Privacy Policy

1. Introduction & scope

Angad Aviation Private Limited ("Angad Aviation", "we", "us" or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains what personal data we collect when you use our website and related services, why we collect it, how we use and share it, and the rights you have over it.

It applies to visitors, registered account holders, customers, suppliers, and anyone who contacts us or requests a quote. Please read it alongside any specific notices we provide when we collect data.

This policy is written to reflect our obligations under India's Digital Personal Data Protection Act, 2023 (the "DPDP Act") and, for individuals in the European Union / European Economic Area, the EU General Data Protection Regulation ("GDPR").

2. Who we are

Angad Aviation Private Limited is the data controller (a "Data Fiduciary" under the DPDP Act) responsible for your personal data. We operate from offices in India and France. You can find our full contact details in the "Contact us" section at the end of this policy.

3. Information we collect

We collect personal data that you provide to us directly, as well as certain data automatically when you use the site. We only collect what we need.

• Account information — when you create an account, your name, email address, and a password (stored only in hashed form).
• Enquiry & quote data — when you use our contact, request-a-quote, or quick-order forms, your name, company, email, phone number, the parts or services you are interested in, and any message you send.
• Supplier & repair data — when you register as a supplier or submit a repair request, the business and contact details, documents, and part information you provide.
• Order & transaction data — details of the quotes and orders you place with us, and related correspondence. The storefront is quote-first and does not process card payments online, so we do not collect payment-card numbers through the website.
• Data collected automatically — your IP address and approximate location (country/region) so we can show prices in an appropriate currency; your device, browser, and language; and the pages you view and actions you take on the site (log and usage data).
• Cookies and similar identifiers — see the "Cookies & similar technologies" section below.

4. Cookies & similar technologies

We use a small number of cookies and similar technologies. We do not use advertising or cross-site tracking cookies.

• Strictly necessary — sign-in/session, shopping cart, and security cookies (including cross-site request forgery protection) that make the site work. These cannot be switched off.
• Preference — remembering your selected display currency and similar choices.
• Security / anti-abuse — we use Cloudflare Turnstile to distinguish humans from bots on our forms; it may set a cookie or read limited device signals to do so.

You can control or delete cookies through your browser settings, but some parts of the site may not work properly without the strictly necessary ones.

5. How we use your data & legal basis

We use your personal data for the purposes below. For individuals in the EU/EEA, the GDPR legal basis for each purpose is shown in brackets.

• To provide quotes, process orders, and deliver our products and services (performance of a contract, or steps taken at your request before entering a contract).
• To respond to your enquiries and provide customer support (our legitimate interest in assisting you, or your consent).
• To create and manage your account and supplier/repair records (performance of a contract).
• To keep the site secure and prevent fraud, spam, and abuse, including bot detection (our legitimate interest in protecting our service and users).
• To comply with legal, tax, accounting, and regulatory obligations, including aviation-parts traceability and compliance requirements (compliance with a legal obligation).
• To send you service messages about your quotes and orders (performance of a contract, or our legitimate interest).
• To send marketing or newsletters, only where you have asked to receive them (your consent, which you can withdraw at any time).

Under the DPDP Act, where we rely on your consent we will ask for it clearly and you may withdraw it at any time.

6. Sharing & disclosure

We do not sell your personal data. We share it only as necessary with:

• Service providers who process data on our behalf, under contract and only on our instructions — including our cloud hosting provider (Amazon Web Services), our ERPNext-based business platform that stores customer, quote, and order records, our email/SMTP provider for notifications, Cloudflare for content delivery and bot protection, and our IP-geolocation provider (DB-IP) for currency selection.
• Professional advisers, auditors, and regulators where required.
• Government, law-enforcement, or other authorities where we are legally required to disclose data, or to establish, exercise, or defend legal claims.
• A successor entity in the event of a merger, acquisition, or reorganisation, subject to this policy.

7. International data transfers

We operate in both India and the EU, so your personal data may be transferred to and processed in either region, and by our service providers in other countries. Where we transfer personal data across borders — including from the EU/EEA to India — we put appropriate safeguards in place, such as standard contractual clauses and equivalent technical and organisational measures, so that your data remains protected in line with this policy and applicable law.

8. Data retention

We keep personal data only for as long as we need it for the purposes described in this policy, or for as long as the law requires (for example, tax, accounting, and aviation-compliance records must be kept for set periods). When we no longer need your data, we securely delete or anonymise it. If you close your account or ask us to delete your data, we will do so unless we are required to keep certain records.

9. Your rights

Depending on where you live, you have rights over your personal data. In most cases we will not charge you for exercising these rights, and we will respond within the timeframes set by law.

• If you are in the EU/EEA (GDPR): the right to access your data; to have it corrected or erased; to restrict or object to our processing; to data portability; to withdraw consent where we rely on it; and to lodge a complaint with your local data protection supervisory authority.
• If you are in India (DPDP Act): the right to access a summary of your data and how it is processed; to have it corrected, completed, updated, or erased; to grievance redressal; and to nominate another person to exercise your rights in the event of death or incapacity.

To exercise any of these rights, contact us using the details in the "Contact us" section below. We may need to verify your identity first.

10. Security

We use appropriate technical and organisational measures to protect your personal data, including encryption in transit (HTTPS/TLS), access controls, and hosting with a reputable cloud provider. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your data and to notify you and the authorities of any breach where the law requires.

11. Children's privacy

Our website and services are intended for businesses and professionals and are not directed to children. We do not knowingly collect personal data from anyone under the age of 18. If you believe a child has provided us with personal data, please contact us and we will delete it.

12. Third-party links

Our site may contain links to third-party websites, such as our LinkedIn page. We are not responsible for the privacy practices or content of those sites, and we encourage you to read their privacy policies.

13. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or the law. When we do, we will revise the "Last updated" date at the top of this page and, where changes are significant, take reasonable steps to let you know.

14. Contact us

If you have questions, requests, or complaints about this policy or your personal data, please contact us:

• Angad Aviation Private Limited
• Offices: Delhi, India · Paris, France
• General enquiries: info@angadaviation.com
• Sales enquiries: sales@angadaviation.com

Grievance Officer (India): for DPDP Act grievances, write to us at info@angadaviation.com and we will direct your request to our designated Grievance Officer. EU/EEA data-subject requests can be sent to the same address. If you are not satisfied with our response, you may complain to the Data Protection Board of India or to your local EU supervisory authority.