This Privacy Policy explains what personal data Shreya Infrasolutions Private Limited (“Shreya Infrasolutions”, “we”, “us”) collects through this website and when you contact us, why we use it, who we share it with, how long we keep it and the rights you have. Please read it before you send us an enquiry. If anything is unclear, write to contact@shreyainfra.co.in.
Only what we need
What you type into our forms or send us, plus basic technical details such as your IP address.
Used for your request
To reply to you, prepare quotations, deliver projects and bookings, and keep the site secure.
Never sold
We never sell your data or share it with others for their marketing.
You stay in control
Ask us to show, correct or delete your data, or withdraw consent, at any time.
Who we are
Shreya Infrasolutions Private Limited is an Indian infrastructure development and operations & maintenance (O&M) company. For the personal data described in this policy, we are the Data Fiduciary under the Digital Personal Data Protection Act, 2023 (the “DPDP Act”). This means we decide why and how your data is used, and we are responsible for protecting it.
- Company: Shreya Infrasolutions Private Limited
- Address: Plot No. MO-02/71, Sector-07, New BDA Colony, Ramganga Nagar, Dora Road, Bareilly, Uttar Pradesh, India – 243006
- Email: contact@shreyainfra.co.in
- Phone: +91 XXXXX XXXXX, +91 XXXXX XXXXX
What this policy covers
This policy applies when you:
- visit this website (shreyainfra.co.in);
- send us an enquiry or quote request through our website forms; or
- contact us by email, phone or WhatsApp about our infrastructure, O&M or travel services.
It does not cover our employee portal and ERP after an employee signs in, as these are internal systems for authorised staff only. It also does not cover websites run by other organisations that we link to. Where a signed contract or work order has its own data protection terms, those terms apply to that work.
Information we collect
We collect only what you choose to give us, plus a few technical details needed to run the website safely.
Information you give us
| Where | What we collect |
|---|---|
| Home page and Contact page forms | Your name, phone number, email address, the service you are interested in and your message. |
| Get a Quote form | Your name, company or organisation, phone number, email address, service required, project location, expected timeline, approximate budget, what you need help with, your project description and how you heard about us. |
| Email, phone and WhatsApp | Whatever you choose to share, such as your name, contact details, the content of your message and any attachments (for example drawings, tender documents or a CV). |
| Travel bookings | Only when you book with us: the details needed for the booking, such as traveller names, contact details, age, identity or passport details and travel preferences. |
| Employee Login page | Your Employee ID and password are sent over an encrypted connection straight to our employee portal to sign you in. This website does not store them. |
Information collected automatically
- With each enquiry: your IP address, the date and time, and the page you sent it from. This helps us spot spam and misuse.
- Spam protection: to stop automated spam, our server counts how many messages come from the same connection within 10 minutes. This short-lived record is filed under a one-way coded (hashed) form of your IP address and holds only the times of recent messages.
- Server logs: like most websites, our hosting provider's servers automatically record basic technical details such as IP address, browser type, the pages requested and the time, to deliver pages and keep the site secure.
- We do not use analytics, advertising or tracking tools on this website.
Please do not send sensitive personal data, such as bank or card details, passwords, health information or identity document numbers, through our website forms. If a project or travel booking needs such details, our team will tell you a safe way to share them.
How we use your information
We use your personal data only for these purposes:
- To reply to your enquiry and contact you about it by phone, email or WhatsApp.
- To understand your requirements, plan site surveys, and prepare quotations and proposals.
- To deliver the projects, O&M work and travel services you ask for, including bookings with airlines, railways, hotels and transport operators.
- To keep business records of enquiries, contracts, invoices and payments.
- To consider job applications you send us.
- To protect the website, prevent spam and fraud, and keep our systems secure.
- To meet legal, tax and regulatory duties, and to establish or defend legal claims.
We do not use your data for automated decision-making or profiling. We do not send you marketing messages unless you ask for them or agree to receive them, and you can opt out at any time.
Consent and your choices
When you send us an enquiry, you choose to share your details for a specific purpose: getting a response from us. We use them for that purpose and the related purposes listed above, as the DPDP Act allows. Where we rely on your consent, it is your choice to give it.
You can withdraw your consent at any time, as easily as you gave it, by emailing contact@shreyainfra.co.in with the subject “Withdraw consent”. We will then stop using your data within a reasonable time, unless the law requires or allows us to keep it. Withdrawing consent does not affect anything we did before you withdrew it.
You can choose not to give us information. If you do, we may be unable to reply to your enquiry or provide the service you asked for.
Who we share it with
We never sell your personal data or share it with others for their marketing. We share it only when needed:
- Our team: staff who need it to handle your enquiry or deliver your project or booking.
- Service providers who work for us: our website hosting, email and IT support providers. They handle data only on our instructions and must keep it secure.
- Travel suppliers: when you book travel with us, the airlines, railways, hotels, transport operators and visa authorities involved receive the traveller details they need.
- Legal and safety reasons: government authorities, courts or regulators when the law requires it, or to protect our rights, our people or others.
- Business changes: if our business is restructured, merged or sold, your data may pass to the new owner, who must protect it in the same way.
Outside services on this website
Some parts of our pages load from other companies' servers. When your browser loads them, those companies receive technical details such as your IP address, and their own privacy policies apply:
- Google Fonts provides the text fonts on our pages, and Google Maps shows the map on our Contact page. See the Google Privacy Policy.
- Unsplash provides some of the photographs on our pages. See the Unsplash Privacy Policy.
Cookies
This website does not set its own cookies and does not use analytics or advertising cookies. The outside services above may set their own cookies when their content loads (for example, Google Maps on our Contact page). When staff sign in, our employee portal may set a sign-in cookie that keeps them logged in.
You can block or delete cookies in your browser settings, and this website will still work. If we start using cookies or analytics in future, we will update this policy first.
How we protect it
- This website uses an encrypted connection (HTTPS).
- Only staff who need your enquiry can see it.
- Backup copies of enquiries are kept in a protected folder that cannot be opened from the internet.
- Our forms include spam protection and checks against harmful input.
No system is completely secure. If a breach affects your personal data, we will act quickly to contain it and will inform you and the Data Protection Board of India as the DPDP Act and its Rules require.
How long we keep it
- Enquiries that do not lead to work: up to 3 years after our last contact with you, so we can answer follow-up questions and keep a record of what was discussed.
- Client, project and travel records: for as long as the work needs, and afterwards for as long as tax, accounting and other laws require.
- Spam-protection records: only the last 10 minutes are counted, and older entries are discarded.
- Server logs: for as long as needed for security and as the law requires.
When we no longer need your data, we delete it or make it anonymous, unless the law requires us to keep it longer.
Where it is stored
Your data is stored on the servers of our website hosting and email providers and on our office systems. Some providers may store data outside India. Any transfer outside India will follow the DPDP Act and any restrictions set by the Government of India, and we remain responsible for protecting your data.
Your rights
Under the DPDP Act you have the right to:
- Access: get a summary of the personal data we hold about you, how we use it and who we have shared it with.
- Correction and erasure: have inaccurate or incomplete data corrected or updated, and have data erased when it is no longer needed, unless the law requires us to keep it.
- Withdraw consent: at any time, for data we use based on your consent.
- Grievance redressal: complain to us about how we handle your data and get a response.
- Nominate: name another person to use your rights if you die or become unable to do so.
How to make a request
Email contact@shreyainfra.co.in with the subject “Privacy request”. Write from the email address or phone number you used with us, and tell us what you would like us to do. We may ask you to confirm your identity before we act. We aim to respond within 30 days, and always within the time allowed by law.
Complaints to the Data Protection Board
Please contact us first. The DPDP Act asks you to use our grievance process before going to the Board. If you are not satisfied with our response, you can complain to the Data Protection Board of India.
When you share data with us, please make sure it is accurate, and do not share anyone else's data without their permission.
Children
Our website and services are meant for businesses and adults. We do not knowingly collect personal data from anyone under 18 through this website. If you book travel for a child, you confirm that you are the child's parent or lawful guardian, or are acting with their permission, and we use the child's details only for that booking. If you believe a child has sent us personal data, contact us and we will delete it.
Changes to this policy
We may update this policy when our website, our services or the law change. The new version will be posted on this page with a new “Last updated” date. If a change significantly affects how we use data you have already given us, we will tell you before it applies, where we are able to contact you.
Contact & Grievance Officer
For questions about this policy, to use your rights or to raise a complaint, contact our Grievance Officer. We will acknowledge your message and aim to resolve it within one month.