GDPR Policy

QSTANDARDS GLOBAL PVT. LTD. is committed to protecting the privacy and personal data of individuals in accordance with the General Data Protection Regulation (EU) 2016/679 ('GDPR'). This GDPR Policy outlines how we collect, use, process, store, and safeguard personal data of individuals located in the European Union (EU) and European Economic Area (EEA).

---

Data Controller

For the purposes of GDPR, QSTANDARDS GLOBAL PVT. LTD. acts as the Data Controller for personal data collected through our website, business communications, and professional engagements.

---

Personal Data We Collect

We may collect and process the following categories of personal data:

• Personal identification information such as name, job title, and company name
• Contact details including email address, telephone number, and business address
• Business and transactional information including inquiries, quotations, orders, and related documentation
• Technical data such as IP address, browser type, device information, and website usage statistics
• Communication records including emails, contact forms, and correspondence

---

Lawful Basis for Processing

We process personal data only where permitted by GDPR, based on one or more of the following lawful bases:

• Consent provided by the data subject
• Contractual necessity to perform or enter into a contract
• Legal obligation to comply with regulatory or statutory requirements
• Legitimate interests related to our business operations, provided such interests do not override the rights of the data subject

---

Purpose of Data Processing

Personal data may be processed for the following purposes:

• Responding to inquiries and providing requested information
• Managing business relationships, contracts, and transactions
• Fulfilling regulatory, quality, and compliance obligations
• Improving our website, services, and customer experience
• Internal record keeping and administrative purposes

---

Data Sharing and International Transfers

QSTANDARDS GLOBAL PVT. LTD. does not sell, rent, or trade personal data. Personal data may be shared only with:

• Authorized service providers and business partners acting under confidentiality and data processing agreements
• Regulatory authorities, legal bodies, or law enforcement agencies where required by law

Where personal data is transferred outside the EU/EEA, appropriate safeguards such as Standard Contractual Clauses (SCCs) or other GDPR-approved mechanisms are implemented.

---

Data Retention

Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected or to meet legal and regulatory requirements. Once data is no longer required, it is securely deleted or anonymized.

---

Data Subject Rights

Under GDPR, data subjects have the following rights:

• Right to access their personal data
• Right to rectification of inaccurate or incomplete data
• Right to erasure ('right to be forgotten'), subject to legal obligations
• Right to restrict or object to processing
• Right to data portability
• Right to withdraw consent at any time
• Right to lodge a complaint with a relevant supervisory authority

Requests to exercise these rights will be handled promptly and within the timelines specified under GDPR.

---

Data Security

We implement appropriate technical and organizational measures to ensure the security, confidentiality, and integrity of personal data, protecting it against unauthorized access, alteration, disclosure, or destruction.

---

Cookies and Tracking Technologies

Our website may use cookies and similar technologies to enhance user experience and analyze website performance. For further details, please refer to our Privacy Policy.

---

Changes to This GDPR Policy

QSTANDARDS GLOBAL PVT. LTD. reserves the right to update or modify this GDPR Policy at any time to reflect changes in legal requirements or business practices. Any updates will be effective immediately upon publication on our website.