Privacy Policy

Srisun Polytex Private Limited is the controller of personal data collected through this company website. Ordo ERP is our internally developed enterprise resource planning system.

Browsing loads locally hosted images and fonts without advertising or analytics trackers. Our hosting provider, Vercel, processes technical connection data such as IP address, requested URL, browser information and timestamps to deliver the website and protect it against abuse. See our cookie notice for storage and security details.

If you email us or submit the optional enquiry form, we process your name, email address, message and any company or phone details you choose to provide to respond and manage the conversation. The form uses Cloudflare Turnstile for abuse prevention after you choose to open it; security processing includes network and browser information. Email and security service providers help deliver these functions. Providing enquiry details is voluntary, but we need a way to reply.

Where the GDPR applies, our bases are steps requested before entering a contract (Article 6(1)(b), where you are the prospective contracting party), legitimate interests in answering business enquiries and operating a secure website (Article 6(1)(f)), and legal obligations for records we must retain (Article 6(1)(c)). We do not add enquirers to marketing lists or make automated decisions with legal or similarly significant effects.

Enquiry information is retained while needed to respond, manage a resulting business relationship, meet record-keeping requirements or resolve a dispute. Unrelated personal details should not be included. Hosting and security logs follow the providers’ applicable retention settings; you can contact us for information about a particular record.

Where the GDPR applies, you may request access, correction, erasure, restriction and, where applicable, portability; object to processing based on legitimate interests; and withdraw any consent without affecting earlier lawful processing. We respond within one month, subject to the permitted extension for complex requests, and explain any extension. You may complain to the supervisory authority in your EEA country of residence, work or the alleged infringement.

We operate in India and use providers that may process data outside the EEA. Transfers subject to the GDPR require an applicable adequacy decision or appropriate safeguards, such as standard contractual clauses, together with any necessary supplementary measures. Contact our privacy address for details of the safeguards relevant to your data and how to obtain a copy.

Ordo ERP is an enterprise resource planning and business communications system developed and operated by Srisun Polytex Private Limited (Srisun, we, us or our), a company based in Tamil Nadu, India. This policy applies to Ordo ERP, its public pages, and its integration with the official WhatsApp Business Platform, including the WhatsApp Cloud API.

Ordo ERP may be registered with Meta as a Tech Provider to enable official WhatsApp Business Platform functionality. At present, Ordo ERP is operated for Srisun’s business and connects only to WhatsApp Business assets owned by Srisun or assets that Srisun is expressly authorised to administer. Tech Provider status does not permit us to use WhatsApp data for unrelated purposes.

This policy does not govern Meta’s or WhatsApp’s independent processing. Their own terms and privacy notices apply to information they process as platform providers.

Depending on how you interact with Srisun through Ordo ERP and WhatsApp, we may process:

• your name, business name, role, customer or supplier details, and other business contact information;
• your WhatsApp phone number, WhatsApp user identifier, profile name and related contact-directory information;
• message content, replies, captions, reactions, interactive responses, contact cards and location information that you choose to send;
• documents, images, videos, audio and other attachments, together with media identifiers, file names, MIME types and related metadata;
• approved template names, language, category, template variables and the commercial or operational context in which a template is used;
• Meta message identifiers, timestamps, conversation-window information, and sent, delivered, read or failed delivery status and error details;
• related quotations, invoices, reports, purchase or sales records, operational notifications and other ERP records associated with the communication;
• the authorised Ordo ERP user who sent, reviewed, assigned or responded to a message; and
• limited technical, security and audit information such as request time, service logs and authentication events.

We ask users not to send passwords, payment-card credentials, government identity documents, medical records or other sensitive personal data through WhatsApp unless Srisun has specifically requested it for a lawful and necessary business process.

We process the information only as reasonably necessary to:

• send quotations, invoices, work orders, reports, documents and operational notifications;
• receive and manage customer, supplier, employee and authorised stakeholder replies;
• provide customer service, sales support, procurement coordination and transaction follow-up;
• maintain an accurate business communication and document-delivery history;
• match communications with the correct ERP contact and business record;
• monitor delivery, diagnose failures, prevent abuse and secure the integration;
• comply with legal, tax, accounting, contractual, audit and dispute-resolution obligations; and
• improve the reliability and usability of Ordo ERP without using WhatsApp message content for unrelated profiling.

We process personal data for lawful business purposes under applicable Indian law, including the Digital Personal Data Protection Act, 2023 and rules brought into force under it. Depending on the context, processing may be based on your consent, your request for a service or communication, performance of a business or contractual relationship, compliance with law, or another permitted legitimate use.

Where consent is the basis for a communication, you may withdraw it using the method offered in the message, by asking us on WhatsApp, or by emailing us. Withdrawal does not affect processing already carried out lawfully and does not prevent retention required by law or for a valid business record.

We use Meta-approved message templates when the WhatsApp customer-service window is closed and follow the applicable WhatsApp Business Messaging Policy. You may ask us to stop non-essential WhatsApp messages at any time.

Access within Srisun is limited to authorised directors, employees, administrators and service personnel who need the information for their assigned duties. Ordo ERP uses authentication, role-based permissions and administrative controls to restrict access.

We may disclose or make data available to:

• Meta and WhatsApp, which operate the WhatsApp Business Platform and Cloud API;
• Vercel, which currently provides application hosting and delivery infrastructure;
• Neon, which provides the application database, and authorised storage providers used by Ordo ERP;
• Cloudflare, where the optional public enquiry form uses Turnstile for abuse prevention;
• Box or another authorised document provider when a document is stored or shared through that service;
• email, security, backup and technical support providers acting under appropriate contractual or confidentiality obligations;
• professional advisers, auditors, insurers and financial institutions where reasonably necessary; and
• government authorities, courts or regulators where disclosure is required by applicable law or a valid legal process.

Service providers may process data only to provide their contracted service, protect their systems, meet legal obligations, or as otherwise described in their applicable terms. We do not authorise them to sell WhatsApp Platform Data on our behalf.

If Ordo ERP is used to support a separately authorised business customer in the future, that business will remain responsible for its customer relationship, lawful messaging permissions and notices unless a written agreement states otherwise. Srisun will process that customer’s WhatsApp data only to provide and secure the requested Ordo ERP functionality and according to documented authorisation.

We do not access a WhatsApp Business Account without authorisation, combine one customer’s message data with another customer’s data for independent commercial use, or retain access after the relevant authorisation and lawful retention need end.

Ordo ERP stores communication records in its secured application database and may store or retrieve related documents through authorised document services. Meta also processes and temporarily stores information as part of operating the WhatsApp Business Platform.

• WhatsApp message content and media metadata are retained while needed for the active business relationship, customer service, operational history or an associated ERP record. Where no longer linked to such a need, we target deletion or anonymisation within 24 months after the last relevant interaction.
• Communications attached to quotations, invoices, reports, contracts, accounting entries or legal records may be retained with the underlying record for the applicable statutory, contractual, audit or dispute period.
• Delivery diagnostics and error information are ordinarily retained for no longer than 12 months unless needed to investigate an incident or dispute.
• Deletion-request and identity-verification records may be retained for up to three years to demonstrate compliance and prevent misuse.
• Residual copies may remain in encrypted or access-controlled backups until the normal backup rotation completes.

We may retain information for longer where required by law, a court order, taxation or accounting rules, fraud prevention, security investigation, establishment or defence of legal claims, or a documented legal hold.

We use administrative, technical and organisational safeguards appropriate to the nature of the information. These include HTTPS/TLS in transit, authenticated ERP access, role-based permissions, restricted administrative functions, protected credentials and secrets, signed WhatsApp webhook verification, request validation, rate limiting, audit information, backups and provider security controls.

No internet service can guarantee absolute security. We review material incidents and take reasonable steps to contain, investigate and notify affected persons or authorities where applicable law requires it.

Meta, Vercel, Neon, Cloudflare, Box and other service providers may process or store information in India or other countries where they operate. Where data is processed outside India, we use the provider’s contractual, organisational and technical safeguards and comply with applicable Indian restrictions on cross-border processing.

Subject to applicable law and relevant exemptions, you may request a summary of personal data we process, correction or completion of inaccurate data, erasure of data no longer lawfully required, withdrawal of consent, and grievance redressal. You may also exercise any right to nominate another individual that becomes applicable under Indian data-protection law.

Email info@srisunpolytex.com with enough information for us to identify the relevant record. We may reasonably verify your identity or authority before disclosing, correcting or deleting data.

Detailed deletion instructions are available on our Data Deletion page. A valid request will be completed or the relevant data anonymised unless continued retention is required by law or another permitted purpose described in this policy.

Ordo ERP is a business system and is not directed to children. We do not knowingly use the WhatsApp integration to target, profile or solicit children. A parent or lawful guardian who believes a child’s data was provided to us may contact us for review and deletion.

We may update this policy when Ordo ERP functionality, service providers, Meta requirements or applicable law changes. The revised page will show a new effective date. For a material change, we will provide additional notice through Ordo ERP, our public website, email or WhatsApp as appropriate. Where fresh consent is legally required, we will request it before relying on the changed purpose.

Privacy questions, rights requests and grievances should be sent to info@srisunpolytex.com. Please use the subject Srisun Privacy Request and include a concise description and enough information to locate the relevant record. Include a WhatsApp number only if your request concerns WhatsApp data.

This policy is governed by the laws of India. Subject to mandatory legal rights and applicable statutory forums, disputes relating to this policy are subject to the courts having jurisdiction in Dindigul District, Tamil Nadu, India.