PMECH CONSULTANT PVT. LTD.

1. Introduction

PMech Consultant Pvt. Ltd. and its affiliates (collectively "PMECH," "we," "us," or "our") respect your privacy and are committed to protecting your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard personal information about visitors to our websites, clients, suppliers, job applicants, and other individuals who interact with our business.

PMech is a leading global Engineering, Procurement, and Construction Management (EPCM) company providing comprehensive engineering solutions across oil & gas, power, petrochemicals, refinery, offshore platforms, tank terminals, and infrastructure projects worldwide.

Contact Information:

• Company: PMech Consultant Pvt. Ltd.
• Address: BSEL Tech Park, B11 Ground Floor, Opp Vashi Railway Station, Sector 30A, Vashi, Navi Mumbai 400703, Maharashtra, India
• Email: info@pmecheng.com
• Privacy Officer: it@pmecheng.com
• Phone: +91 22 2781 4721

2. Scope and Application

This Privacy Policy applies to:

• Our main website (www.pmecheng.com) and associated domains
• PMech Technologies software platforms and services
• Business communications and client interactions
• Recruitment and employment processes
• Third-party interactions in the course of our business

This policy covers our global operations including offices in India, USA, UAE, Netherlands, and Brazil.

3. Types of Personal Information We Collect

3.1 Information Collected Directly

Client and Business Contact Information:

• Name, job title, company affiliation
• Business email addresses and phone numbers
• Professional credentials and expertise areas
• Project requirements and technical specifications
• Billing and payment information
• Contract and procurement documentation

Job Applicants:

• Contact details and resume information
• Educational qualifications and work experience
• Professional references and certifications
• Assessment results and interview notes
• Background check information (where legally permitted)

Website Visitors:

•Contact form submissions
• Newsletter subscriptions
• Event registration information
• Technical inquiry details

3.2 Information Collected Automatically

Technical Information:

• IP addresses and device identifiers
• Browser type and operating system
• Website usage patterns and clickstream data
• Pages visited and time spent on site
• Referring websites and search terms
• Location data (country/region level)

Cookies and Tracking Technologies:

• Session and persistent cookies
• Web beacons and pixel tags
• Analytics and performance cookies
• Social media plugins

3.3 Information from Third Parties

• Professional references and recommendations
• Industry databases and public records
• Government and regulatory databases
• Client referrals and business partners
• Credit reporting agencies (for business purposes)

4. How We Use Personal Information

4.1 Business Operations

Project Management and Engineering Services:

• Delivering EPCM services and technical solutions
• Managing client relationships and communications
• Processing procurement and vendor management
• Providing technical support and consultation
• Quality assurance and project monitoring

Software and Technology Services:

• Operating PMT Tank and other software platforms
• Providing cloud-based engineering solutions
• Technical support and user training
• Software licensing and usage analytics

4.2 Business Administration

• Processing payments and managing accounts
• Compliance with regulatory requirements
• Internal reporting and business analytics
• Risk management and security measures
• Legal compliance and dispute resolution

4.3 Human Resources

• Recruitment and hiring processes
• Employee onboarding and training
• Performance management and development
• Payroll and benefits administration
• Workplace health and safety compliance

4.4 Marketing and Communications

• Sending newsletters and industry updates
• Promoting engineering services and solutions
• Hosting webinars and technical presentations
• Participating in industry events and conferences
• Building professional networks and partnerships

5. Legal Basis for Processing (GDPR Compliance)

We process personal information based on the following legal grounds:

Contract Performance:

Processing necessary to fulfill our engineering services contracts and business agreements.

Legitimate Interests:

Processing for our legitimate business interests,including:

• Project delivery and client service
• Business development and marketing
• Network security and fraud prevention
• Internal administration and reporting

Legal Compliance:

Processing required to comply with:

• Industry regulations and safety standards
• Tax and financial reporting obligations
• Employment and labor laws
• International trade and export controls

Consent:

Where required by law, we obtain explicit consent for:

• Marketing communications
• Non-essential cookies and tracking
• Sensitive personal information processing

6. How We Share Personal Information

6.1 Business Partners and Clients

• Project collaborators and joint venture partners
• Subcontractors and engineering specialists
• Equipment suppliers and vendors
• Client organizations and project stakeholders

6.2 Service Providers

• Cloud hosting and IT infrastructure providers
• Software development and maintenance companies
• Professional services (legal, accounting, consulting)
• Marketing and communications agencies
• Security and background check providers

6.3 Legal and Regulatory Disclosures

• Government agencies and regulatory bodies
• Law enforcement and judicial authorities
• Tax authorities and financial institutions

6.4 Corporate Transactions

• Mergers, acquisitions, or business transfers
• Due diligence and transaction advisory services
• Asset sales or restructuring activities

7. International Data Transfers

As a global engineering company, we may transfer personal information across borders for legitimate business purposes. We implement appropriate safeguards including:

• Adequacy Decisions: Transferring to countries recognized as providing adequate protection.
• Standard Contractual Clauses: Using EU-approved contractual clauses with international partners.
• Binding Corporate Rules: Internal policies ensuring consistent global protection standards.
• Specific Safeguards: Additional security measures for sensitive engineering and technical data.

8. Data Retention

We retain personal information for the following periods:

• Client Information: For the duration of business relationships plus 7 years for legal and regulatory compliance.
• Project Documentation: As required by engineering standards and regulatory obligations (typically 10-25 years for critical infrastructure projects).
• Employee Records: For the duration of employment plus 7 years, or as required by local laws.
• Financial Records: As required by tax and accounting regulations (typically 7 years).
• Website Analytics: Up to 26 months for website usage data.
• Marketing Data: Until consent is withdrawn or the purpose is fulfilled.

9. Data Security

We implement comprehensive security measures including:

Technical Safeguards:

• Encryption of data in transit and at rest
• Multi-factor authentication systems
• Regular security assessments and penetration testing
• Intrusion detection and monitoring systems
• Secure cloud infrastructure and data centers

Organizational Measures:

• Employee privacy and security training
• Access controls and privilege management
• Incident response and breach notification procedures
• Regular privacy impact assessments
• Vendor security due diligence

Physical Security:

• Secure office facilities and data centers
• Access controls and visitor management
• Environmental monitoring and protection

10. Your Rights and Choices

Depending on your location and applicable laws, you may have the following rights:

10.1 Access and Portability

• Request copies of your personal information
• Obtain information about our processing activities
• Receive data in a portable format

10.2 Correction and Deletion

• Correct inaccurate or incomplete information
• Request deletion of personal information
• Object to specific processing activities

10.3 Consent and Marketing

• Withdraw consent for marketing communications
• Opt-out of non-essential cookies and tracking
• Manage communication preferences

10.4 Restriction and Objection

• Restrict processing for specific purposes
• Object to direct marketing and profiling
• Request human review of automated decisions
• To exercise your rights, contact us at: it@pmecheng.com

11. Cookies and Online Tracking

We use cookies and similar technologies for:

Essential Functions:

• Website security and authentication
• Session management and user preferences
• Load balancing and performance optimization

Analytics and Performance:

• Website usage statistics and improvements
• User experience optimization
• Technical performance monitoring

Marketing and Advertising:

• Targeted advertising and remarketing
• Social media integration
• Campaign effectiveness measurement

You can manage cookie preferences through your browser settings or our cookie preference center.

12. Children's Privacy

Our services are not directed to children under 16 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will take steps to delete such information promptly.

13. Third-Party Links and Services

Our websites may contain links to third-party sites and services. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

14. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable laws. We will post the updated policy on our website and notify you of material changes through:

• Email notifications to registered users
• Prominent website announcements
• Direct communication for significant changes affecting your rights

15. Regional Specific Information

15.1 European Union (GDPR)

For individuals in the EU, we serve as the data controller. Our EU representative can be contacted at [it@pmecheng.com].

Legal Basis Summary:

• Contract performance for client services
• Legitimate interests for business operations
• Legal compliance for regulatory requirements
• Consent for marketing and optional services

15.2 United States

We comply with applicable U.S. state privacy laws including CCPA/CPRA. California residents have additional rights regarding personal information sales and sharing.

15.3 India

We comply with the Digital Personal Data Protection Act and other applicable Indian privacy regulations.

15.4 Other Jurisdictions

We maintain compliance with local privacy laws in all jurisdictions where we operate, including UAE, Netherlands, and Brazil.

16. Contact Information

For Privacy-Related Inquiries:

Primary Contact:

• Email: it@pmecheng.com
• Phone: +91 22 2781 4721
• Mail: Privacy Officer, PMech Consultant Pvt. Ltd., BSEL Tech Park, B11 Ground Floor, Opp Vashi Railway Station, Sector 30A, Vashi, Navi Mumbai 400703, Maharashtra, India

Regional Contacts:

• USA: it@pmecheng.com
• Europe: it@pmecheng.com
• UAE: it@pmecheng.com

For General Business Inquiries:

• Email: info@pmecheng.com
• Website: www.pmecheng.com

Data Protection Officer (DPO): info@pmecheng.com

17. Supervisory Authority

You have the right to lodge a complaint with your local data protection authority if you believe your privacy rights have been violated. For individuals in India, this includes the Data Protection Board of India.

This Privacy Policy demonstrates PMECH's commitment to protecting personal information and maintaining trust with our clients, partners, and stakeholders worldwide. We continuously review and enhance our privacy practices to ensure compliance with evolving regulations and industry best practices.