Privacy
Privacy notice
Who we are
CRS Corporation (“CRS”, “we”) runs this website and decides how the personal data collected here is used. We are the Data Fiduciary for that data.
What we collect and why
We collect personal data only when you send an enquiry. We use it only to respond to your enquiry and follow it up: calling you, arranging a site visit or water test, and sending a proposal. We don’t sell it, and we don’t use it for unrelated marketing.
| Data | Why we need it | Required? |
|---|---|---|
| Name | To address you and identify your enquiry | Yes |
| Phone number | To call or WhatsApp you about your enquiry | Yes |
| City / site location | To judge feasibility, site visits and which team responds | Yes |
| Type of customer (e.g. industrial, residential) | To route your enquiry to the right person | Yes |
| Email address | To reply by email, if you prefer | Optional |
| Company / organisation | To prepare a proposal for the right entity | Optional |
| Solution you’re interested in, and your message | To understand your requirement | Optional |
| Preferred contact method | To contact you the way you choose | Yes |
| Consent record (date, time, notice version) | To show you gave consent, as the law requires | Automatic |
| Security data: one-way IP fingerprint, browser type, bot-check result | To block spam and abuse of the form | Automatic |
| Your visit before the enquiry: pages and sections viewed, buttons clicked, device type, country, and the website or ad that brought you (including Google’s ad click ID) | To see which of our pages and campaigns help customers find what they need, and to measure our advertising | Automatic (not collected if your browser sends Global Privacy Control or Do Not Track) |
We don’t store your raw IP address, and we don’t set advertising or tracking cookies.
Website statistics
To understand how the website is used, we count visits without cookies. Your browser keeps a random visit number in its session storage for as long as the tab is open; when you close the tab it is gone. With it we record which pages and sections were viewed and which buttons were clicked, plus device type and country. On its own this does not identify you. It is linked to you only if you send an enquiry during that visit, so that our team can see what you looked at. If your browser sends a Global Privacy Control or Do Not Track signal, we don’t record your visit at all. We also use Cloudflare Web Analytics, which counts page views and page speed without cookies and without collecting personal data.
Your consent
We process your enquiry details on the basis of the consent you give by ticking the box on the enquiry form. The box is never pre-ticked. You can withdraw consent at any time, as easily as you gave it. Once withdrawn, we stop contacting you. Withdrawal doesn’t affect anything we lawfully did before it.
Who we share it with
Only service providers that run this website for us, acting on our instructions (Data Processors):
- Cloudflare, Inc.: website hosting, the database storing enquiries, and spam protection (Turnstile).
- Resend: delivers the internal email that tells our team about your enquiry.
- Zoho Corporation: our customer relationship management (CRM) system (Zoho CRM, India data centre), where our sales team tracks and follows up your enquiry.
If your enquiry concerns a product made by our manufacturing partner Surya RO Systems Pvt. Ltd., we may share the details needed to design, quote or install your plant (name, site location, requirement) with them, and only for that purpose.
These providers may store data on servers outside India. We use providers with recognised security practices.
How long we keep it
Water treatment plants are long-life purchases, so customers often come back to an enquiry years later. We therefore keep enquiry details for up to 48 months from the date of your enquiry, after which they are deleted automatically. Every six months we review open enquiries so that active ones are followed up and inactive ones are closed. If you ask us to delete your data sooner, we will, unless a law requires us to keep it.
Visit records are deleted after 400 days. If a visit is linked to an enquiry, it is deleted together with that enquiry.
As the DPDP Rules, 2025 require, we keep a log of how personal data was processed (for example “enquiry received”, “team notified”, “deleted on request”) for at least one year. This log holds reference numbers, not your contact details.
How we protect it
Data is encrypted in transit (HTTPS) and at rest. Access to enquiry data is limited to authorised CRS staff, who sign in with a one-time code sent to their registered email address. If a personal data breach occurs, we will inform you and the Data Protection Board of India as the law requires.
Your rights
Under the DPDP Act you can:
- get a summary of the personal data we hold about you and how we have used it;
- have inaccurate or incomplete data corrected or updated;
- have your data erased when it is no longer needed for the purpose you gave it for;
- withdraw your consent;
- nominate another person to exercise your rights if you die or become incapacitated;
- have a grievance about our handling of your data resolved.
Make a request online, or contact our Grievance Officer (below). We confirm receipt immediately and aim to respond within 30 days, and in any case within the 90 days the DPDP Rules allow. To protect you, we may first confirm your identity, for example by calling the number you gave us.
Grievance Officer: contact for privacy questions
Grievance Officer, CRS CorporationEmail: customer.support@crscorporation.com
Phone / WhatsApp: +91 90062 54077
If you are not satisfied with our response, you can complain to the Data Protection Board of India.
Children
This website is for businesses and adults. If you are under 18, please ask a parent or guardian to contact us for you.
Language
This notice is also available in हिन्दी (Hindi). For another language listed in the Eighth Schedule to the Constitution, contact the Grievance Officer.
Changes to this notice
We update the version date above whenever this notice changes. Each enquiry records the version that was in force when it was sent.