Privacy Policy
What this website collects, where it goes, and what you can ask us to do about it. In plain language, because a policy nobody can read protects nobody.
Last updated: 7 October 2026
1. Who we are
This website, www.topsailappliances.com, is operated by Topsail Appliances Pvt. Ltd., a company incorporated in India, with its factory and office at Gala No 27 to 32, Srv No 295/1, RCC Industrial, Abhay Industrial Hub, Naroli, Silvassa, Dadra & Nagar Haveli 396235, India.
Under the Digital Personal Data Protection Act, 2023 we are the Data Fiduciary for personal data collected through this website. If you are in the European Economic Area or the United Kingdom, we are the controller for the purposes of the GDPR and UK GDPR.
You can reach us about anything on this page at prakash@topsailappliances.com or +91 9315150049.
2. The short version
We would rather you read all of it, but here is the honest summary:
- There are no user accounts, no logins and no passwords on this site.
- We sell nothing online and never take payment or card details here.
- There is one form on the site, the enquiry form on the contact page.
- Enquiries are relayed into a Google Sheet and an email inbox we control.
- We run product analytics, including session replay, to see which pages actually bring in enquiries. Clause 6 explains exactly what that captures.
- We run no advertising pixels, no retargeting and no data brokers. We do not sell or rent personal data to anyone.
3. What we collect
Two things, and nothing else.
- What you type into the enquiry form: your first name, last name and email address, which are required, and your phone number, company name, your role and your message, which are not. The form also has a hidden field that bots tend to fill in. If it is filled, the submission is discarded and never reaches us.
- What your browser reveals as you move around the site: pages viewed, the page that referred you, links and buttons clicked, your approximate location inferred from your IP address, and your device, browser and screen size. Our hosting provider also keeps ordinary server request logs, which include IP addresses, for operations and security.
4. What we do not collect
We never ask for, and do not want, your Aadhaar number, PAN, passport or any other government identifier, your bank, UPI or card details, or any health, biometric or financial information. Please do not put any of that in the enquiry form. If you need to send us commercially sensitive product information, say so first and we will sign a non-disclosure agreement before we go any further.
5. Where your enquiry actually goes
When you submit the enquiry form, your browser posts it to a function on our own domain. That function adds a shared secret and forwards the submission to a Google Apps Script web app we control. The script does two things: it appends your enquiry as a row in a Google Sheet, and it emails the same details to us with your address set as the reply-to.
So in practice Google processes your enquiry on our behalf, through Apps Script, Sheets and Gmail, inside our own Google Workspace account. Access to that sheet and that inbox is limited to named people at Topsail. Nothing from the form is stored in a database of our own, because we do not run one.
We use what you send to answer you, to prepare quotes, specifications and samples, and to keep a record of the commercial conversation. We do not add you to a marketing list without asking.
6. Analytics, and the /ingest path you may notice
We use PostHog for product analytics. Requests to it are routed through a path on our own domain rather than sent to PostHog's domain directly, because privacy extensions and ad blockers routinely break analytics that call a known analytics hostname, and we would rather have accurate numbers than guesses. We want to be straight about what that means: the data still goes to PostHog Inc, into our project on PostHog's United States cloud. Routing it through our domain changes who the request appears to go to, not who receives it.
PostHog gives each visitor a random identifier and stores it in a cookie on our own domain. That identifier is not your name, and we have no way to turn it into your name unless you separately write to us. Because nobody logs in here, every visitor is anonymous to us.
Beyond page views, three things are worth naming explicitly. PostHog's automatic click capture records interactions with elements on the page. We send one event of our own when somebody clicks a WhatsApp link, noting which page or article the click came from. And session replay is enabled, which reconstructs a visit as a video of mouse movement, scrolling and clicks. Text you type into form fields is masked by PostHog's default settings and we have not turned that masking off, so replays do not show the contents of what you type. Browser console output is also captured, which is a diagnostic feature and is not meant to collect anything about you.
Analytics is switched off on our internal preview and test deployments and when the site is run locally, so only genuine visits are measured.
If you would rather not be measured, a tracker-blocking browser extension will stop all of it, and you are welcome to write and ask us to delete the analytics records associated with you. We should also say plainly that this site does not currently act on the Do Not Track browser signal.
8. WhatsApp, phone and email
WhatsApp is the main way people reach us, so it is worth being precise. Clicking a WhatsApp button here hands you to WhatsApp, which is operated by Meta. From that moment Meta's own privacy policy governs the conversation, your profile and your phone number, not this policy. We record that a WhatsApp link was clicked and which page it was clicked from. That record does not contain your phone number. We only ever see your number if and when you actually send a message.
If you call or email instead, we keep the ordinary record of correspondence that any business keeps.
9. Why we are allowed to process your data
Under the Digital Personal Data Protection Act, 2023 we process what you type into the enquiry form on the basis of the consent you give by submitting it, for the specific purpose of answering that enquiry and pursuing the commercial discussion that follows. You can withdraw that consent at any time, as described below. Server and security logs are processed as a legitimate use, for keeping the site running and defending it from abuse.
If you are in the European Economic Area or the United Kingdom, we rely on Article 6(1)(b) of the GDPR for steps taken at your request before entering a contract, and Article 6(1)(f) for site security and for understanding in aggregate how the site is used.
10. How long we keep it
Enquiries stay in our sheet and our inbox for as long as the commercial relationship, or the prospect of one, is live, and after that for as long as Indian law requires us to keep business records, which for anything that becomes an actual transaction can be several years. If an enquiry goes nowhere, you can ask us to delete it sooner and we will.
Analytics events and session replays are kept according to the retention period set on our PostHog project and are not kept indefinitely. Server logs held by our hosting provider are kept for a short operational period.
12. Data leaving India
The providers above store and process data on servers outside India, mainly in the United States. The Digital Personal Data Protection Act, 2023 permits transfers outside India other than to territories the Central Government has specifically restricted, and we will stop using any provider that becomes non-compliant. For visitors in the European Economic Area or the United Kingdom, these transfers rely on the standard contractual clauses and equivalent safeguards each provider offers.
13. Your rights
Under the Digital Personal Data Protection Act, 2023 you can ask us for a summary of the personal data we hold about you and how we are processing it, have it corrected, completed or updated, have it erased, withdraw consent you have given, nominate someone to exercise these rights if you die or become incapacitated, and use a readily available means of grievance redressal, which is set out at the end of this page.
If you are in the European Economic Area or the United Kingdom you also have the right to restrict or object to processing, to receive your data in a portable form, and to complain to your local supervisory authority.
To exercise any of these, email prakash@topsailappliances.com with "DPDP request" in the subject line. We will respond within thirty days. We may need to ask you a question or two first to be sure we are talking to the right person, since there is no account here to log into. If you are not satisfied with how we handle it, you may complain to the Data Protection Board of India.
14. Children
This is a business-to-business manufacturing site. It is not directed at children and we do not knowingly collect personal data from anyone under eighteen. We do not track children, profile them or advertise to them. If you believe a child has sent us personal data through this site, write to us and we will delete it.
15. How we protect it
The whole site is served over HTTPS. The relay that forwards enquiries into our sheet is authenticated with a shared secret, so a stranger cannot push forged enquiries into our records. Access to the enquiry sheet and inbox is restricted to named people at Topsail. We deliberately keep the number of places your data lives small, which is itself a security measure. No system is perfectly secure, and if a personal data breach occurs we will tell the people affected and the Data Protection Board of India, as the Act requires.
16. Changes to this policy
If we change what we collect, where it goes or who processes it, we will update this page and change the date at the top. That date is the honest record of when this was last reviewed.
Who to write to
The Digital Personal Data Protection Act, 2023 requires us to publish a contact for privacy questions and complaints. This is it.
Grievance Officer
Prakash Dadlani, Co-Founder
Topsail Appliances Pvt. Ltd.
- prakash@topsailappliances.com
- +91 9315150049
- Gala No 27 to 32, Srv No 295/1, RCC Industrial, Abhay Industrial Hub, Naroli, Silvassa, Dadra & Nagar Haveli 396235, India
For anything that is not a privacy question, the contact page is faster. Our terms of use cover the rest of your relationship with this website.