Privacy Policy — Astinova Bio Labs

This Privacy Policy explains how Astinova Bio Labs Private Limited ("Astinova", "we", "us", or "our") collects, uses, stores, and shares personal information when you visit astinovabiolabs.com or contact us through our website forms, email, or phone.

We are committed to handling your information in accordance with India's Digital Personal Data Protection Act, 2023 (DPDP Act), and — where applicable — the EU General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018.

1. Who we are

The data controller responsible for your information is:

Astinova Bio Labs Private Limited
Plot No 47, 2nd Floor, Phase III IDA Cherlapally, Hindustan Cables Limited, Uppal, Hyderabad – 500051, Telangana, India
Email: info@astinovabiolabs.com · Phone: +91-78160 40868

2. Information we collect

2.1 Information you provide. When you submit our contact, partnership, or catalog request forms, we collect the information you choose to share, including:

First and last name
Work email address
Company or institution name
Service of interest and project stage
Project description and any details you include in free-text fields
Phone number, if you choose to provide it

2.2 Information collected automatically. When you visit our website, our hosting provider and any analytics tools we use may automatically collect limited technical information, including:

IP address and approximate geographic location
Browser type and version, operating system, and device type
Pages viewed, referring URL, and time spent on the site
Date and time of access

This information is used for site security, performance monitoring, and aggregate analytics. It is not used to build individual user profiles.

2.3 Cookies. Our website uses only essential cookies required for basic functionality. We do not currently use advertising or cross-site tracking cookies. If we add non-essential cookies in the future, we will update this policy and, where required, request your consent.

3. How we use your information

To respond to your inquiry, proposal request, or catalog request
To evaluate potential collaboration, scoping, and pricing of chemistry services
To send you the information, documents, or non-disclosure agreements you have requested
To follow up on prior conversations and maintain a record of our business communications
To comply with applicable legal, regulatory, accounting, and audit obligations
To improve the content and functionality of our website

4. Legal basis for processing

Your consent — given when you submit a form and acknowledge this Privacy Policy. You may withdraw consent at any time (see Section 8).
Performance of a contract or steps taken at your request prior to entering a contract (for example, preparing a quotation or NDA).
Legitimate interests — operating and growing our chemistry services business, securing our website, and maintaining records of business communications, where these interests are not overridden by your rights.
Legal obligation — where we are required to retain records under applicable tax, corporate, or regulatory law.

5. Sharing your information

We do not sell or rent your personal information. We share it only with the following categories of recipients, and only to the extent necessary:

Service providers who help us operate our business — for example, website hosting, email infrastructure, and document or e-signature tools. These providers are bound by confidentiality and data-protection obligations and may only process your data on our instructions.
Professional advisers such as lawyers, accountants, and auditors, where required for legal, compliance, or audit purposes.
Authorities when required by law, court order, or to protect the rights, safety, or property of Astinova, our customers, or others.
Successor entities in the event of a corporate transaction such as a merger, acquisition, or reorganization, under equivalent protections.

6. International transfers

Astinova is based in India. If you contact us from outside India, your information will be transferred to and processed in India. Where we transfer personal data of individuals located in the European Economic Area, the United Kingdom, or other jurisdictions with cross-border transfer rules, we rely on appropriate safeguards permitted under applicable law (such as your explicit consent or standard contractual clauses with service providers).

7. How long we keep your information

Active inquiries and customers: for the duration of the project and our ongoing business relationship.
Unconverted inquiries: typically up to 24 months, after which they are deleted or anonymized unless a longer period is required.
Records required by law (such as tax and corporate records): for the period required by the relevant legislation.

8. Your rights

Subject to applicable law (including the DPDP Act and, where relevant, the GDPR), you have the right to:

Request access to the personal information we hold about you
Request correction of information that is inaccurate or incomplete
Request deletion of your personal information
Withdraw your consent at any time, where processing is based on consent
Object to or request restriction of processing based on legitimate interests
Request a copy of your information in a portable format
Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity (DPDP Act)
Lodge a complaint with the Data Protection Board of India or, where applicable, your local data-protection authority

To exercise any of these rights, email info@astinovabiolabs.com with the subject line "Privacy Request". We will respond within the timeframes required by applicable law.

9. Confidentiality of project information

We understand that the project descriptions and chemistry details you share are commercially sensitive. Even before any non-disclosure agreement is in place, we treat the contents of your inquiry as confidential and limit internal access to the team members involved in scoping a response. We are happy to enter into a formal NDA before any detailed scientific discussion.

10. Security

We use reasonable technical and organizational measures to protect your information against loss, misuse, unauthorized access, disclosure, alteration, and destruction. These include access controls, encrypted transport (HTTPS), and limited internal access on a need-to-know basis. No system is perfectly secure, however, and we cannot guarantee absolute security.

11. Children

Our website and services are directed at businesses and research organizations, not at children. We do not knowingly collect personal information from individuals under 18. If you believe a child has provided us with personal data, please contact us so we can delete it.

12. Third-party links

Our website may contain links to third-party sites. We are not responsible for the privacy practices of those sites, and we encourage you to read their privacy policies before providing any information.

13. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The "Last updated" date at the top of this page indicates when it was most recently revised.

14. Contact us

If you have questions about this Privacy Policy or how we handle your personal information, please contact: