PMech CONSULTANT PVT. LTD.
1. Introduction
PMech Consultant Pvt. Ltd. and its affiliates (collectively "PMech," "we," "us," or "our") respect your privacy and are committed to protecting your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard personal information about visitors to our websites, clients, suppliers, job applicants, and other individuals who interact with our business.
PMech is a leading global Engineering, Procurement, and Construction Management (EPCM) company providing comprehensive engineering solutions across oil & gas, power, petrochemicals, refinery, offshore platforms, tank terminals, and infrastructure projects worldwide.
Contact Information:
•
Company: PMech Consultant Pvt. Ltd.
•
Address: BSEL Tech Park, B11 Ground Floor, Opp Vashi Railway Station, Sector 30A, Vashi, Navi Mumbai 400703, Maharashtra, India
•
Email: info@pmecheng.com
•
Privacy Officer: it@pmecheng.com
•
Phone: +91 22 2781 4721
2. Scope and Application
This Privacy Policy applies to:
• Our main website (www.pmecheng.com) and associated domains
• PMech Technologies software platforms and services
• Business communications and client interactions
• Recruitment and employment processes
• Third-party interactions in the course of our business
This policy covers our global operations including offices in India, USA, UAE, Netherlands, and Brazil.
3. Types of Personal Information We Collect
3.1 Information Collected Directly
Client and Business Contact Information:
• Name, job title, company affiliation
• Business email addresses and phone numbers
• Professional credentials and expertise areas
• Project requirements and technical specifications
• Billing and payment information
• Contract and procurement documentation
Job Applicants:
• Contact details and resume information
• Educational qualifications and work experience
• Professional references and certifications
• Assessment results and interview notes
• Background check information (where legally permitted)
Website Visitors:
•Contact form submissions
• Newsletter subscriptions
• Event registration information
• Technical inquiry details
3.2 Information Collected Automatically
Technical Information:
• IP addresses and device identifiers
• Browser type and operating system
• Website usage patterns and clickstream data
• Pages visited and time spent on site
• Referring websites and search terms
• Location data (country/region level)
Cookies and Tracking Technologies:
• Session and persistent cookies
• Web beacons and pixel tags
• Analytics and performance cookies
• Social media plugins
3.3 Information from Third Parties
• Professional references and recommendations
• Industry databases and public records
• Government and regulatory databases
• Client referrals and business partners
• Credit reporting agencies (for business purposes)
4. How We Use Personal Information
4.1 Business Operations
Project Management and Engineering Services:
• Delivering EPCM services and technical solutions
• Managing client relationships and communications
• Processing procurement and vendor management
• Providing technical support and consultation
• Quality assurance and project monitoring
Software and Technology Services:
• Operating PMT Tank and other software platforms
• Providing cloud-based engineering solutions
• Technical support and user training
• Software licensing and usage analytics
4.2 Business Administration
• Processing payments and managing accounts
• Compliance with regulatory requirements
• Internal reporting and business analytics
• Risk management and security measures
• Legal compliance and dispute resolution
4.3 Human Resources
• Recruitment and hiring processes
• Employee onboarding and training
• Performance management and development
• Payroll and benefits administration
• Workplace health and safety compliance
4.4 Marketing and Communications
• Sending newsletters and industry updates
• Promoting engineering services and solutions
• Hosting webinars and technical presentations
• Participating in industry events and conferences
• Building professional networks and partnerships
5. Legal Basis for Processing (GDPR Compliance)
We process personal information based on the following legal grounds:
Contract Performance:
Processing necessary to fulfill our engineering services contracts and business agreements.
Legitimate Interests:
Processing for our legitimate business interests,including:
• Project delivery and client service
• Business development and marketing
• Network security and fraud prevention
• Internal administration and reporting
Legal Compliance:
Processing required to comply with:
• Industry regulations and safety standards
• Tax and financial reporting obligations
• Employment and labor laws
• International trade and export controls
Consent:
Where required by law, we obtain explicit consent for:
• Marketing communications
• Non-essential cookies and tracking
• Sensitive personal information processing
6. How We Share Personal Information
6.1 Business Partners and Clients
• Project collaborators and joint venture partners
• Subcontractors and engineering specialists
• Equipment suppliers and vendors
• Client organizations and project stakeholders
6.2 Service Providers
• Cloud hosting and IT infrastructure providers
• Software development and maintenance companies
• Professional services (legal, accounting, consulting)
• Marketing and communications agencies
• Security and background check providers
6.3 Legal and Regulatory Disclosures
• Government agencies and regulatory bodies
• Law enforcement and judicial authorities
• Tax authorities and financial institutions
6.4 Corporate Transactions
• Mergers, acquisitions, or business transfers
• Due diligence and transaction advisory services
• Asset sales or restructuring activities
7. International Data Transfers
As a global engineering company, we may transfer personal information across borders for legitimate
business purposes. We implement appropriate safeguards including:
•
Adequacy Decisions: Transferring to countries recognized as providing
adequate protection.
•
Standard Contractual Clauses: Using EU-approved contractual clauses with
international partners.
•
Binding Corporate Rules: Internal policies ensuring consistent global
protection standards.
•
Specific Safeguards: Additional security measures for sensitive engineering
and technical data.
8. Data Retention
We retain personal information for the following periods:
•
Client Information: For the duration of business relationships plus 7 years for legal and regulatory compliance.
•
Project Documentation: As required by engineering standards and regulatory obligations (typically 10-25 years for critical infrastructure projects).
•
Employee Records: For the duration of employment plus 7 years, or as required by local laws.
•
Financial Records: As required by tax and accounting regulations (typically 7 years).
•
Website Analytics: Up to 26 months for website usage data.
•
Marketing Data: Until consent is withdrawn or the purpose is fulfilled.
9. Data Security
We implement comprehensive security measures including:
Technical Safeguards:
• Encryption of data in transit and at rest
• Multi-factor authentication systems
• Regular security assessments and penetration testing
• Intrusion detection and monitoring systems
• Secure cloud infrastructure and data centers
Organizational Measures:
• Employee privacy and security training
• Access controls and privilege management
• Incident response and breach notification procedures
• Regular privacy impact assessments
• Vendor security due diligence
Physical Security:
• Secure office facilities and data centers
• Access controls and visitor management
• Environmental monitoring and protection
10. Your Rights and Choices
Depending on your location and applicable laws, you may have the following rights:
10.1 Access and Portability
• Request copies of your personal information
• Obtain information about our processing activities
• Receive data in a portable format
10.2 Correction and Deletion
• Correct inaccurate or incomplete information
• Request deletion of personal information
• Object to specific processing activities
10.3 Consent and Marketing
• Withdraw consent for marketing communications
• Opt-out of non-essential cookies and tracking
• Manage communication preferences
10.4 Restriction and Objection
• Restrict processing for specific purposes
• Object to direct marketing and profiling
• Request human review of automated decisions
•
To exercise your rights, contact us at: it@pmecheng.com
11. Cookies and Online Tracking
We use cookies and similar technologies for:
Essential Functions:
• Website security and authentication
• Session management and user preferences
• Load balancing and performance optimization
Analytics and Performance:
• Website usage statistics and improvements
• User experience optimization
• Technical performance monitoring
Marketing and Advertising:
• Targeted advertising and remarketing
• Social media integration
• Campaign effectiveness measurement
You can manage cookie preferences through your browser settings or our cookie preference center.
12. Children's Privacy
Our services are not directed to children under 16 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will take steps to delete such information promptly.
13. Third-Party Links and Services
Our websites may contain links to third-party sites and services. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.
14. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices or applicable laws. We will post the updated policy on our website and notify you of material changes through:
• Email notifications to registered users
• Prominent website announcements
• Direct communication for significant changes affecting your rights
15. Regional Specific Information
15.1 European Union (GDPR)
For individuals in the EU, we serve as the data controller. Our EU representative can be contacted
at [it@pmecheng.com].
Legal Basis Summary:
• Contract performance for client services
• Legitimate interests for business operations
• Legal compliance for regulatory requirements
• Consent for marketing and optional services
15.2 United States
We comply with applicable U.S. state privacy laws including CCPA/CPRA. California residents have additional rights regarding personal information sales and sharing.
15.3 India
We comply with the Digital Personal Data Protection Act and other applicable Indian privacy regulations.
15.4 Other Jurisdictions
We maintain compliance with local privacy laws in all jurisdictions where we operate, including UAE, Netherlands, and Brazil.
16. Contact Information
For Privacy-Related Inquiries:
Primary Contact:
•
Email: it@pmecheng.com
•
Phone: +91 22 2781 4721
•
Mail: Privacy Officer, PMech Consultant Pvt. Ltd., BSEL Tech Park, B11 Ground Floor, Opp Vashi Railway Station, Sector 30A, Vashi, Navi Mumbai 400703, Maharashtra, India
Regional Contacts:
•
USA: it@pmecheng.com
•
Europe: it@pmecheng.com
•
UAE: it@pmecheng.com
For General Business Inquiries:
•
Email: info@pmecheng.com
•
Website: www.pmecheng.com
Data Protection Officer (DPO): info@pmecheng.com
17. Supervisory Authority
You have the right to lodge a complaint with your local data protection authority if you believe your privacy rights have been violated. For individuals in India, this includes the Data Protection Board of India.
This Privacy Policy demonstrates PMech's commitment to protecting personal information and maintaining trust with our clients, partners, and stakeholders worldwide. We continuously review and enhance our privacy practices to ensure compliance with evolving regulations and industry best practices.