Privacy Policy

SIRI Electromotive Private Limited ("SIRIEM", "we", "us" or "our") respects the privacy of individuals who visit www.siriem.com, submit enquiries, or use website-enabled services. This Privacy Policy explains how SIRI processes digital personal data in connection with its website and related digital interactions. Where SIRI determines the purpose and means of processing, it acts as a Data Fiduciary for purposes of the Digital Personal Data Protection Act, 2023 ("DPDP Act").

Depending on the interaction, SIRI may process name, organisation, job title, email address, telephone number, location, correspondence, guidance or consultation requests, project information, IP address, browser and device information, timestamps, referring pages, pages viewed, security events, cookie identifiers, and consent records. Where website-linked services are enabled, SIRI may also process account identifiers, authentication records, transaction references, support information, CMS usage data, diagnostics, or telemetry associated with an identifiable account.

Personal data may be provided directly through contact forms, enquiries, registrations, subscriptions, account transactions, or support requests; collected through necessary website information and lawfully enabled analytics; or received from an organisation, channel partner, event organiser, or other legitimate business source.

SIRI may process personal data to respond to enquiries and quotation requests; provide, administer and support products and services; manage customers, supplier and partner relationships; operate and secure websites and portals; authenticate users; prevent fraud, misuse and cyberattacks; measure website performance where lawfully enabled; send requested or consent-based communications; comply with commercial, accounting, tax, regulatory, security and recordkeeping obligations; and establish, exercise or defend legal claims.

Where SIRI relies on consent, the associated notice will identify the personal data and specified purpose and secure a clear affirmative action. Consent may be withdrawn through an accessible mechanism. SIRI may also process personal data where processing is permitted by another applicable statutory ground, specified legitimate use or legal requirement.

SIRI seeks to collect only personal data reasonably necessary for the specified purpose and to keep relevant personal data accurate and complete where it is likely to be used to make a decision affecting the Data Principal or disclosed to another Data Fiduciary.

SIRI may disclose personal data on a need-to-know basis to authorised personnel, appropriate affiliates, hosting, cloud, cybersecurity, CRM, communications, support and professional-services providers, payment processors where applicable, necessary business partners, and regulators or authorities where required or permitted by law. Processors acting for SIRI should be subject to appropriate contractual confidentiality, security, purpose-limitation, deletion/return, and incident-notification obligations.

SIRI may use service providers whose systems or personnel are outside India. Such processing will be managed in accordance with the DPDP Act, applicable rules, restrictions notified by the Central Government and other applicable Indian law.

SIRI will retain personal data only for as long as reasonably necessary for the purpose for which it was processed, applicable legal or regulatory obligations, audit, dispute resolution, or legal claims, and will thereafter erase or anonymise it subject to lawful retention exceptions. Applicable ICT security logs will be retained consistently with CERT-In requirements.

SIRI will implement reasonable technical and organisational safeguards proportionate to risk, including access control, authentication, least privilege, encryption in transit, secure configuration, vulnerability and patch management, logging and monitoring, backup and recovery, vendor security controls and incident-response procedures.

SIRI will maintain procedures to identify, contain, investigate, remediate, and document personal data breaches and will make notifications to affected Data Principals, the Data Protection Board of India, CERT-In and other authorities where and when required by applicable law.

Subject to the applicable provisions of the DPDP Act and their commencement, Data Principals may have rights to obtain information about processing, seek correction, completion, updating or erasure, withdraw consent where applicable, use SIRI's grievance-redressal mechanism and make nominations to the circumstances recognised by law. SIRI may apply proportionate identity verification and lawful exceptions.

The public website is directed principally to businesses, professionals and adult users and is not intended to solicit personal data from children. Where SIRI knowingly processes personal data of a child in a consented context, SIRI will apply the requirements applicable under law unless an exemption applies.

SIRI uses or may use cookies and similar technologies as described in the Cookie Policy. Non-essential technologies should be activated only consistently with the applicable notice and recorded user choice where consent is required.

SIRI may update this Privacy Policy to reflect legal, regulatory, technological, or business changes. The current version will identify its effective or last-updated date. Material changes affecting consent-based processing will be handled with appropriate notice and, where required, fresh consent.

Data Principal requests and privacy grievances may be submitted to PRIVACY@siriem.com or to the Nodal Officer: SIRI Electromotive Private Limited, 51, 7th Floor, Alto Fort No. 134, Mayor Premises, Road, Opp: SSVS College, Wadala, Mumbai, Maharashtra – 400031, India.