Effective date: 22 October 2026. This policy covers the Pureflow Bio website, project enquiries and our website email application, Pureflow Bio Website Email.
1. Who we are and how to contact us
Pureflow Bio is operated by Harish Kumar Thakur, sole proprietor. Our GST registration records the trade name Pureflow Bio and GSTIN 29AGSPT2834R1Z5. Our principal business address is No. 618, 2nd Floor, Vinayaka Layout BDA 80ft Road, Nagarbhavi, Bengaluru, Bengaluru Urban, Karnataka 560072, India. Our additional business location is Industrial Plot No. 248, DIC Layout, Hebbal Industrial Area, Mysuru, Karnataka 570016, India.
For privacy questions, correction or deletion requests, withdrawal of consent, or complaints, contact the proprietor through info@pureflowbio.com with the subject “Privacy request”, or write to our principal business address above.
2. Information you provide and technical information
Our enquiry forms request your name, email address, enquiry category and project requirements. You may also provide your company or organisation, phone number and project location. Correspondence may include drawings, site information, quotations and other details you choose to share with us.
Our website hosting and security systems process technical information such as IP addresses, request times, browser information and security events to deliver pages, diagnose faults and prevent misuse. Administrator login information is used to manage authorised access to WordPress; ordinary visitors do not need a Google account to browse or submit an enquiry.
Please share only information needed for your request. Do not send passwords, payment-card details, identity documents, medical information or other sensitive personal information through the general enquiry form. Obtain permission before providing another person’s details.
3. How we use information
We use your information to answer enquiries, understand project requirements, prepare quotations, arrange requested discussions, supply agreed equipment and services, and administer customer relationships. Relevant records also support website security, dispute handling and applicable legal obligations.
Consent to an enquiry allows us to respond about that enquiry; it does not subscribe you to unrelated marketing. If we request consent for another purpose, we will explain that purpose separately. You can withdraw consent by contacting us, subject to information we must retain or process for another lawful reason.
4. Website email and Google account data
Pureflow Bio Website Email uses WP Mail SMTP and the Google Gmail API to send website-generated messages through our authorised business Google account. This includes enquiry notifications, customer acknowledgements and operational website messages. The connection is authorised by our account administrator, not by website visitors. It does not offer a service for accessing visitors’ Gmail accounts.
The email integration processes the connected account’s email identity, authorisation tokens and the sender, recipient, subject and message content needed for email delivery. Connection credentials and tokens are stored in the website’s configuration/database for the plugin to maintain authorised sending access. Messages and their contents are processed by Google and may remain in the business mailbox. Authorised business personnel can read enquiry correspondence to handle your request; technical administrators may access configuration or diagnostic information when maintaining the service.
Google account information obtained by this integration is used for the email service and its security and troubleshooting. It is not used for advertising, sold, or used to train general-purpose artificial intelligence models. Our use and transfer of information received through Google APIs will comply with the Google API Services User Data Policy, including its Limited Use requirements.
The account administrator can revoke access in Google Account permissions or disconnect WP Mail SMTP. Revocation stops future authorised API access but does not automatically erase messages already delivered or records that must be retained. Contact us to request deletion of enquiry information. Website forms can experience delivery failures; if you do not receive a response, contact our business email directly.
5. Service providers and sharing
Our WordPress website is hosted by Hostinger. Contact Form 7 handles enquiry forms, with a honeypot spam-protection plugin; WP Mail SMTP connects the email service to Google. Wordfence provides website security functions. LiteSpeed Cache and QUIC.cloud optimise public website images and page assets; image optimisation sends the relevant published image files to QUIC.cloud for processing. These services process information needed to perform their respective functions. We may share relevant project details with suppliers, installers or professional advisers where needed to handle your request or deliver an agreed project, limiting disclosure to the purpose involved. Information may also be disclosed where required by law or necessary to protect legal rights.
We and our providers may process information outside India. Provider infrastructure, account settings and applicable contractual and legal requirements determine where processing occurs. This policy does not promise that all information stays in India.
6. Cookies, embedded content and external services
WordPress and site plugins can use cookies or similar browser storage for administrator authentication, security and website functionality. Cookies used by signed-in administrators differ from those encountered by ordinary visitors. You can inspect, delete or block cookies in your browser; blocking some storage may affect relevant functions.
Our Contact page offers an optional Google Maps embed. It is not loaded until you click “Load Google Map”. When you choose to load it, its provider can receive your IP address, browser details and the page request, and may use cookies under its own policies. The site also links to WhatsApp and social-media services; opening those links or contacting us through them involves the relevant provider’s data practices. See Google’s Privacy Policy for Google services.
Use Manage consent on the website to accept or reject optional cookies or choose your preferences. Essential functionality remains enabled. We use Google Analytics through Site Kit to understand website visits and successful enquiry submissions; analytics processing follows the configured consent choices. Complianz stores your consent preferences and respects supported Do Not Track and Global Privacy Control signals. Administrator-only storage differs from visitor storage. You may change your choice using Manage consent. Google Maps remains a separate optional, click-to-load feature: Close Google Map removes the embed, and reloading the page returns it to the unloaded state. Closing the map does not erase cookies Google has already set; these can be managed in your browser.
7. Retention and deletion
We retain personal information for the enquiry, project, service, security or legal purpose for which it is needed. Our policy target for enquiries that do not become orders is deletion or anonymisation within 12 months of closure or the last meaningful project communication, whichever is later. This requires manual review; submitting a form does not start an automatic deletion timer.
Customer, contractual, warranty and accounting records may need longer retention to complete obligations, meet statutory requirements or handle claims. Relevant security records and privacy-request evidence may be retained for incident handling, accountability and applicable legal duties. A documented legal requirement or dispute may delay deletion of the records concerned.
Copies may exist in email, working files and restricted recovery backups. Deleting a website record does not automatically delete every copy. Provider backup and log lifetimes depend on the service configuration; we do not promise a uniform automatic expiry across all systems. When you request deletion, we will assess the relevant copies and explain any necessary retention or recovery-backup limitations.
8. Security and your choices
We use HTTPS for the website, authenticated administration and website security tools. Access to personal information should be restricted to authorised people who need it for their work. No website, email or storage system can guarantee complete security.
You may ask about the information we hold, request correction or deletion, withdraw consent, or raise a complaint using the privacy contact above. We may request proportionate verification of your identity before disclosing or changing information. Do not send identity documents unless we request them through an appropriate process. We will respond in accordance with applicable law and explain relevant limits or further complaint routes. Withholding essential enquiry details may prevent us from responding or preparing a quotation.
9. Children and updates
The website is intended for business and project enquiries and is not directed at children under 18. If you believe a child has supplied personal information, contact us so we can review it and take appropriate action.
We may update this policy as our website, services or legal obligations change. The effective date above identifies the current version. Material changes to the use of information will be communicated, and fresh consent sought, where required.