Privacy Policy

1. Who we are

LeRoy Print Packs is a printing and packaging manufacturer at Jalandhar Road, Behind KIA Showroom, Kurangana Link Road, Hoshiarpur, Punjab 146022, India.

For the purposes of the Digital Personal Data Protection Act, 2023 (DPDP Act) we are the Data Fiduciary for personal data submitted through www.leroyprintpacks.com. This policy explains what that means in practice. It covers this website only, not our offline dealings with you as a customer or supplier.

2. What we collect

Information you give us. The enquiry form on the contact page is the only place this website collects personal data. It asks for:

• Your name and your company or organisation name
• Your email address
• Your phone number, if you choose to give one (this field is optional)
• Your industry, the product you need, an estimated quantity, and whatever you write in the brief

Every one of these is used to prepare a reply. We ask for nothing that is not needed to quote a print or packaging job, and we do not ask for financial details, identity documents, or any of the categories the DPDP Act treats as requiring special care.

Information collected automatically. Our host records standard server logs (IP address, browser type, page requested, timestamp) as part of serving and securing the site. We use aggregate, cookie-free analytics that count page views and measure page speed. Neither is tied to a name, and neither builds a profile of you across other websites. See our Cookie Policy for the detail.

What we do not collect. No payments are taken through this website, so we never hold your card or bank details. We do not run advertising pixels, retargeting tags, or cross-site tracking. We do not knowingly collect data from children.

3. Why we use it, and on what basis

We use what you send us only to:

• Reply to your enquiry and prepare a quotation or sample
• Ask you the follow-up questions a quote usually needs
• Discuss and service an order you go on to place
• Keep records we are required by Indian tax and company law to keep

Our lawful basis is your consent, which you give by ticking the consent box before you submit the enquiry form, together with the legitimate uses the DPDP Act recognises for responding to a request you have voluntarily made. You are not required to use the form. Phone, WhatsApp and email are on the contact page and work just as well.

We do not send marketing. We will not add you to a mailing list, send you a newsletter, or contact you about anything other than your enquiry, unless you separately ask us to.

4. Who else sees it

We do not sell, rent, or trade personal data. It is shared only with the service providers who make the website work, each acting as a Data Processor on our instructions and only for the purpose listed:

• Vercel — hosting, server logs, and the cookie-free analytics and page-speed measurement described above.
• Resend — delivers the enquiry form submission to our inbox as an email.
• Google — supplies the fonts the site renders in and, only if you choose to load it, the map on the contact page.

These providers operate servers outside India, so your enquiry may be processed abroad. We will also disclose data where a court, tax authority or other lawful government request requires it.

5. How long we keep it

If your enquiry does not lead to an order, we delete it within 24 months. If it does, we keep the records for as long as the business relationship lasts and then for the period Indian tax and company law requires, which is generally eight years from the end of the relevant financial year. You can ask us to delete your enquiry sooner and we will, unless a legal obligation stops us.

6. Keeping it secure

The site is served over HTTPS and enquiries reach us over an encrypted connection. Access to the enquiry mailbox is limited to the people who need it to reply to you. No system is perfectly secure, and we do not claim otherwise, but if a breach affects your data we will notify you and the Data Protection Board of India as the DPDP Act requires.

7. Your rights

Under the DPDP Act you may ask us to:

• Tell you what personal data of yours we hold and what we have done with it
• Correct anything inaccurate, or complete anything missing
• Erase it, where no legal obligation requires us to keep it
• Withdraw your consent, at any time and as easily as you gave it. Withdrawing it stops any further processing but does not undo what was already done
• Nominate someone to exercise these rights if you die or become incapacitated

Email us at [email protected] and we will respond within 30 days. There is no charge. If you are not satisfied with how we handle it, you may complain to the Data Protection Board of India.

8. Grievance officer

As required by the DPDP Act and the Information Technology (Reasonable Security Practices) Rules, 2011, complaints about how we handle your personal data should be addressed to our Grievance Officer, in writing, at the address below, or by email to [email protected]with "Grievance" in the subject line. We acknowledge within 48 hours and aim to resolve within 30 days.

9. Changes to this policy

If we change this policy we will update the date at the top of this page. Material changes to how we use enquiry data will be flagged on the contact page. We do not apply changes retrospectively to data already collected.

10. Contact us

For any question about this policy or to make a request under section 7: