1. Who We Are
Data Controller:
PWRNXT – Power Next Solutions Pvt Ltd
Delhi National Capital Region (NCR), India
Email: [email protected]
Phone: +91 99717 73884
PWRNXT operates the website at pwrnxt.in (the "Website"). We provide Battery Energy Storage Systems (BESS) on operating lease for commercial and industrial enterprises across India.
For the purposes of India's Digital Personal Data Protection Act, 2023 (DPDP Act), PWRNXT is the Data Fiduciary responsible for the processing of personal data described in this policy.
2. Data We Collect
We collect personal data only through the channels listed below. We collect the minimum data necessary for each purpose.
A. Feasibility Study Request Form
When you submit our contact form at pwrnxt.in/#contact, we collect:
| Field | Purpose | Required? |
|---|---|---|
| Full Name | To address you personally | Yes |
| Designation | To understand your decision-making role | Yes |
| Company Name | To identify your organisation | Yes |
| Industry Sector | To tailor our technical response | Yes |
| Email Address | To send your feasibility study scope and report | Yes |
| Mobile Number | To follow up by phone | Yes |
| DG Capacity (kVA) | For BESS system sizing | No |
| Monthly Diesel (litres) | For energy savings modelling | No |
| Monthly Outage Frequency | For BESS sizing | No |
| Facility Location | For site visit planning | No |
| Additional Context / Message | To understand specific requirements | No |
Form submissions are processed and stored by Netlify (our hosting provider). See Section 5 for details.
B. Live Chat (Tawk.to)
If you use our live chat widget, Tawk.to may collect your name, email address (if you provide them during the chat session), your messages, your IP address, browser type, and the pages you viewed. Tawk.to operates its own privacy policy available at tawk.to/privacy-policy.
C. Website Analytics (Google Analytics 4)
If you accept cookies, Google Analytics 4 (GA4) collects anonymised usage data including pages visited, time on site, scroll depth, buttons clicked, and approximate geographic location (country/city level). No directly identifying information (name, email, phone) is sent to Google Analytics. See Section 6 (Cookies) for full details.
D. Direct Contact (Email / Phone / WhatsApp)
If you contact us directly via email, phone or WhatsApp, we retain your contact information and the content of your communication for the purpose of responding and maintaining a record of our correspondence.
E. Technical Data (Automatically Collected)
Our web server and hosting provider (Netlify) automatically logs standard technical data including IP address, browser type and version, operating system, referring URLs, and page request timestamps. This data is used for security monitoring and is not linked to individual identities.
3. How We Use Your Data
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Respond to feasibility study requests | Form submission data | Consent / Legitimate Interest |
| Prepare customised feasibility study and BESS sizing report | DG capacity, diesel data, sector | Consent |
| Follow up by email or phone | Email, phone, name | Consent |
| Provide and improve live chat support | Chat messages, IP, browser | Consent / Legitimate Interest |
| Understand website usage and improve content | Anonymised GA4 analytics data | Consent (cookie opt-in) |
| Security and fraud prevention | Server logs, IP addresses | Legitimate Interest |
| Legal and compliance obligations | All relevant data | Legal Obligation |
We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.
We do not use your data for any marketing or promotional purposes beyond direct follow-up to your own enquiry, unless you explicitly request otherwise.
4. Legal Basis for Processing
Under the Digital Personal Data Protection Act, 2023 (DPDP Act), we process personal data on the following grounds:
- Consent: You have given us clear, specific consent when submitting the assessment form, accepting cookies, or initiating a chat conversation. You may withdraw consent at any time (see Section 8).
- Legitimate Interests: We have a legitimate business interest in responding to enquiries from potential customers, maintaining website security, and improving our services — provided this does not override your rights.
- Legal Obligation: Where we are required to retain or disclose data by applicable Indian law.
5. Data Sharing & Third Parties
We do not sell, rent or trade your personal data. We share data only with the following trusted service providers, each bound by their own data processing agreements and privacy policies:
| Provider | Role | Data Shared | Privacy Policy |
|---|---|---|---|
| Netlify, Inc. | Website hosting & form processing | Form submissions, server logs, IP addresses | netlify.com/privacy |
| Google LLC (Google Analytics 4) |
Website analytics | Anonymised usage data (cookies, only with consent) | policies.google.com/privacy |
| Tawk.to Inc. | Live chat software | Chat messages, name/email (if provided), IP, browser | tawk.to/privacy-policy |
| Cloudflare, Inc. | Email obfuscation & DNS | Email addresses (obfuscated in HTML) | cloudflare.com/privacypolicy |
We may disclose your data to competent authorities or courts if required to do so by law, court order, or to protect the rights, property or safety of PWRNXT or others.
In the event of a merger, acquisition or asset sale, personal data may be transferred to the successor entity, subject to the same privacy protections.
7. Data Retention
| Data Type | Retention Period | Reason |
|---|---|---|
| Feasibility study request form submissions | 3 years from submission | Pre-sales engagement record; standard B2B commercial retention |
| Email / phone correspondence | 3 years from last contact | Business relationship record |
| Tawk.to chat transcripts | Per Tawk.to's retention policy (up to 3 years) | Customer support record |
| Google Analytics data | 14 months (configured in GA4) | Web analytics; auto-deleted by Google after this period |
| Server / access logs (Netlify) | 30 days | Security monitoring; per Netlify's default policy |
| Cookie consent preference | Until browser cookies are cleared | To avoid repeated consent requests |
When retention periods expire, data is securely deleted or anonymised. You may request earlier deletion at any time (see Section 8).
8. Your Rights
Under the DPDP Act, 2023, you have the following rights as a Data Principal:
- Right to Access: Request a summary of the personal data we hold about you and how it is being processed.
- Right to Correction: Request correction of inaccurate or incomplete personal data.
- Right to Erasure: Request deletion of your personal data where there is no longer a lawful reason for us to retain it.
- Right to Grievance Redressal: Raise a complaint with us and receive a response within a reasonable time. If unresolved, you may escalate to the Data Protection Board of India once established under the Act.
- Right to Withdraw Consent: Withdraw any consent given at any time, without affecting the lawfulness of processing prior to withdrawal.
- Right to Nominate: Nominate another individual to exercise your rights in the event of your death or incapacity.
For EEA / UK Residents
You additionally hold rights under GDPR / UK GDPR including data portability and the right to object to processing based on legitimate interests. You may lodge a complaint with your local supervisory authority (e.g. the UK ICO or your EU member state's data protection authority) if you believe your rights have been violated.
9. Security
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or disclosure. These include:
- HTTPS encryption across the entire pwrnxt.in website (TLS 1.2+)
- Hosting on Netlify's enterprise-grade infrastructure with SOC 2 compliance
- Access to form submission data restricted to authorised PWRNXT personnel only
- No storage of sensitive financial data (payment details) on our systems
- Regular review of third-party service providers' security practices
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify affected individuals and the relevant authority as required by the DPDP Act 2023.
10. Children's Data
Our website and services are directed exclusively at businesses and their professional representatives. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has submitted data to us, please contact us at [email protected] and we will promptly delete the relevant information.
11. Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements or for other operational reasons. When we make material changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically.
Continued use of our website after a policy update constitutes acceptance of the revised terms, to the extent permitted by applicable law.
12. Contact Us
For any privacy-related questions, data rights requests, or concerns, please contact us using the details below. We aim to respond to all requests within 30 days.
📍 Delhi National Capital Region (NCR), India
💬 WhatsApp: wa.me/919971773884
Response time: within 30 days for formal data rights requests, within 2 business days for general enquiries.