Privacy Policy & Data Protection Statement

1. Introduction and Data Controller Overview

Palpatchrankit Appliances Ltd. ("Palpatchrankit", "we", "our", or "us"), registered under company number 14892019 in England & Wales, operates the digital portal located at palpatchrankit.hair. We take our obligations as a data controller seriously and maintain transparent technical standards to safeguard user privacy.

2. Categories of Information We Collect

We may collect, process, and store the following categories of information:

• Voluntarily Provided Information: Full names, contact telephone numbers, business or personal email addresses, and narrative descriptions submitted via our contact inquiry forms.
• Technical and Device Telemetry: Anonymized Internet Protocol (IP) addresses, browser family and version, operating system identifiers, screen resolution, referer headers, and timestamps of page interactions.
• Cookie Identifiers: Minimal alphanumeric tokens placed on your terminal equipment to preserve interface preferences and validate user sessions.

3. Legal Bases for Processing Under UK & EU GDPR

We process personal data solely in accordance with Article 6 of the UK/EU GDPR under the following lawful conditions:

• Consent (Art. 6(1)(a)): When you provide clear consent for non-essential analytics and functional cookies via our cookie consent interface.
• Contractual Performance (Art. 6(1)(b)): When processing is necessary to respond to your technical support request or commercial consultation inquiry.
• Legitimate Interests (Art. 6(1)(f)): When processing is strictly required to detect security threats, prevent distributed denial of service (DDoS) vectors, and optimize page load speeds.

4. Third-Party Data Processors and Service Providers

We do not sell, lease, or monetize personal user records. We may share data with vetted third-party infrastructure providers who act strictly as data processors under binding Data Processing Agreements (DPAs):

• Hosting infrastructure and edge Content Delivery Networks (CDNs) providing encrypted TLS 1.3 edge endpoints.
• Transactional email relay systems employed to route contact inquiries securely to our support department.

5. Data Retention Schedules

Contact inquiries and associated correspondence are retained for a maximum duration of 24 months following the resolution of the support ticket, after which records are permanently purged or anonymized. Server access log files containing truncated IP strings are overwritten on a rolling 30-day cycle.

6. Your Statutory Rights Under GDPR and CCPA

Depending on your geographic residency, you maintain the following legally enforceable rights:

• Right of Access: Obtain confirmation and a copy of any personal data we hold concerning you.
• Right to Rectification: Request correction of inaccurate or incomplete personal records.
• Right to Erasure ("Right to be Forgotten"): Request permanent deletion of your data when retention is no longer necessary.
• Right to Restriction and Objection: Object to processing carried out under legitimate interest grounds.
• CCPA Non-Discrimination: California residents will never receive degraded service or altered pricing for exercising privacy rights.

7. Data Protection Officer (DPO) Contact Details

For all statutory data subject access requests (DSARs), formal privacy inquiries, or deletion demands, please direct your communication to our designated Data Protection Officer: