Last updated: 3 October 2026. This notice is subject to legal review.
1. Who we are
Greenprastha Technologies Private Limited (“Greenprastha”, “we”) develops and manufactures separators for alkaline water electrolysers. We are the controller of the personal data described in this notice (a “data fiduciary” under India's DPDP Act). This notice covers greenprastha.com and the enquiries, samples, documents and services you request through it.
Address: IIT Bombay, Powai, Mumbai 400076, India. Privacy contact: privacy@greenprastha.com.
2. What we collect
- Information you give us in forms: name, company, role, work email, phone, country, company type, electrolyser technology and size, sample size, your message, whether you need an NDA, the page you sent it from, and your consent to be contacted.
- Campaign information (optional): if you have allowed analytics, the campaign tags (UTM parameters) in the link you used to reach us, sent with a form only if you submit one.
- Business correspondence: emails and records of samples, NDAs, trials and orders with your organisation.
- Technical data: IP address, browser and device information, processed by our hosting and security providers to deliver the site and protect it from abuse.
We do not collect special categories of personal data, and the site is not directed at children.
3. Why we use it, and our legal bases
| Purpose | Legal basis (GDPR) | Under the DPDP Act |
|---|---|---|
| Responding to your enquiry, sample or datasheet request | Your request and steps before a contract (Art. 6(1)(b)); your consent where given (Art. 6(1)(a)) | Consent given in the form |
| Managing our business relationship, NDAs, trials and supply | Contract (Art. 6(1)(b)) and legitimate interests (Art. 6(1)(f)) | Consent or legitimate use |
| Protecting the site and forms from spam and abuse | Legitimate interests (Art. 6(1)(f)) | Legitimate use |
| Optional analytics and campaign attribution | Consent (Art. 6(1)(a)), which you can withdraw at any time | Consent |
| Meeting legal, tax and regulatory obligations | Legal obligation (Art. 6(1)(c)) | Legal requirement |
We do not sell personal data, use it for automated decision-making or profiling, or share it for advertising.
4. Who we share it with
We use a small number of service providers, who process data only on our instructions under data processing agreements:
- Cloudflare: website hosting, delivery, security and form spam protection (Turnstile).
- Supabase: secure storage of form submissions, hosted in Mumbai, India.
- Resend: email notifications to our team when a form is submitted.
- Our email provider: correspondence with you.
We may also disclose data where required by law, or to professional advisers bound by confidentiality.
5. International transfers
We are based in India, and form submissions are stored in India. Some of our providers may process data in other countries. Where personal data of people in the European Economic Area or the United Kingdom is transferred to a country without an adequacy decision, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK Addendum), together with the security measures described below. You can ask us for more information about these safeguards.
6. How long we keep it
- Enquiries that do not lead to a business relationship: up to 24 months after our last contact, then deleted.
- Customer and supplier records: for the duration of the relationship and as long as required by law (for example, tax and accounting rules).
- NDA records: for the term of the NDA and the confidentiality period it specifies.
- Consent records: as long as needed to show that consent was given.
7. How we protect it
Data is encrypted in transit, stored with access restricted to the team members who need it, and protected by row-level security. Secrets and keys are never exposed in the website's code. See Security & trust for more.
8. Your rights
Depending on where you are, you have the right to:
- Access the personal data we hold about you and receive a copy;
- Correct inaccurate or incomplete data;
- Erase your data where there is no reason for us to keep it;
- Restrict or object to our processing, including processing based on legitimate interests;
- Data portability: receive data you gave us in a structured, machine-readable format;
- Withdraw consent at any time, without affecting processing that took place before; for cookies, use ;
- Nominate another person to exercise your rights (DPDP Act), and seek grievance redressal from us.
To exercise any right, email privacy@greenprastha.com. We will respond within one month (GDPR) and may need to verify your identity. There is no charge in most cases.
If you are not satisfied, you can complain to your data protection authority: in the EU, the supervisory authority of your country; in the UK, the Information Commissioner's Office; in India, the Data Protection Board of India. We would welcome the chance to address your concern first.
9. Cookies
We use only the storage needed to run the site. Optional analytics stays off unless you allow it. Details are in our cookie policy, and you can change your choice at any time with .
10. Changes to this notice
We will update this notice when our practices change and show the date of the latest version at the top.
11. Contact
Greenprastha Technologies Private Limited, IIT Bombay, Powai, Mumbai 400076, India · privacy@greenprastha.com