Privacy Policy
Last updated: 30 July 2026
Effective date: 30 July 2026 · Version applicable to ynmsafety.com and related YNM Safety online services
This Privacy Policy (“Policy”) is issued by YNM Mega Industries Private Limited, operating under the brand YNM Safety (“Company”, “we”, “us”, or “our”), with registered / principal place of business at Sy. No. 191 & 192, Plot No. 128, Mankhal Maheswaram, R.R. District, Telangana - 501359, India.
This Policy explains how we collect, use, disclose, store, transfer, retain and protect personal data when you visit https://ynmsafety.com (the “Website”), use our online forms, chat assistant, portals (including site-visit, factory-visit and quality-reports), request quotations, submit career or partnership inquiries, or otherwise interact with our digital services (collectively, the “Services”).
We process personal data in accordance with applicable Indian law, including the Information Technology Act, 2000 and rules thereunder, and the Digital Personal Data Protection Act, 2023 (“DPDP Act”) together with rules notified thereunder (as applicable from time to time). Where you are located outside India, additional local laws may apply; we still apply this Policy as our baseline standard.
By accessing the Website or providing personal data to us, you acknowledge that you have read and understood this Policy. Where consent is required under law, your affirmative action (including submitting a form, creating a portal session, or continuing to use cookie-based features after notice) constitutes consent for the stated purposes.
1. Who We Are (Data Fiduciary)
For the purposes of the DPDP Act, YNM Mega Industries Private Limited is the Data Fiduciary in respect of personal data collected through the Services, except where we process data solely as a Data Processor on documented instructions of another entity (for example, limited hosting or analytics processing by our vendors acting on our behalf).
Contact for privacy matters: sales@ynmsafety.com / rishu@ynmsafety.com. Phone: +91 81215 50143. Address: Sy. No. 191 & 192, Plot No. 128, Mankhal Maheswaram, R.R. District, Telangana - 501359, India.
2. Scope and Applicability
This Policy applies to personal data relating to identified or identifiable individuals (“Data Principals”) that we collect through the Services, whether provided by you, collected automatically, or received from authorised third parties.
This Policy does not apply to: (a) anonymised or aggregated data that cannot reasonably identify an individual; (b) publicly available information that we did not collect from you; or (c) offline B2B contractual processing governed exclusively by a separate written agreement (to the extent such agreement expressly overrides this Policy).
Employee / contractor HR data may be governed by separate internal policies. Portal users (employees, partners or authorised personnel) remain bound by this Policy for Website and portal use, in addition to any employment or NDA terms.
3. Categories of Personal Data We Collect
Depending on how you interact with us, we may collect the following categories of personal data:
Identity and contact data
- Name, designation, company / organisation name, email address, telephone / WhatsApp number, postal or project address, country and city.
Commercial and enquiry data
- Product interests, quantity estimates, project details, tender / BOQ references, technical specifications shared by you, message content in contact, quote, careers, partnership, director appointment, investor relations, foreign collaboration or similar forms.
Career and application data
- CV / résumé contents, education, work history, skills and other information you voluntarily submit for recruitment.
Portal and operational data
- Login identifiers, session tokens / cookies, role, visit reports, attendance / check-in and check-out records, geotags / location accuracy (where you enable location), photos / selfies and site images you upload, discussion summaries, product rows, directory entries and related audit logs for site-visit, factory-visit and quality-reports portals.
Technical and usage data
- IP address, approximate location derived from IP, browser type and version, device / OS, referring URL, pages viewed, timestamps, language preference, cookie identifiers, and diagnostic logs necessary for security and performance.
Communications data
- Emails, chat messages with our Website assistant, call notes where you contact us, and support correspondence.
4. How We Collect Personal Data
- Directly from you when you fill forms, upload files, use portals, chat with the assistant, email or call us.
- Automatically via cookies, pixels, server logs, security middleware and analytics tools when you use the Website.
- From authorised colleagues or partners who submit information about you for a legitimate business purpose (e.g., naming you as a project contact).
- From publicly available professional sources where lawful and relevant to B2B outreach (limited use).
5. Purposes of Processing
We process personal data only for lawful purposes, including:
- Responding to enquiries, issuing quotations, negotiating and performing contracts for paints, coatings, road-safety products, fabrication, signage, bitumen and related goods/services.
- Operating authenticated portals (site visits, factory visits, quality reports), including identity verification, session management, uploads, reporting and audit trails.
- Recruitment and evaluating career applications.
- Customer support, after-sales communication and technical assistance.
- Improving Website performance, UX, language/translation features and product content.
- Analytics, measurement and (where enabled) advertising / remarketing via tools such as Google Analytics / Google Tag Manager / Google Ads, subject to your browser controls and applicable law.
- Security: detecting abuse, fraud, bots, unauthorised access, rate-limit violations and protecting our infrastructure, APIs and users.
- Compliance with legal, tax, accounting, regulatory, dispute and law-enforcement obligations.
- Sending service-related notices and, where permitted, marketing communications about our products (you may opt out of marketing at any time).
6. Lawful Basis / Consent (DPDP and Allied Laws)
Under the DPDP Act, we process personal data for lawful uses and/or with free, specific, informed, unconditional and clear consent where consent is required. You may withdraw consent for consent-based processing by contacting us; withdrawal will not affect processing already lawfully completed or processing required for legal obligations or legitimate uses permitted by law.
We may process data without consent where permitted by law (for example: employment purposes subject to applicable rules; medical emergency; compliance with law or judgment; employment benefits administration; or other uses expressly permitted under the DPDP Act and rules).
You must not submit personal data of another person unless you have authority and a lawful basis to do so. You are responsible for ensuring the accuracy of data you provide.
7. Cookies, Analytics and Similar Technologies
We use essential cookies (session, authentication, security, portals gate, language preference) required to operate the Services. Disabling essential cookies may break login, forms or portal access.
We may use analytics and advertising cookies / pixels (including Google technologies) to understand traffic, measure campaigns and improve marketing effectiveness. You can control cookies via browser settings, industry opt-out tools, and Google Ads Settings. Blocking non-essential cookies will not prevent Website browsing of public pages but may limit personalisation and measurement.
We do not intend cookies to store sensitive personal data. Do not enter secrets into URL parameters; our systems may strip certain tracking parameters for security and privacy hygiene.
8. Chat Assistant, Forms and Automated Processing
Our Website chat assistant and form endpoints process the content you submit to generate responses, route enquiries and store records for follow-up. Messages may be logged for quality, abuse prevention and service improvement.
Do not submit passwords, OTP codes, full payment card numbers, Aadhaar/PAN unless expressly requested through a secure designated channel, or other highly sensitive credentials via chat or public forms.
Automated tools (including AI-assisted responses and translation) may process text you submit. Human review may occur for sales follow-up and safety moderation.
9. Portals (Site Visit, Factory Visit, Quality Reports)
Portals are restricted services for authorised users. Access may require passwords, session cookies and, where configured, a portals gate. You must keep credentials confidential and notify us immediately of suspected compromise.
Portal content (including photos, location, visit notes and quality documents) may contain personal data of employees, contractors or third parties. Upload only data you are authorised to share. We use such data to operate field operations, QA, compliance and internal reporting.
We may suspend or terminate portal access for security, policy violations or end of authorisation.
10. Disclosure and Sharing
We do not sell personal data. We may share personal data only as follows:
- Service providers / processors: cloud hosting (including AWS infrastructure), databases (e.g., Supabase), email/SMTP providers, analytics providers, security and CDN vendors — under contractual confidentiality and purpose limitation.
- Business affiliates / group entities and authorised sales partners, solely for fulfilling your enquiry or contract.
- Professional advisers (legal, accounting, auditors) under confidentiality.
- Authorities, courts, regulators or law enforcement when required by applicable law, legal process, or to protect rights, safety, fraud prevention and network security.
- Corporate transactions: merger, acquisition, restructuring or asset sale — subject to appropriate confidentiality and notice where required by law.
11. International Transfers
Our primary operations and manufacturing are in India. Certain processors (cloud, email, analytics) may store or process data on servers outside India. Where we transfer personal data outside India, we do so in accordance with applicable law and with reasonable contractual and technical safeguards.
By using the Services, you understand that your data may be processed in India and in other jurisdictions where our processors operate.
12. Retention
We retain personal data only as long as necessary for the purposes stated in this Policy, or longer where required for legal, tax, accounting, dispute resolution, security logging or contractual obligations.
When retention ends, we delete or irreversibly anonymise personal data where feasible.
Indicative retention (may vary by record type)
- Sales enquiries / quotes: typically up to 36 months after last meaningful contact, unless a contract or dispute requires longer.
- Contracts and invoices: as required under applicable tax and commercial laws (often 8 years or longer).
- Career applications: typically up to 24 months unless you consent to a talent pool for longer.
- Portal operational records: for the employment / engagement period plus a reasonable archival period for audit and dispute needs.
- Security logs: typically 90–365 days unless investigating an incident.
13. Security Measures
We implement reasonable technical and organisational security measures appropriate to the nature of the data and risks, which may include: TLS encryption in transit, access controls and least-privilege credentials, Origin/Referer gating on APIs, rate limiting, session cookies with security attributes, secrets management (including cloud secrets vaults for production), network and application hardening, and monitoring for abuse.
No method of transmission or storage is 100% secure. You use the internet at your own risk. Notify us promptly of any suspected unauthorised use of your accounts or data incidents involving our Services.
14. Your Rights (Data Principal Rights)
Subject to the DPDP Act and other applicable law, you may have the right to:
- Access a summary of personal data we process about you and the processing activities.
- Seek correction and erasure of inaccurate or incomplete personal data.
- Withdraw consent where processing is based on consent.
- Nominate another individual in accordance with applicable rules (where notified).
- Have grievances redressed through our designated contact.
- Opt out of marketing emails by using unsubscribe links or emailing us.
Notes
Rights are not absolute. We may decline or limit requests as permitted by law, including where fulfilment would adversely affect the rights of others, reveal trade secrets, or conflict with legal retention duties.
15. How to Exercise Rights / Grievance Redressal
Send a clear request to sales@ynmsafety.com and rishu@ynmsafety.com with subject line “Privacy Request”, including your name, contact details, relationship with us, and the specific request. We may require reasonable identity verification before acting.
We will respond within timelines required by applicable law. We may refuse or limit requests where permitted (e.g., disproportionate requests, legally required retention, rights of others, or commercially confidential information).
Grievance / escalation contact: rishu@ynmsafety.com (mark “Grievance – Privacy”). Postal: Sy. No. 191 & 192, Plot No. 128, Mankhal Maheswaram, R.R. District, Telangana - 501359, India. Phone: +91 81215 50143.
16. Children’s Data
The Services are directed to businesses, professionals and adults. We do not knowingly collect personal data from children (as defined under applicable law, including under 18 years where relevant) without verifiable consent of a parent or lawful guardian where required. If you believe a child has provided us personal data, contact us for deletion.
17. Third-Party Websites and Services
The Website may link to third-party sites (maps, social media, payment or government portals). Their privacy practices are outside our control. Review their policies before sharing data.
18. Changes to This Policy
We may update this Policy periodically. The “Last updated” date at the top will change. Material changes may be highlighted on the Website. Continued use of the Services after an update constitutes acceptance of the revised Policy to the extent permitted by law. The current version is always available at https://ynmsafety.com/privacy-policy.
19. Governing Law and Disputes
This Policy shall be governed by the laws of India. Subject to mandatory consumer or data-protection forums (if any), courts at Hyderabad, Telangana, India shall have exclusive jurisdiction over disputes arising from this Policy, without prejudice to our right to seek interim relief elsewhere.
20. Contact Us
YNM Mega Industries Private Limited (YNM Safety)
Address: Sy. No. 191 & 192, Plot No. 128, Mankhal Maheswaram, R.R. District, Telangana - 501359, India
Email: sales@ynmsafety.com · rishu@ynmsafety.com
Phone: +91 81215 50143
Website: https://ynmsafety.com
Privacy / grievance requests: sales@ynmsafety.com · rishu@ynmsafety.com.