Privacy Policy

Effective from: 01 May 2026
Section: A | Version:1.0.2026

1. Scope and Applicability

This Privacy Policy applies to:

Visitors to our Website https://orbenergy.com/;
Customers and prospective customers;
Users who submit enquiries, requests, or applications through our website or other channels;
Any other individual whose personal data we process in connection with our Services.

This Policy does not apply to third‑party websites, applications, or services that may be linked from our website. We encourage you to review the privacy policies of such third parties separately.

2. Definitions

For the purposes of this Privacy Policy:

“Personal Data” means any data about an individual who is identifiable by or in relation to such data, as defined under the DPDP Act.
“Sensitive Personal Data or Information (SPDI)” has the meaning assigned under the SPDI Rules and includes, inter alia, financial information (such as bank account or credit card details), passwords, health data, biometric data, etc.
“Data Principal” means the individual to whom the personal data relates.
“Data Fiduciary” (or “we”, “us”) means the person who determines the purpose and means of processing personal data.
“Processing” includes collection, storage, use, disclosure, transfer, and any other operation performed on personal data.

3. Categories of Personal Data We Collect

We may collect the following categories of personal data, depending on your interaction with us:

3.1 Data Provided Directly by You

Identity and Contact Data

Name, title, company name, job title/designation
Postal address, email address, phone number, country/state/city
Government‑issued identification numbers only where required by law or for specific services (e.g., PAN, Aadhaar* – see Section 8)

Account and Access Data (if you create an account)

Username, password, profile information, preferences

Transactional and Service Data

Details of products/services purchased or enquired about
Installation, maintenance, support, or warranty information
Payment‑related information (excluding full card details if processed via secure third‑party payment gateways)

Communications Data

Enquiry forms, feedback, surveys, email communications, call recordings (where permitted and with notice), chat transcripts

3.2 Data Collected Automatically

When you access or use our website, we may automatically collect:

IP address, browser type, device identifiers, operating system, language preferences
Date and time of access, pages viewed, time spent on pages, referring URL
Cookies, web beacons, and similar technologies (see Section 7)

3.3 SPDI (Sensitive Personal Data or Information)

We generally avoid collecting SPDI unless necessary for a specific purpose and permitted by law. Where we collect SPDI, we will obtain explicit consent from you and process it strictly for the stated purpose. This may include:

Financial information (e.g., partial bank details or UPI ID for refunds/payments, where applicable)
Authentication information (passwords or PINs related to your account with us)
Any other data classified as SPDI under applicable law

We do not seek to collect any SPDI that is not required for our Services. Please do not share unnecessary sensitive information with us.

4. Legal Bases and Purposes of Processing

We process your personal data only for lawful purposes, based on one or more of the following legal bases:

Your consent;
Performance of a contract or to take steps at your request prior to entering into a contract;
Legal obligations applicable to us;
Legitimate uses as permitted under applicable law (such as security, fraud prevention, business operations).

Primary Purposes
We may process your personal data for:
1. Providing and Improving Our Products and Services

Responding to enquiries, requests, and service calls
Processing orders, installations, maintenance, and after‑sales services
Managing customer relationships and support

2. Communication and Customer Support

Sending transactional communications (order updates, service reminders, alerts)
Responding to your queries, complaints, and feedback

3. Marketing and Promotions (subject to your consent/opt‑out rights)

Sending information about our products, services, offers, newsletters
Conducting surveys, contests, and events

4. Analytics and Website Functionality

Understanding how our Website and Services are used
Improving user experience, performance, and content
Detecting and preventing security incidents or technical issues

5. Compliance, Legal and Regulatory

Complying with legal obligations under the DPDP Act, IT Act, SPDI Rules, tax and other regulations
Responding to lawful requests from authorities or courts
Establishing, exercising, or defending legal claims

5. Consent and Withdrawal

5.1 Obtaining Consent

Where required by law, we will obtain your free, specific, informed, and unambiguous consent before processing your personal data, especially for:

Direct marketing communications;
Processing of SPDI;
Any other processing activity requiring consent under the DPDP Act.

Consent may be collected via online forms, check‑boxes, or other suitable means.

5.2 Withdrawal of Consent

You may withdraw your consent at any time by:
Using the unsubscribe link in marketing emails, or
Contacting us at info@orbenergy.com with your request.

Upon withdrawal, we will cease processing your personal data for the purposes for which consent was given, except where further processing is required or permitted by law (e.g., compliance, dispute resolution).

6. Data Sharing and Disclosures

We may share your personal data with the following categories of recipients, strictly on a need‑to‑know basis and subject to appropriate contractual and security safeguards:

1. Group Companies / Affiliates

For internal administrative purposes, consolidated reporting, or support.

2. Service Providers and Business Partners

IT and cloud service providers
Payment gateways and banks
Logistics, installation, and maintenance partners
Marketing, analytics, and customer support vendors

3. Professional Advisors

Lawyers, auditors, consultants, insurers, and similar professionals.

4. Government and Regulatory Authorities

Where required under applicable law, court orders, or lawful requests.

5. Business Transfers

In connection with any merger, acquisition, restructuring, or sale of assets, your data may be transferred as part of the transaction, subject to continued protection in accordance with this Policy.

We do not sell your personal data for monetary consideration.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to:

Enable essential Website functions;
Remember your preferences;
Analyze Website performance and usage;
Improve user experience and content relevance.

You can manage or disable cookies through your browser settings. However, blocking some cookies may affect the functionality or performance of the Website.

If we use third‑party analytics or advertising tools (e.g., Google Analytics), those providers may also set cookies and collect data as per their own policies. We recommend reviewing their privacy policies separately.

8. Special Note on Aadhaar and Government IDs

We will collect and use Aadhaar, PAN, or any other government‑issued ID only where:

Required by law or regulation; or
Necessary for a specific verified purpose explained to you; and
Processed with your consent and subject to strict access controls.

We do not publicly display or disclose your Aadhaar number or other sensitive ID details, except as mandated by law.

9. Data Security

We implement reasonable security practices and procedures as required under the IT Act and SPDI Rules, including:

Technical measures such as encryption, firewalls, secure servers, and access controls;
Organizational measures such as role‑based access, employee confidentiality obligations, and regular training;
Periodic review and updating of our security practices.

While we strive to protect your personal data, no method of transmission or storage is completely secure. You are responsible for maintaining the confidentiality of any passwords and for restricting access to your devices and accounts.

10. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required or permitted by applicable law, including:

Duration of your relationship with us and a reasonable period thereafter;
Statutory or regulatory retention periods;
Limitation periods for legal claims.

Once the retention period expires, we will delete, anonymize, or otherwise dispose of the data in a secure manner.

11. Your Rights as a Data Principal

Subject to applicable law, you may have the following rights regarding your personal data:

Right to Access: To know what personal data we process about you and to obtain a copy.
Right to Correction and Updating: To request correction, completion, or updating of inaccurate or incomplete data.
Right to Deletion / Erasure: To request deletion of your personal data, where there is no overriding legitimate reason for its continued processing.
Right to Withdraw Consent: To withdraw consent at any time for processing based on consent.
Right to Grievance Redressal: To raise concerns or complaints regarding our data practices.
Right to Nominate: To nominate another individual to exercise your rights in the event of your death or incapacity, where implemented.

To exercise these rights, please write to our grievance office hp.ravindra@orbenergy.com or info@orbenergy.com. We may need to verify your identity before responding to your request. We will respond within the timeframes prescribed under applicable law.

12. Grievance Officer and Contact Details

If you have any questions, concerns, or complaints regarding this Privacy Policy or our handling of your personal data, please contact the Grievance Officer whose contact details are given below. We will acknowledge and resolve your grievance within the timelines prescribed under applicable law. Alternatively, click on this link https://www.orbenergy.com/contact-us/ and select Grievance Reporting tab and you can fill-in the form and click on the report button.

Name: HP Ravindra
Designation: General Manager – Quality
Email: hp.ravindra@orbenergy.com

13. Children’s Data

Our Website and Services are not intended for children under the age of 18. We do not knowingly collect personal data from children without verifiable parental consent where required.

If you believe that a child has provided personal data to us without appropriate consent, please contact grievance officer, and we will take steps to delete such data where required.

14. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in:

Applicable laws and regulations;
Our data processing practices;
Our business operations or Services.

The updated version will be posted on our website with the “Last updated” date. Your continued use of the Website or Services after any changes constitutes your acceptance of the revised Policy.

15. Governing Law and Dispute Resolution

This Privacy Policy is governed by and shall be construed in accordance with the laws of India. Any disputes arising out of or in connection with this Policy shall be subject to the exclusive jurisdiction of the courts at Bengaluru, Karnataka, India.