Privacy Policy

2.1 Who we are. Vector Technics Private Limited ("Vector Technics", "we", "us") is a company incorporated in India under the Companies Act, 2013, CIN U31900TG2022PTC165278, with its registered office at Plot No. 2-12, SY No. 37/A, Rasheedguda, Shamshabad, Rangareddy, Telangana 501218, India. We design and manufacture propulsion and motion-control systems for unmanned aircraft, aerospace, defence and robotics customers. For the personal data described in this Policy, we are the data fiduciary under Indian law and the controller under the EU and UK General Data Protection Regulations.

2.2 What this Policy covers. This Policy explains how we handle personal data when you: visit www.vectortechnics.com; send us an enquiry by form, email, phone or messaging; buy from us, supply to us or represent a customer, distributor or supplier; visit our premises; or apply for a job with us. It does not cover our employees' data, which is governed by our internal employee privacy notice.

2.3 Laws we follow. We process personal data in accordance with the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 (together, "DPDP law"); the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, for as long as they remain in force; and, where they apply to our dealings with you, the EU General Data Protection Regulation ("GDPR"), the UK GDPR and the UK Data Protection Act 2018, the Swiss Federal Act on Data Protection, and other applicable privacy laws.

2.4 Our principles. We collect only what we need for a stated purpose, use it only for that purpose, keep it only as long as necessary, keep it accurate and secure, and tell you plainly what we do. We are a business-to-business manufacturer: we do not need, and do not ask for, sensitive information such as health, financial account, biometric or government ID data through our website.

The table lists every purpose for which we use personal data. We will not use your data for a new purpose without telling you first and, where the law requires it, asking for your consent.

How we record enquiries. An enquiry sent through our website reaches us by email and is recorded in our Google Workspace systems. We also keep a copy with your name, email address, phone number and company removed, linked to the original only by the reference number. We use that copy to improve our product guidance, answer similar enquiries and carry out research. We also remove names and contact details from your notes where we can identify them, and we do not use the copy to identify you. If you ask us to delete your enquiry, we delete the original and the link between them.

We do not sell, rent or trade personal data. We do not use it to build advertising profiles. We do not knowingly collect sensitive personal data, and you should not send it to us.

4.1 What we use, exactly. We keep our website deliberately lean. The table lists every technology on our website that stores or reads information in your browser, or receives your IP address when you visit. Some are run by other companies on our behalf.

4.2 What we never send to Google. When you submit an enquiry, we send Google Analytics only non-identifying details about it, such as the product line, platform, quantity band, country and a reference number. We never send your name, email address or phone number. The reference number lets our team, and only our team, link the analytics record to your enquiry in our own systems.

4.3 Advertising. We do not run advertising on our website, and advertising storage, advertising user data and ad personalisation signals are switched off for all visitors. We do not use social media plugins; the social icons on our website are plain links, so the social network learns nothing until you click.

4.4 Your choices. You can block or delete cookies and browser storage in your browser settings, or install Google's Analytics opt-out browser add-on. Our website works fully without analytics cookies. Visitors in India: from 13 May 2027, when the remaining provisions of DPDP law take effect, we will ask for your consent before setting analytics cookies, if the law requires it.

5.1 Service providers. We use carefully selected service providers who process data only on our instructions, under written contracts that require confidentiality and security, and who may not use it for their own purposes. Our principal providers are:

We update this list when our principal providers change.

5.2 Other organisations. We share personal data with other organisations only where necessary:

• Our authorised distributors. Where you are located in a country served by an authorised Vector Technics distributor, we may pass your enquiry to that distributor so it can quote and support you locally. We tell you when we do so, and you can ask us to deal with you directly instead.
• Customers and their authorities. Where a customer or government programme requires it for quality, security or supply-chain assurance, we may share the names and roles of people involved in producing or delivering the goods.
• Authorities. Courts, regulators, tax, customs, export-control and law-enforcement authorities, where the law requires or permits it.
• Business transfers. A buyer of, or successor to, all or part of our business, bound by this Policy.

5.3 Transfers outside India. Some of our providers process data outside India. DPDP law permits this except to countries the Government of India restricts by notification; we will not transfer personal data to any restricted country. Where EU or UK law applies to a transfer we make, we use the European Commission's or UK Government's standard contractual clauses or another lawful mechanism. You can ask us for a copy of the relevant safeguards.

6.1 How we protect data. We apply reasonable security safeguards appropriate to the risk, including: encryption of data in transit; access restricted to staff who need it, with individual accounts and multi-factor authentication on our core business systems; segregation of our internal networks; logging and monitoring of access; periodic independent vulnerability assessment and penetration testing of our systems; confidentiality obligations on all staff and service providers; and procedures for backup and recovery. Because our work supports defence and aerospace customers, our information-security controls are designed to protect sensitive business and technical information, and personal data benefits from the same controls.

6.2 If something goes wrong. If a personal data breach occurs, we will contain it, investigate it, and notify the Data Protection Board of India and affected individuals as DPDP law requires, telling you what happened, the likely consequences, what we are doing about it and what you can do to protect yourself. Where GDPR or UK GDPR applies, we will notify the competent supervisory authority within seventy-two (72) hours where required, and affected individuals without undue delay where the breach poses a high risk to them. We will also report cyber security incidents to CERT-In as Indian law requires.

6.3 Retention principles. We keep personal data only for the periods in section 3, which are set by the purpose of the processing and by the retention periods required by law, including the Companies Act, 2013, Goods and Services Tax law, income-tax law, export control law and the quality standards that apply to aerospace products. When a retention period ends, we delete the data or irreversibly anonymise it. Where DPDP law requires it, we will tell you at least forty-eight (48) hours before erasing data you might want to keep.

7.1 Rights everyone has with us. Wherever you are, you may ask us to:

• tell you what personal data we hold about you, how we use it and who we have shared it with;
• correct, complete or update inaccurate or incomplete data;
• erase data we no longer need or that you withdraw consent for, unless the law requires us to keep it;
• withdraw any consent you have given, as easily as you gave it, without affecting processing already carried out;
• stop sending you marketing messages, at any time;
• address any grievance you have about how we handle your data.

7.2 Additional rights in India. Under DPDP law you also have the right to nominate another person to exercise your rights if you die or become incapable of doing so. If you are not satisfied with our response to a grievance, you may complain to the Data Protection Board of India after first using our grievance process.

7.3 Additional rights in the EU, UK and Switzerland. Where GDPR, the UK GDPR or Swiss law applies, you also have the right to restrict processing, to receive data you gave us in a portable format, and to object at any time to processing based on our legitimate interests, including profiling, and you may lodge a complaint with the data protection authority where you live or work.

7.4 How to exercise your rights. Email legal@vectortechnics.com with the subject "Privacy Request", or write to our Grievance Officer at our registered office. Tell us what you want and give us enough information to identify you. We may need to verify your identity before acting, and will use only the information necessary to do so. We do not charge for requests unless they are clearly unfounded or excessive.

7.5 Our response times. We acknowledge every request within three (3) working days and respond in full within thirty (30) days. If a request is complex, we will tell you within those thirty days why we need longer, up to the maximum the applicable law allows. If we decline a request, we will explain why and how you can challenge our decision.

7.6 Your responsibilities. DPDP law asks you to provide accurate information, not to impersonate anyone, and not to file false or frivolous complaints. If you give us details of colleagues or other people, please make sure they are aware of this Policy.

8.1 Children. Our website and products are intended for businesses and professionals. We do not knowingly collect personal data from anyone under eighteen (18) years of age. If you believe a child has given us personal data, contact us and we will delete it.

8.2 Automated decisions and artificial intelligence. We do not make decisions about you that have legal or similarly significant effects based solely on automated processing. We may use artificial-intelligence tools, under the supervision of our staff and under contracts that protect confidentiality, to help us draft replies, summarise enquiries and analyse business information, including the de-identified enquiry copy described in section 3. We do not use your personal data to train third-party AI models.

8.3 Links to other websites. Our website links to other sites, such as social networks, news articles and maps. Their owners are responsible for their own privacy practices; please read their policies.

8.4 Changes to this Policy. We will update this Policy when our practices or the law change. We will show the new version and its effective date on this page, keep earlier versions available on request, and, for material changes affecting how we use data you have already given us, notify you directly where we have your contact details and, where required, ask for fresh consent.

8.5 Grievance Officer and contact. For any question, request or grievance about privacy, contact:

Grievance Officer, Vector Technics Private Limited
Plot No. 2-12, SY No. 37/A, Rasheedguda, Shamshabad, Rangareddy, Telangana 501218, India
Email: legal@vectortechnics.com · Phone: +91 40 2933 0019 · Monday to Friday, 9:00 to 17:30 IST

If this Policy is translated, the English version prevails.