STRATOA ("we", "us", "our") respects the privacy of everyone who visits stratoa.in or contacts us. This policy explains what personal data we collect, why we collect it, how we protect it, and the rights you hold — including those under India's Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000 with its applicable rules.
1. What we collect
We collect only what a business relationship needs:
- Enquiry details you send us — name, company, email address, phone number, and the contents of your message, including any drawings or specifications you attach. The enquiry form on this site composes an email in your own mail client; this website itself does not store your form entries on a server.
- Correspondence — emails and records of communication when you deal with us.
- Basic technical logs — if the site is served through a hosting provider or content delivery network, standard server logs (IP address, browser type, pages requested, timestamps) may be generated by that provider for security and operational purposes.
We do not knowingly collect data from children, and our services are directed at businesses.
2. Why we collect it
- To respond to enquiries and prepare quotations you request;
- To perform contracts — manufacturing, delivering and supporting the components you order;
- To meet legal, tax and quality-record obligations (for example, traceability documentation);
- To protect the security of our systems and premises.
We process personal data on the basis of your consent (when you contact us) and for legitimate business uses connected to the relationship you initiate, consistent with the DPDP Act.
3. What we never do
- We do not sell or rent personal data to anyone.
- We do not use your data for third-party advertising.
- We do not send marketing communications you have not asked for.
4. Confidentiality of technical data
Drawings, specifications and commercial information you share with us are treated as confidential business information, independent of personal-data law. Access is limited to the people who need it to quote or produce your parts, and we sign non-disclosure agreements on request as standard practice.
5. Sharing
We share personal data only with: (a) service providers who host our email or website infrastructure, under their own security obligations; (b) professional advisers and auditors where required; and (c) public authorities where the law requires it. Any processing partner receives only the minimum necessary.
6. Retention
Enquiry correspondence is kept for as long as needed to serve the enquiry and any resulting business relationship, and thereafter as required by law or our quality system's record-retention requirements. Data no longer needed is deleted or anonymised.
7. Security
We apply reasonable security safeguards appropriate to the nature of the data — access control, encrypted transport (this site is intended to be served over HTTPS), and internal confidentiality discipline consistent with our ISO 9001:2015 quality system.
8. Your rights
Under the DPDP Act you may, in respect of your personal data:
- request access to a summary of the personal data we hold about you;
- request correction or completion of inaccurate data;
- request erasure of data no longer required for the purpose it was collected;
- withdraw consent, where processing rests on consent;
- nominate an individual to exercise your rights in case of death or incapacity; and
- raise a grievance with us, and if unresolved, approach the Data Protection Board of India.
9. Grievance officer & contact
For any privacy request, question or grievance, write to info@stratoa.in with the subject line "Privacy Request". We acknowledge privacy grievances within 72 hours and aim to resolve them within the timelines prescribed by applicable law.
10. Changes to this policy
If this policy changes, the revised version will be published on this page with an updated effective date. Material changes will be highlighted at the top of the page for 30 days.