Privacy Policy

Canorous Technologies ("Canorous," "Company," "we," "our," or "us") respects the privacy of visitors to can-india.co.in and of clients, vendors, and business contacts who communicate with the Company regarding engineering, manufacturing, 3D visualization, and Unreal Studio VR/AR services. This Privacy Policy explains what personal information may be collected, how that information may be used, when it may be shared, and the rights available to individuals in relation to that information.

This document is drafted as a practical business-facing privacy notice based on publicly visible information about the Company's website and contact channels, including its public website presence and company records. It should be reviewed by qualified legal counsel before publication to confirm compliance with applicable laws, including India's Digital Personal Data Protection framework and any foreign privacy laws relevant to the Company's clients or prospects.

1. Who This Policy Applies To

This Privacy Policy applies to personal information collected through the Company website, by email, by phone, through consultation requests, and during pre-contractual or contractual business communications related to the Company's services. It is intended for business audiences and commercial contacts rather than consumer-facing retail activity.

2. Company and Contact Details

The Company operates under the name Canorous Technologies and publicly presents its services through can-india.co.in. Public company records identify the legal entity as Canorous Technologies Private Limited, with CIN U74999TZ2017PTC029192.

For privacy questions, requests, or complaints, contact:

If the Company designates a separate grievance officer, data protection contact, or compliance representative in the future, this section should be updated accordingly.

3. Personal Information Collected

Depending on how a person interacts with the Company, the following categories of personal information may be collected:

• Contact and inquiry data — such as name, email address, phone number, company name, inquiry type, and the contents of a submitted message.
• Consultation and correspondence data — including information shared by email, phone, or other direct communication channels when discussing service needs, project scope, timelines, or business requirements.
• Project and commercial data — such as technical files, drawings, specifications, requirements, commercial terms, and related business materials voluntarily provided during pre-sales discussions or active engagements.
• Technical and usage data — such as IP address, browser type, operating system, device information, referral source, pages viewed, and approximate usage information if hosting logs, analytics, or comparable tools are used.
• Third-party embedded content data — including data that may be collected through embedded or linked third-party features such as Google Maps or LinkedIn integrations visible from the website experience.

The Company should avoid collecting unnecessary sensitive personal data unless there is a clear legal and operational reason to do so, and any future collection of such data should be specifically disclosed in an updated notice.

4. Sources of Information

Personal information may be collected directly from the individual, automatically through website or server interactions, or indirectly from business representatives, service providers, or publicly available professional sources relevant to a commercial inquiry or project discussion. Where information is received indirectly, the Company should use it only for legitimate business purposes and in accordance with applicable law.

5. Purposes of Processing

Personal information may be used for the following business purposes:

• To respond to inquiries, quote requests, and consultation scheduling requests.
• To evaluate prospective projects and prepare proposals, estimates, statements of work, or commercial discussions.
• To deliver engineering, manufacturing, 3D visualization, VR/AR, and related professional services requested by clients.
• To communicate about projects, support matters, operational updates, billing, and business administration.
• To maintain website functionality, security, troubleshooting, and service improvement.
• To send marketing or promotional communications where consent is obtained or another lawful basis applies.
• To comply with legal, tax, accounting, regulatory, audit, and contractual obligations.

Personal information should not be used for materially different purposes without updating this Privacy Policy or otherwise providing appropriate notice where required by law.

6. Legal Bases

Where applicable law requires the Company to identify a legal basis for processing, processing may be carried out on one or more of the following bases: consent, performance of a contract, steps taken prior to entering into a contract, compliance with legal obligations, and legitimate business interests that are not overridden by an individual's rights or freedoms. The most appropriate legal basis may depend on the nature of the interaction and the jurisdiction involved.

7. Cookies and Similar Technologies

The website may use cookies, server logs, embedded tools, or similar technologies to support core website functions, security, performance monitoring, and limited usage insights. Embedded third-party content, including Google Maps, may also place cookies or collect device and usage information under the third party's own terms and privacy practices.

Individuals can generally control cookies through browser settings. Disabling cookies may affect the functionality of embedded features or parts of the website.

8. Disclosure of Information

The Company does not state that it sells personal information, and this policy should continue to prohibit the sale of personal data. Personal information may be disclosed only where reasonably necessary to the following categories of recipients:

• Service providers and processors supporting website hosting, email, IT administration, backup, or related business operations, subject to appropriate confidentiality and data-processing terms.
• Professional advisors, including legal, tax, audit, compliance, or insurance advisors, where needed for legitimate business purposes.
• Government authorities, courts, regulators, or law-enforcement bodies where disclosure is required by law or necessary to protect legal rights.
• Acquirers, investors, or successor entities in connection with a merger, restructuring, financing, acquisition, or sale of assets, subject to appropriate safeguards.

If the Company adopts CRM systems, analytics platforms, advertising tools, or additional third-party processors in the future, those categories should be described in an updated version of this policy.

9. International Transfers

The Company is based in India, and personal information may be stored or processed in India or in other jurisdictions used by hosting, email, cloud, or technology providers. Where data is transferred across borders, the Company should implement reasonable contractual or technical safeguards as required by applicable law.

10. Data Retention

Personal information may be retained only for as long as reasonably necessary for the purpose for which it was collected, including responding to inquiries, managing business relationships, delivering services, maintaining records, resolving disputes, enforcing agreements, and meeting legal, tax, accounting, or reporting obligations. Retention periods may vary depending on the data type, the nature of the engagement, and mandatory recordkeeping requirements.

As a practical internal approach, the Company may choose to adopt a retention schedule such as the following, subject to legal review:

• General inquiries: up to 12 months after the last meaningful contact.
• Active client and vendor records: for the term of the relationship and a reasonable post-engagement archival period.
• Contract, tax, and accounting records: for the period required by applicable law.
• Technical logs and security records: for a limited operational and security period, unless extended retention is necessary for investigation or legal compliance.

11. Data Security

The Company should implement reasonable technical and organizational safeguards designed to protect personal information against unauthorized access, misuse, loss, disclosure, alteration, or destruction. These safeguards may include role-based access controls, secure email and hosting practices, password controls, device safeguards, backup procedures, and periodic administrative review.

No online transmission or storage method is completely secure. Accordingly, absolute security cannot be guaranteed even where reasonable security practices are followed.

12. Individual Rights

Depending on the individual's location and the law that applies, the individual may have the right to request access to personal information, correction of inaccurate information, deletion of information, withdrawal of consent where consent is the basis of processing, restriction of certain processing, objection to certain processing, or information about how personal data has been used or shared. To exercise these rights, a request may be sent to sales@can-india.co.in with enough detail to verify identity and locate the relevant records.

The Company should respond within a reasonable time and may retain limited information necessary to document the request, comply with legal obligations, or defend legal claims.

13. Marketing Communications

Where the Company sends promotional or marketing communications, it should do so only where an appropriate legal basis exists, including consent where required. Recipients should be given a clear way to opt out of future marketing communications.

14. Children's Privacy

The website and services are intended for business and professional audiences and are not directed to children under 18 years of age. The Company does not knowingly collect personal information from children through the website.

If the Company becomes aware that personal information from a child has been submitted without appropriate authorization, the Company should take reasonable steps to delete that information from its records.

15. Third-Party Services and Links

The website may contain links to or integrations with third-party services, including Google Maps and LinkedIn. Those third parties operate under their own terms and privacy policies, and the Company is not responsible for the privacy practices of external websites or services not controlled by the Company.

16. Changes to This Policy

This Privacy Policy may be updated from time to time to reflect changes in legal requirements, technology, business practices, or website features. The revised version should be posted on the relevant webpage with an updated effective date or last updated date.

Where required by law or where changes are materially significant, additional notice mechanisms may also be used.