Legal and Regulatory Framework

This policy is framed in compliance with the following statutory provisions:

• Section 43A of the Information Technology Act, 2000 (India).
• The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
• The **Digital Personal Data Protection Act (DPDPA), 2023** (India) governing digital data processing.
• General alignment with the **General Data Protection Regulation (GDPR)** and **California Consumer Privacy Act (CCPA)** for international traffic.

2. Categories of Information Collected

We only collect data necessary to fulfill commercial and operational requirements:

• Identity and Contact Data: Name, professional email address, contact number, and organization name provided voluntarily by you via our contact and query forms.
• Business Operational Data: Post-industrial scrap volume, polymer types (HDPE/PP), sourcing details, or procurement specs.
• Technical and Analytics Data: IP address, browser type, operating system, and activity logs collected via third-party cookies (e.g., Google Analytics) to monitor website performance and load times.

3. Purpose and Legal Basis of Data Processing

We process your data under the following legal bases:

• Consent: To answer inquiries, evaluate scrap supply offers, or respond to sales requests for reprocessed plastic granules.
• Contractual Obligations: To execute transactions, coordinate logistics, and draft commercial trade agreements.
• Compliance: To satisfy environmental regulatory mandates, including Extended Producer Responsibility (EPR) certification logs submitted to the State Pollution Control Boards (MPCB) and Central Pollution Control Board (CPCB).

4. Data Security & Storage Controls

In terms of Section 43A of the IT Act, 2000, we maintain robust administrative, technical, and physical security measures to protect your data from unauthorized access, loss, alteration, or disclosure. We retain data only for the duration necessary to satisfy business relations or statutory audit purposes under Indian taxation and environmental laws.

5. Information Sharing and Third-Party Disclosures

We do not sell, trade, or lease personal information. Data is shared only with:

• Authorized logistics partners to coordinate delivery or pickup of goods.
• Governmental authorities, pollution boards (MPCB/CPCB), or tax agencies (GST department) where mandated by law.

6. Your Statutory Rights

Under the DPDPA 2023, you have the right to request access to the data we hold, seek corrections, withdraw consent for further marketing/communication, and demand the erasure of personal records, subject to retention mandates under tax laws.

7. Grievance Redressal and Compliance Officer

In accordance with the Information Technology Act, 2000 and rules made thereunder, any queries or grievances regarding this policy must be addressed to our designated Grievance Officer: