Privacy Policy

HIC INTERNATIONAL CO INC is the data fiduciary under the Digital Personal Data Protection Act and the data controller under the General Data Protection Regulation. Its postal addresses, telephone numbers and email address are on the contact page and are the same ones printed in the footer of every page.

For anything in this notice, including a request to see, correct or delete your data, use the email address on the contact page and write "data request" in the subject line so it reaches the right person.

When you send an enquiry or a request for quotation: your name, company, country, email address, telephone number, the product you are asking about, the specifications you supply, your message, and any drawing or document you attach.

When you use the contact form: your name, email address, telephone number and your message.

When you subscribe to the mailing list: your email address, and nothing else.

When you request a catalogue or a technical datasheet: your email address, so the document can be sent to you, and a record of which document you asked for.

On every request, automatically: your IP address, the page you asked for, the time, the browser and operating system your browser reports, and the page you arrived from. These are ordinary web server logs and are kept for security and for diagnosing faults.

This website has no visitor accounts. You cannot register, and there is no password for you to set. Accounts exist only for the staff who edit the site.

To answer your enquiry and to quote for the goods you asked about. Under the General Data Protection Regulation this is processing necessary for steps taken at your request before entering a contract; under the Digital Personal Data Protection Act it is processing for the specified purpose you gave the data for.

To send you the catalogue or datasheet you asked for.

To send you the mailing list, if and only if you asked to receive it. That is consent, it is separate from every other purpose here, and you can withdraw it at any time using the unsubscribe link in each message or by email.

To keep the site available and secure, and to investigate abuse of the forms. Under the General Data Protection Regulation this is our legitimate interest in running the service, and it is the only purpose the server logs are used for.

Your data is not used to build a profile of you, is not sold, and is not shared with advertising networks or data brokers. This site carries no advertising.

A drawing, specification or purchase document you attach to an enquiry is stored on the same server that runs this website, in a folder that is outside the part of the server the web serves. It has no public address, it is not listed anywhere, and it cannot be reached by guessing a URL.

It is opened only by a member of HIC staff who has signed in to the administration panel, and only to price and answer your enquiry. It is never attached to a public page and is never sent to a third party service for storage or processing.

This website sets no advertising cookies, no analytics cookies and no tracking cookies, and it therefore shows you no cookie consent banner, because there is nothing to consent to.

One cookie exists: the session cookie set when a member of HIC staff signs in to the administration panel. It is marked HttpOnly, Secure and SameSite=Lax, it holds only an opaque identifier, and a visitor who never signs in is never sent it.

One item is kept in your own browser storage: whether you switched the spoken page brief on or off. It stays in your browser, it is not a cookie, it is not sent to the server, and clearing your browser data removes it.

Our hosting company, which operates the server the website and its database run on, and which can technically reach data held there.

Cloudflare, which provides the challenge that stops automated form submissions. It receives your IP address and the challenge result. It does not receive the contents of your enquiry.

The email providers that carry the notification to HIC and the confirmation to you. They see your email address and the message being delivered.

That is the whole list. There is no analytics provider, no advertising network, no customer data platform and no data broker.

Your enquiry is stored on the server that runs this website, and in no other service. Attachments never leave that server.

HIC INTERNATIONAL CO INC is an Indian company, so an enquiry sent from outside India is transferred to and read in India. If you are in the European Economic Area or the United Kingdom, that transfer is necessary for the pre-contract steps you asked us to take, and the country in which the server itself is located is available from us on request.

An enquiry and its attachments are kept while the enquiry is live and for as long as the commercial relationship it belongs to lasts, because a specification quoted once is usually quoted again. After that they are deleted.

A mailing list subscription is kept until you unsubscribe.

Server logs are kept for a short period for security and diagnosis and are then discarded.

If you ask us to delete your data sooner, we do, except where we are required to keep a record of a completed transaction.

You can ask what data we hold about you and be given a copy of it.

You can ask us to correct anything that is wrong or incomplete, and to complete anything that is missing.

You can ask us to delete it, and we do so unless a law requires us to keep it.

You can withdraw consent for anything you consented to, and the mailing list is the only thing on this site that runs on consent.

You can ask us to stop or restrict a particular use of it, and to object to a use that rests on our legitimate interest.

You can ask for it in a portable form.

Under the Digital Personal Data Protection Act you can also nominate another person to exercise these rights on your behalf, and you can bring a grievance to us first and then to the Data Protection Board of India. Under the General Data Protection Regulation you can complain to your own supervisory authority. We would rather you came to us first, and we answer within thirty days.

This is a business to business website for industrial buyers. It is not directed at children, it asks no question whose answer would be a child, and we do not knowingly collect a child’s personal data. If you believe a child has sent us data through this site, tell us and we will delete it.

The site is served only over an encrypted connection. Staff passwords are stored as argon2id hashes and never in a readable form. Staff sessions are opaque identifiers in HttpOnly cookies rather than tokens readable by a script. The forms are rate limited and challenged, so an automated attempt to flood them fails. Uploaded files are held outside the web root and are checked for type and size before they are accepted.

No system is beyond reach. If a breach affects your data we will tell you and the relevant authority, as both the Digital Personal Data Protection Act and the General Data Protection Regulation require.

When this notice changes, the new version replaces this one on this page and the date below changes with it. A change that materially affects how your data is used is notified to anyone on the mailing list rather than only published here.