Privacy Policy

METNMAT INNOVATIONS PRIVATE LIMITED (“METNMAT”, “we”, “us”) operates this website and the associated B2B catalogue, enquiry and order services. Under India's Digital Personal Data Protection Act, 2023 (the “DPDP Act”) we are the Data Fiduciary for the personal data described below, and you are the Data Principal.

This page is our notice under section 5 of the Act, read with the Digital Personal Data Protection Rules, 2025, which were notified in November 2025 and set out how the Act operates in practice. Under Rule 3 a notice must stand on its own, describe the personal data item by item, and carry the links for withdrawing consent, exercising your rights and complaining to the Board — which is what this page and the consent dialog do.

The Rules commence in phases. The Data Protection Board of India was constituted when they were notified; the substantive obligations — notice and consent, breach reporting, security safeguards, children's data and the rights below — become binding in May 2027, at the end of an eighteen-month transition. We are not waiting for that date: everything described here is already in force on this site.

We collect only what a given purpose needs:

We do not process personal data for advertising, we do not sell it, and we do not use it to build profiles about you.

Analytics runs only if you accept it. When you first visit we ask, and nothing is measured until you choose. Declining changes nothing about how the site works.

You can change your mind at any time using “Privacy choices” in the footer of every page. Withdrawing takes effect immediately and erases the identifier from your browser. Section 6(4) of the Act requires withdrawal to be as easy as giving consent, and that link is how we meet it.

Where you give us data to complete something you asked for — an order, a quote, a support ticket — we process it for that purpose without a separate consent prompt, because it is the certain legitimate use recognised by section 7(a) of the Act. You can still ask us to erase it once the purpose is served.

The site stores a small amount of data in your browser. Only the last item below depends on your consent; the rest are necessary to deliver what you asked for, and are not used for tracking:

• Your cart and wishlist, so they survive a refresh.
• Your light/dark theme choice.
• Your signed-in session, if you have an account.
• Your country/currency preference, so prices display correctly.
• Your privacy choice itself, so we do not ask again on every page.
• If you accepted analytics: a random visitor and session identifier, and a short-lived marker recording which articles have already been counted so one read is not counted twice. No name, email or IP address is stored with them.
• If you react to a blog article: a long-lived identifier so the same person cannot vote twice. It is created at the moment you react — not when you open an article — and exists only to keep the count honest.

We share personal data only with processors who handle it on our behalf, under contract, and only for the purposes above:

• Payments — Razorpay. Card and bank details are entered directly with them and never reach our servers.
• Transactional email — our email delivery provider, for order confirmations and ticket updates.
• Hosting, database and file storage — our cloud infrastructure providers.

We may also disclose data where the law requires it. Our analytics are first-party: usage data is never sent to an advertising network or a third-party analytics company.

We keep personal data only as long as the purpose needs, or as long as the law requires — invoices and tax records, for example, must be retained for the statutory period, and we cannot erase those on request while that obligation stands. When neither applies, the data is deleted or anonymised. Analytics identifiers expire from your browser as soon as you withdraw consent.

We apply reasonable technical and organisational safeguards, as section 8(5) of the Act requires: encrypted connections (HTTPS) everywhere, role-based access control over the admin system, rate limiting on public endpoints, and keeping payment credentials with a PCI-DSS compliant processor rather than on our own systems. No system is perfectly secure, but if a breach affects your personal data we will notify you and the Data Protection Board as the Act requires.

As a Data Principal you have the right to:

• Access — a summary of the personal data we hold about you and how we process it (s.11).
• Correction and erasure — have inaccurate data corrected or completed, and have data erased where we no longer need it (s.12).
• Grievance redressal — a readily available means of raising a complaint with us (s.13).
• Nomination — nominate someone to exercise your rights if you die or become incapacitated (s.14).
• Withdraw consent — at any time, as easily as it was given (s.6(4)).

The quickest route is our request form, which records your request with a reference and a due date so it can be tracked to closure. You do not have to give a reason. We may ask you to verify your identity first — that step exists to stop someone else obtaining or deleting your data.

This is a business-to-business site for laboratory and industrial buyers. It is not directed at children, and we do not knowingly collect the personal data of anyone under 18. Section 9 of the Act requires verifiable parental consent before processing a child's data and prohibits tracking or behavioural advertising directed at children — we do neither. If you believe a child has given us personal data, contact the Grievance Officer above and we will erase it.

We are established in India and process personal data here. If you visit from elsewhere, your data is processed in India. Prices may be displayed in your local currency for convenience, but orders are charged in Indian Rupees (INR).

Section 5(3) of the Act gives you the option to access this notice in English or in a language listed in the Eighth Schedule to the Constitution. The consent notice shown when you first visit can be read in English, हिन्दी and বাংলা — use the language selector in that dialog, which you can reopen at any time from “Privacy choices” in the footer.

The English text is the authoritative version. If you would like this full policy in another Eighth Schedule language, ask the Grievance Officer above and we will provide it.

We may update this notice. The date below reflects the current version. If a change materially alters why or how we process personal data that you consented to, we will ask for your consent again rather than rely on the old one.