What jitamitrablowers.com collects, why we need it, who else sees it, and how you get it corrected or deleted — under the Digital Personal Data Protection Act, 2023.
Version 1.2 · last updated 29 September 2026
This notice explains what personal data jitamitrablowers.com collects, why we need it, who else touches it and how you get it corrected or deleted. It is written to the Digital Personal Data Protection Act, 2023 (DPDPA) and describes what this website actually does — not a generic policy.
The short version: this is a business-to-business industrial website. We ask for personal data in two situations — when you fill in one of our forms, so an engineer can answer you, and when you start a WhatsApp chat from one of the buttons on these pages. We set no cookies of our own. Google Analytics does not load at all until you accept it.
Jitamitra Electro Engineering Private Limited is the Data Fiduciary for the personal data described here — we decide why and how it is processed.
For anything about personal data, write to privacy@jitamitrablowers.com rather than to the sales address — it reaches our Grievance Officer directly.
We collect personal data when you type it into a form on this site, send it to us in an attachment, or message us on WhatsApp from one of the buttons on these pages. There is no account, no login and no tracking pixel that identifies you personally.
| Where | What you give us | Why we need it |
|---|---|---|
| Get a quote | Name, business email, company, phone, GSTIN, your duty (flow, static pressure, temperature, gas) and an optional single attachment up to 20 MB — typically a specification, data sheet or GA drawing. | To engineer and price a fan to your duty, and to reply to you. GSTIN is asked so a quotation carries the correct tax treatment and so we can raise a valid tax invoice if you order. |
| Capability Statement request | Name, business email, company. | To email you the Capability Statement, and so our sales team knows who asked. |
| Careers | Name, email, phone, the role you want, your message, and an optional CV attachment up to 10 MB. | To consider you for a role at Jitamitra. |
| Vendor registration | Name, company, email, phone, your message, and an optional attachment up to 10 MB. | To assess you as a supplier and to contact you about supply. |
| Every form — anti-abuse | A one-way hash of your IP address, and the time of submission. The rate limiter does not keep the IP address itself — the hash is the name of a small counter file, and the file holds only timestamps. This is separate from the web server's own access logs, described below. | To rate-limit the forms so bots cannot use our mail server to send unsolicited mail to other people. The limit is three submissions an hour, counted separately for each form, so across the four forms on this site one address can make twelve. The Capability Statement form also allows at most three requests a day from one email address. |
| Every form — enquiry-source log | Company, the domain of your email, the page and campaign tag you came from. | Kept 24 months, never shared. |
| WhatsApp — the floating button on every page, and our Help Desk number | Your WhatsApp number and display name, whatever you write, and any photo, drawing or file you send us there. | To answer you on the channel you chose. The button opens WhatsApp with the words “Hi, I’d like a fan quote. Duty:” already typed — nothing reaches us until you press send. See section 4 for what this means for Meta. |
| Every page — only if you accept | Google Analytics 4 events: the page you viewed, referring page, device and browser type, and an approximate location that Google works out from your IP address. | To see which pages and which fan topics people actually read, so we write more of what is useful. See section 5. |
Datasheets and the Manufacturing & Quality Profile are direct downloads. There is no form in front of either of them, and we collect nothing when you take one.
What the web server logs on its own. Separately from any form, the web server that serves these pages keeps standard access logs — the IP address of each visitor, the page requested, the time, and the browser string. That happens on every page view, whether or not you fill anything in and whatever you choose about analytics; it is ordinary web-server behaviour and we do not switch it off. We look at those logs only to investigate abuse or a fault. We do not currently know how long our host keeps them — ask us and we will put the question to the host and tell you the answer.
Two things we do not do: we do not ask for and do not want financial account details, passwords, Aadhaar, PAN or any personal identity document through this website; and we do not knowingly collect any category of sensitive personal data. The one registration number we do ask for is your company's GSTIN, on the quote form and nowhere else. It is optional, it identifies a business rather than a person, and we ask for it for one reason — so a quotation carries the correct tax treatment and we can raise a valid tax invoice if you order. If you send us an Aadhaar or PAN number, or anything else of that kind, in an attachment, tell us and we will remove it.
We do not add addresses collected through this website to a bulk marketing list, and we do not sell, rent or trade personal data to anyone.
Outside India. Google processes analytics and font requests on infrastructure that may sit outside India, and so does Gmail — which is where the content of your enquiry ends up. WhatsApp messages sit with Meta, also outside India. Before it gets to Gmail, mail from our forms leaves through our host's outbound mail servers, which run on cloud infrastructure that may itself sit outside India. The DPDPA permits transfer of personal data outside India except to territories the Central Government restricts by notification.
We do not use your personal data to train any artificial-intelligence model, and no decision that affects you is taken automatically — a person reads every enquiry.
This website sets no cookies of its own. There is no login, no basket and no session, so there is nothing for a cookie to remember.
We store three items in your browser's local storage, all written together and only after you have answered the consent banner, and one item in its session storage on the first page you open. None of the four is a cookie. The three consent items are never sent to us or to anyone else. The session item reaches us only if you submit one of our forms, as part of that submission, and your browser deletes it when you close the tab. You can see all four for yourself in your browser's developer tools:
| Name | Type | What it does | How long |
|---|---|---|---|
| jm_consent | Local storage, first-party | Records whether you accepted or declined analytics, so the banner does not ask again. It is stored in your browser and is never sent to us or to anyone else. | Until you clear your browser storage, or change your choice. |
| jm_consent_at | Local storage, first-party | The date and time you answered, in UTC. It is written next to your choice so that a later change to this notice can be compared against when you made it. Nothing on the site reads it today. | Until you clear your browser storage; overwritten when you change your choice. |
| jm_consent_v | Local storage, first-party | Which version of the consent banner you answered — currently 1. If we materially change what the banner asks, we raise this number so your old answer is not read as an answer to a different question. Nothing on the site reads it today either. | Until you clear your browser storage; overwritten when you change your choice. |
| jm_ft | Session storage, first-party | Where your visit started: the first page you opened on this site, the name of the website that sent you there (its host name only, never the page), and any campaign tags in that first link (utm_source, utm_medium, utm_campaign). It is written on your first page view whatever you choose about analytics, because on its own it never leaves your browser. If you submit one of our forms, these values go with it as hidden fields and become part of the enquiry-source log in section 2. Nothing else reads it. | Until you close the tab. |
If you accept, the Google tag library loads and Google Analytics 4 sets these first-party cookies on jitamitrablowers.com:
| Cookie | Set by | What it does | How long |
|---|---|---|---|
| _ga | Google Analytics 4 | Tells one browser apart from another so a repeat visit is not counted as a new person. | 2 years (Google's default) |
| _ga_DV83QBDNL9 | Google Analytics 4 | Keeps session state for our specific Analytics property. | 2 years (Google's default) |
Use the cookie preferences link to bring the banner back and switch your choice at any time. If you decline after having previously accepted, we ask your browser to delete the _ga cookies at the same time. You can also clear cookies and site data for this domain in your browser settings, which has the same effect.
Event-level analytics data is retained in the Google Analytics property for 2 months, and user-level data for 14 months (the counter resets on new activity from the same user), after which Google deletes it. Aggregate reports remain.
| What | How long | Why that long |
|---|---|---|
| Quotation enquiries and the correspondence around them | For the life of the commercial relationship, and for 8 years after the last contact. | Fan enquiries come back years later; a re-order or a spare part is quoted against the original duty. Where an order resulted, tax law fixes the period. |
| CVs and job applications | 12 months from the date you applied, then deleted, unless you join us. | So we can consider you for a role that opens later. |
| Vendor registrations | For as long as you are an approved or prospective supplier. | Supplier records support purchase and quality traceability. |
| Enquiry-source log (every form) | 24 months from the month of your submission, then deleted automatically. | Two full years lets us compare which pages and campaigns bring enquiries, year on year. |
| Anti-abuse rate-limit records | A submission counts against the limit for 1 hour on the per-address counters and 24 hours on the per-email counter. The counter file itself is a different matter: it is never deleted. Expired timestamps are dropped only the next time that same hash submits, so if you use a form once and never come back, a file holding that hash and one timestamp stays in the server's temporary directory until the host clears it. | The rate limit itself only needs a sliding window. The leftover file is simply how the code behaves — we would rather write that down than round it off. |
| Web server access logs | Kept by our host on the server, not by us. We do not currently know the period and have not been given one. Ask us and we will put the question to the host and tell you what they say. | Standard web-server behaviour. The setting is not ours to make. |
| Uploaded attachments on the web server | Not retained at all — released as soon as the email is built. | See the note in section 2. |
Under the DPDPA, as a Data Principal you may ask us to:
To use any of these, email privacy@jitamitrablowers.com from the address you used with us, and tell us enough to find your record — the company name and roughly when you contacted us is usually plenty. We answer within 30 days. We may have to keep asking questions until we are satisfied you are who you say you are; that is a protection for you.
The DPDPA also puts duties on you (section 15): do not impersonate someone else when you make a request, do not suppress material information, and do not file a false or frivolous complaint.
If you are not happy with how we have handled your personal data or your request, take it to our named Grievance Officer. He reads that mailbox himself.
If we do not resolve it, you may complain to the Data Protection Board of India in the manner the Board prescribes.
What we actually do, stated plainly rather than as a promise of perfection:
No system is perfectly secure. If you find a weakness in this website, please tell us at privacy@jitamitrablowers.com before telling anyone else, and we will fix it.
This is an industrial business-to-business site. It is not directed at children, and we do not knowingly collect personal data of anyone under 18. We do no behavioural advertising and no tracking that targets an individual, so the DPDPA's specific prohibitions on tracking and targeted advertising directed at children (section 9) are not engaged. If you believe a child has sent us personal data through this site, write to the Grievance Officer and we will delete it.
When we change what we collect or who processes it, we change this page and move the version and date at the top of it. Material changes to anything you consented to will be put back in front of you through the consent banner rather than made quietly.
See also our terms of use.
This site sets no cookies of its own. Google Analytics loads only if you accept. It sets two cookies, so we can see which fan topics people actually read. Decline and no analytics loads — the site works exactly the same. What we collect →
