Privacy Policy

Arial Engineering Services ("AES", "we", "us", "our") is a premium HVAC and MEP engineering, consulting, and contracting company established in 2006. We have delivered HVAC and MEP building services to residential, commercial, institutional, healthcare, and industrial clients across India for over 19 years.

This Privacy Policy explains how we collect, use, store, share, and protect personal data in connection with our website (arialengineering.com), business operations, client engagements, and the services we provide. It also explains the rights available to you under the Digital Personal Data Protection Act, 2023 (DPDPA).

We collect personal data only to the extent necessary to deliver our services, maintain business relationships, and comply with legal obligations.

Via our website and enquiry forms

• Full name, email address, and mobile or telephone number
• City or location, property type, and product or service enquired about
• Project details submitted through our quotation, careers, or contact forms - such as system type, service required, and approximate area or tonnage
• Resume, floor plans, or drawings you choose to upload with an application or enquiry
• Technical data: IP address, browser type, pages visited, and session duration (via analytics tools)

During client and project engagements

• Business name, designation, and contact details of authorised representatives
• Project site address and building or facility details relevant to system design
• Billing and payment details necessary to process invoices and contracts

During recruitment

• Name, contact details, address, and work experience submitted through our careers page
• Resume and any supporting documents you choose to share with us

We use the personal data we collect for the following purposes:

• To respond to enquiries, prepare quotations, and provide requested information about our services
• To design, execute, and support HVAC and MEP projects, including AMC and service contracts
• To process job applications and evaluate candidates for open roles
• To communicate updates, invoices, and service-related information to clients
• To improve our website, services, and customer experience
• To comply with applicable legal, tax, and regulatory obligations

We do not sell your personal data to third parties, and we do not use your data for purposes unrelated to those described in this policy without seeking your consent.

Under the DPDPA, we process your personal data on one or more of the following grounds:

• Consent - where you have voluntarily submitted information through our website forms or provided it directly to us
• Contractual necessity - where processing is required to deliver a service or fulfil a contract you have engaged us for
• Legal obligation - where we are required to retain or disclose data to comply with applicable law
• Legitimate use - for specified purposes such as recruitment, where you have voluntarily provided your information for that purpose

We do not sell or rent personal data. We may share personal data in the following limited circumstances:

• OEM and service partners - where necessary to fulfil equipment warranty, installation, or service commitments (for example, with Mitsubishi Electric, LG, or Hisense as part of an active project)
• Service providers - vendors who support our operations, such as IT hosting, email delivery, and payment processing, bound by confidentiality obligations
• Legal and regulatory authorities - where required by law, court order, or governmental request
• Professional advisors - such as auditors or legal counsel, where necessary and under confidentiality obligations

We do not knowingly transfer personal data outside India except where a service provider's infrastructure requires it, and in such cases we take reasonable steps to ensure equivalent protection.

We retain personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by applicable law:

• Website enquiry and quotation form submissions: up to 24 months from the date of last contact, unless a project or client relationship develops
• Client and project records: for the duration of the engagement plus the period required under applicable tax, contract, and warranty laws
• Job applications and resumes: up to 12 months from the date of submission, unless you are engaged as an employee

Once the applicable retention period expires, we securely delete or anonymise the data, unless a longer retention period is required by law.

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or disclosure. These include access controls on our systems, secure handling of files submitted through our website, and limiting data access to personnel who need it to perform their role.

No method of transmission or storage is completely secure. In the event of a personal data breach that is likely to affect you, we will notify affected individuals and the relevant authority as required under the DPDPA.

As a Data Principal under the DPDPA, you have the following rights regarding your personal data:

• Right to Access - request a summary of the personal data we hold about you and how it is being processed
• Right to Correction - request correction of inaccurate or incomplete personal data
• Right to Erasure - request deletion of your personal data where it is no longer necessary for the purpose it was collected
• Right to Withdraw Consent - withdraw consent for processing at any time, where processing was based on consent
• Right to Grievance Redressal - raise a complaint with our Grievance Officer, and escalate to the Data Protection Board of India if unresolved
• Right to Nominate - nominate another individual to exercise these rights on your behalf in the event of death or incapacity

To exercise any of these rights, please contact our Grievance Officer using the details in Section 11. We will respond to all verified requests within 30 days.

Our website may use cookies and similar tracking technologies to understand site usage and improve user experience. These may include essential cookies required for the website to function, and analytics cookies that help us understand how visitors interact with our site.

You can control or disable cookies through your browser settings. Disabling certain cookies may affect the functionality of some parts of our website.

Our services are directed at businesses, institutions, and adult consumers. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that we have inadvertently collected data from a minor without verifiable parental or guardian consent, we will take steps to delete it.

In accordance with the DPDPA, we have designated a Grievance Officer / Data Protection Officer to address questions, concerns, and requests regarding your personal data.

We aim to acknowledge all grievances within 7 days and resolve them within 30 days of receipt.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the effective date shown at the top of this document
• Post the revised policy on our website at arialengineering.com
• Notify existing clients where changes materially affect their rights

We recommend reviewing this Privacy Policy periodically. Your continued use of our services after any changes constitutes your acknowledgement of the updated policy.