Privacy Policy

Privacy Policy

Effective Date: 20 Sept, 2025

Last Updated: 20 Sept, 2025

Utsah Group (“we,” “our,” “us”) operates the website www.cdengg.com. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website, products, and services.

Utsah Group comprises two entities: C.D. Engineering Company and Utsah Engineering Pvt. Ltd. Utsah Engineering operates a separate website (www.utsahengineering.com).

This Privacy Policy applies to our website, and to all products and services offered by Utsah Group. We are committed to protecting your privacy and handling your data in compliance with applicable data protection laws, including the EU General Data Protection Regulation (GDPR) and the Digital Personal Data Protection Act, 2023 (DPDPA), India.

1. Information We Collect

We may collect the following categories of personal data:

• Identity Information: Name, job title, organization details.
• Contact Information: Email address, phone number, postal address.
• Transactional Information: Records of inquiries, feedback, and orders.
• Technical Information: IP address, browser type, operating system, device identifiers, pages visited, and usage statistics (Log Data).
• Cookies and Similar Technologies: To improve functionality and user experience. You can choose to disable cookies in your browser, though some features may not function properly.

2. How We Use Your Information

We process your personal data only for lawful purposes, including:

• To provide, maintain, and improve our products and services.
• To communicate with you regarding inquiries, quotations, or support.
• To process transactions and deliver orders.
• To send important updates, including policy changes or service updates.
• To comply with legal obligations.
• For internal analysis to improve site performance and customer experience.

We will never sell your personal data.

3. Legal Basis for Processing (GDPR)

If you are located in the EU/EEA, we rely on the following legal bases:

• Consent: When you voluntarily provide your information (e.g., through forms).
• Contractual Necessity: To fulfill an order or service request.
• Legal Obligation: Where processing is required by law.
• Legitimate Interests: For business improvements and customer relationship management, provided your rights are not overridden.

4. Sharing of Information

We may share your personal data only in the following cases:

• With trusted service providers (e.g., IT support, analytics providers) under confidentiality obligations.
• When required by law, regulation, or legal process.
• During a merger, acquisition, or business restructuring, with appropriate safeguards.

Third parties are strictly prohibited from using your data for purposes other than those we specify.

5. Data Retention

We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Once no longer needed, data will be securely deleted or anonymized.

6. Your Rights

Depending on your jurisdiction (GDPR / DPDPA), you may have the following rights:

• Right to access your personal data.
• Right to rectification (correction of inaccurate or incomplete data).
• Right to erasure (“Right to be forgotten”).
• Right to restrict or object to processing.
• Right to data portability (where applicable).
• Right to withdraw consent at any time.
• Right to lodge a complaint with the relevant supervisory authority.

To exercise these rights, please contact us (details below).

7. Security

We use appropriate technical and organizational measures to safeguard your personal data against unauthorized access, alteration, disclosure, or destruction. However, please note that no method of transmission over the internet is 100% secure.

8. Children’s Privacy

Our services are not directed to children under the age of 18 (per India’s DPDPA). We do not knowingly collect personal data from minors. If you believe your child has provided personal data, please contact us, and we will delete it promptly.

9. International Transfers

If your data is transferred outside your country (including to servers or service providers abroad), we ensure appropriate safeguards are in place in accordance with applicable law (e.g., GDPR standard contractual clauses).

10. Links to Other Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of such sites. We encourage you to review their privacy policies.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Effective Date.” We encourage you to review this policy periodically.

12. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us:

C.D. Engineering

Email: cdengg@yahoo.com