Privacy Policy

01Scope of this policy

This policy applies to personal data collected through this website and through enquiries you send to us by email, phone or WhatsApp in connection with our trading and supply business. It does not apply to third-party websites we link to, which operate under their own policies.

We process personal data in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

02Information we collect

This website is an enquiry-based business catalogue. We do not operate a shopping cart, take payments online, or require you to create an account. The only personal data you actively give us is what you type into an enquiry form or send us directly.

When you submit the enquiry form, we collect:

• Your name (required)
• Your phone number (required)
• Your company name, if provided
• Your email address, if provided
• The product category, product or requirement, and quantity you are enquiring about
• Any message or additional detail you choose to include
• The date and time the enquiry was submitted

We do not ask for, and request that you do not send us, sensitive personal data such as financial account details, government identifiers, health information or biometric data through the enquiry form.

Our hosting provider automatically logs standard technical information — such as IP address, browser type, device type, referring page and pages visited — for security, abuse prevention and to keep the site running. We do not use this information to build a marketing profile of you.

03How we use your information

We use the personal data you provide only for the purposes for which you gave it to us, namely:

• To read, assess and respond to your product enquiry
• To contact you by phone, WhatsApp or email about the requirement you raised
• To prepare and send you quotations, product information, specifications and samples
• To carry out and administer any resulting supply arrangement between our businesses
• To maintain internal records of business enquiries and correspondence
• To detect and prevent spam, fraud and misuse of the enquiry form
• To comply with our legal, tax and regulatory obligations

We do not sell your personal data. We do not share it with third parties for their own marketing purposes. We do not send unsolicited marketing to enquirers who have not asked to hear from us.

04Consent and legal basis

We process your personal data on the basis of the consent you give when you voluntarily submit an enquiry, and for the "certain legitimate uses" recognised under the DPDP Act — principally where you have voluntarily provided your data for a specified purpose and have not indicated that you object to its use for that purpose.

You may withdraw your consent at any time by writing to rp@rphk.com. Withdrawing consent does not affect processing carried out before withdrawal, and may mean we can no longer respond to your enquiry.

05Who we share information with

We share personal data only where it is necessary, and only with:

• Our own staff and authorised representatives handling your enquiry
• Service providers who operate parts of this website and our enquiry handling on our behalf — including our website hosting provider and the form-processing service that delivers enquiries to our inbox
• Suppliers, manufacturers or logistics partners, where sharing limited details is necessary to source, quote for or fulfil the specific requirement you have asked about
• Professional advisers such as accountants, auditors and lawyers, where required
• Government, regulatory or law enforcement authorities, where we are legally required to disclose

Service providers act on our instructions and are permitted to use the data only to provide the service to us.

06International transfers

We are a global sourcing business and work with manufacturers and logistics partners outside India. Our website hosting and form-processing providers may also store data on servers located outside India.

Where personal data is transferred outside India, we do so in accordance with the DPDP Act and only to countries not restricted by the Central Government, and we take reasonable steps to ensure the data continues to be protected to the standard described in this policy.

07How long we keep it

We keep enquiry data for as long as needed to respond to and follow up on your requirement, and thereafter for as long as we have an ongoing business relationship with you.

Where an enquiry does not lead to a business relationship, we retain the record for a reasonable period for reference and dispute-resolution purposes, and then delete it. Where a transaction takes place, we retain the associated records for the period required by applicable tax, accounting and company law.

You may ask us to erase your enquiry data sooner — see "Your rights" below.

08How we protect it

We maintain reasonable security practices and procedures appropriate to the nature of the data we hold, including transport encryption (HTTPS) across this website, access controls limiting who within our organisation can see enquiry data, and vetting of the service providers we use.

09Your rights

Subject to the conditions and exemptions in the DPDP Act, you have the right to:

• Access — obtain a summary of the personal data we hold about you and how it is being processed
• Correction — have inaccurate or misleading data corrected, and incomplete data completed
• Erasure — have your personal data deleted where it is no longer needed for the purpose it was collected for and we are not required by law to retain it
• Withdraw consent — withdraw consent you previously gave, at any time
• Grievance redressal — raise a complaint with us about how your data has been handled
• Nomination — nominate another individual to exercise these rights on your behalf in the event of your death or incapacity

To exercise any of these rights, write to rp@rphk.com with enough detail for us to identify your record. We will respond within the timeframe required by law. If you are not satisfied with our response, you may escalate your complaint to the Data Protection Board of India.

10Children's data

This is a business-to-business website. It is not directed at children, and we do not knowingly collect personal data of any individual under 18 years of age. If you believe a child has submitted personal data to us, contact rp@rphk.com and we will delete it.

11Cookies

Information about cookies and similar technologies used on this website is set out separately in our Cookie Policy.

12Third-party links

This website may link to external sites, including WhatsApp and the websites of partners or manufacturers. We are not responsible for the privacy practices or content of those sites. We encourage you to read their privacy policies before submitting information to them.

13Changes to this policy

We may update this policy from time to time to reflect changes in our practices or in the law. The current version, with its effective date, is always published on this page. Material changes will be highlighted on the website. Continued use of the site after an update constitutes acceptance of the revised policy.

14Grievance officer and contact

In accordance with the Information Technology Act, 2000 and the rules made thereunder, and the DPDP Act, 2023, the contact details of our Grievance Officer are:

• Grievance Officer: [Name of Grievance Officer]
• RP HK Ltd
• Email: rp@rphk.com
• Phone: +91 9820100455
• Address: FLAT/RM A 20/F KIU FU COMM BLDG 300 LOCKHART RD WAN CHAI HONG KONG

We aim to acknowledge every grievance within 24 hours and resolve it within the period prescribed by applicable law.