Who we are
Tankar Solutions Private Limited, CIN U62010GJ2023PTC146514, registered in Gujarat, India, with its office in South Bopal, Ahmedabad 380058. In this policy "we" and "Tankar" mean that company.
For personal data you give us through this website, Tankar is the controller, or the data fiduciary in the language of the India Digital Personal Data Protection Act 2023. When we process personal data inside a system we build or run for a client, the client is the controller and Tankar is the processor, acting on the client's written instructions under a separate data processing agreement.
Privacy and security questions reach us through the contact page.
What we collect
Information you send us. The proposal form, the contact form, the hire form and the careers application collect your name, work email, company, country and message, and optionally a phone number and an attached brief or CV. When you send a form, it also sends the page you first arrived on during that visit, the name of the website that linked you there, and any campaign tags in that link (for example utm_source), so we know which pages and campaigns bring enquiries. Nothing is stored in your browser to do this. If you book a call, the scheduling provider collects your name, email and the time you chose.
Information collected automatically. Our hosting provider records the usual server information for every request, including IP address, user agent, the page requested and the time. This is used to serve the site, to keep it available and to investigate abuse.
Analytics and marketing information. If you allow it, analytics and marketing tags set identifiers and record which pages you visited and what you clicked. The categories, the specific tags and how to change your choice are set out in the cookie policy.
We do not ask for special category data, and you should not send financial account details, health information or credentials through a form on this website.
Why we use it, and the legal basis
| What we do | Why | Legal basis under GDPR and UK GDPR |
|---|---|---|
| Answer an enquiry and prepare a proposal | To respond to you and to quote for work | Steps taken at your request before entering a contract |
| Keep a record of the enquiry in our CRM | To run the sales process and to know what was promised | Legitimate interests in managing our own business |
| Record which page and campaign an enquiry came from | To know which pages and campaigns bring enquiries | Legitimate interests in understanding our own marketing |
| Deliver and support a project | To perform the agreement | Performance of a contract |
| Keep the site available and free of abuse | Security and service continuity | Legitimate interests in protecting our systems |
| Measure how the site performs | To improve pages that are unclear or slow | Consent, where consent is required in your region |
| Show advertising and measure campaigns | Marketing | Consent |
| Process a job application | To assess you for a role | Steps taken at your request before entering a contract |
| Meet legal, tax and accounting duties | Because the law requires it | Legal obligation |
Under the India DPDP Act 2023 the corresponding basis is your consent, or the "certain legitimate uses" the Act sets out, and under the Saudi Personal Data Protection Law it is your consent or the performance of a contract to which you are a party. Where those laws apply to you, the purposes above are the same and the notice you are reading is the notice they require.
How long we keep it
| Data | Retention |
|---|---|
| Project records for a client engagement | For the life of the contract and then for the period our tax and accounting duties require |
| Analytics data | As configured in the analytics tool, and no longer than that tool's own retention setting |
When a retention period ends the record is deleted or anonymised. Backups follow their own cycle and are overwritten in turn.
Who else sees it
We use service providers to host the site, send email, store leads, run analytics and schedule calls. Each one is bound by a contract that limits it to processing on our instructions.
We do not sell personal data, and we do not share it with anyone else except where we are required to by law, or where a professional adviser such as an accountant or a lawyer needs it to do their work for us.
International transfers
Tankar is in India. If you are in the United Kingdom or the European Economic Area, personal data you send us is transferred to India, which is not covered by an adequacy decision from either the UK or the EU. Those transfers rely on the standard contractual clauses, or on the UK International Data Transfer Agreement or addendum, together with a transfer risk assessment.
If you are in Australia, we handle personal information you send us in line with Australian Privacy Principle 8, and the arrangements are recorded in the client agreement where a project is involved.
Your rights
Depending on where you are, you can ask us to:
- give you a copy of the personal data we hold about you
- correct it if it is wrong or incomplete
- delete it, where we do not have a reason to keep it
- restrict or object to how we use it, including profiling for marketing
- send it to you or to someone else in a portable format
- withdraw consent you gave, at any time, without affecting what we did before you withdrew it
Write to us through the contact page and say that it is a privacy request. We reply within one month, and we will tell you if we need longer and why. We may ask you to confirm who you are before we act, so that we do not hand your data to someone else.
If you are not satisfied, you can complain to a supervisory authority: the Information Commissioner's Office in the United Kingdom, your national authority in the European Economic Area, the Data Protection Board in India, the Saudi Data and Artificial Intelligence Authority in Saudi Arabia, or the Office of the Australian Information Commissioner in Australia. We would rather you came to us first so that we can put it right.
Automated decisions
We do not make decisions about you by automated means alone. Enquiries are scored automatically to help our sales team decide who to call first, but a person reads every enquiry and no outcome depends on the score.
Security
Tankar operates an information security management system certified to ISO/IEC 27001.
If you believe you have found a security problem with this site, tell us through the contact page rather than posting it publicly, and we will respond.
Children
This site is aimed at businesses. We do not knowingly collect personal data from children. If you believe a child has sent us personal data, write to us and we will delete it.
Changes to this policy
When we change this policy we update the effective date at the top and, where the change is significant, we say what changed. Older versions are available on request.