Privacy Policy

1. Introduction

This Privacy Policy describes how Anirudh Engineering Solutions, a proprietary firm (hereinafter “we”, “us”, or “our”), collects, uses, and protects your personal information. We operate the online platform Machine City at machinecity.in (the “Platform”), a marketplace for used and refurbished industrial machinery.

By using the Platform or submitting any form on it, you acknowledge that you have read and understood this policy. We are committed to handling your personal data responsibly and in accordance with applicable Indian law, including the Digital Personal Data Protection Act, 2023 (DPDP Act).

2. Information We Collect

2.1 Information you provide to us

When you fill in a form on the Platform — such as a machine enquiry, a “Sell Your Machine” submission, or a contact request — we collect the details you enter, which may include:

• Your name
• Email address
• Phone number
• Company or organisation name (optional)
• Your message or enquiry details
• Machine details when submitting a listing to sell (make, model, year, condition, description, photos)

2.2 Automatically collected information

When you visit the Platform, we and our analytics service providers may automatically collect:

• IP address and approximate location
• Browser type and version
• Device type and operating system
• Pages visited, time spent, and navigation patterns
• Referring website or source

This data is collected through server logs and analytics tools (see Section 8).

2.3 What we do NOT collect

Machine City does not process any payments and does not collect payment card details, bank account information, or any financial data. No transactions occur on the Platform.

3. How We Use Your Information

We use the information we collect to:

• Respond to your enquiries about specific machines
• Connect prospective buyers and sellers and facilitate introductions
• Process and follow up on machine-sale submissions
• Improve and maintain the Platform
• Communicate with you about listings or responses to your enquiries
• Maintain records for our business operations
• Comply with applicable legal obligations

We do not use your information for automated decision-making or profiling that produces legal or similarly significant effects.

4. Legal Basis for Processing

We process your personal data on the following bases under the DPDP Act 2023:

• Consent: When you voluntarily submit a form on the Platform, you consent to us processing your data for the stated purpose (e.g. responding to your enquiry). You may withdraw this consent at any time (see Section 7).
• Legitimate interests: We process certain data (such as basic analytics) for the legitimate business interest of operating, improving, and securing the Platform, where this does not override your rights and interests.

5. Sharing of Information

We do not sell, rent, or trade your personal data to third parties.

We may share your information only in the following limited circumstances:

• Counterparty introduction: If you make an enquiry about a machine, we may share relevant context (such as your stated interest and contact details) with the seller or relevant party, solely for the purpose of facilitating the introduction. Similarly, if you list a machine for sale, your listing details may be shared with prospective buyers.
• Service providers: We work with trusted third-party providers for hosting, database management, email delivery, and analytics. These providers process data on our behalf under appropriate data-processing arrangements.
• Legal requirements: We may disclose data if required by law, court order, or government authority.

6. Data Storage & Security

Your data is stored on servers maintained by our hosting and database service providers. We implement reasonable technical and organisational safeguards to protect your personal information against unauthorised access, loss, alteration, or disclosure.

We retain personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by law. Enquiry and form data is generally retained for the duration of our active business relationship and a reasonable period thereafter for reference and dispute-resolution purposes.

While we take data security seriously, no method of transmission over the internet is completely secure. We cannot guarantee absolute security.

7. Your Rights (DPDP Act 2023)

As a data principal under the Digital Personal Data Protection Act, 2023, you have the following rights regarding your personal data:

• Right of access: You may request a summary of the personal data we hold about you.
• Right to correction: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data in certain circumstances.
• Right to withdraw consent: You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
• Right to grievance redressal: You may contact us to raise a grievance about how your data is handled.

To exercise any of these rights, please contact us using the details in Section 10. We will respond within a reasonable timeframe.

8. Cookies & Analytics

The Platform may use cookies and similar tracking technologies to understand how visitors use the site. We may use a service such as Google Analytics to collect aggregated, anonymised usage statistics (such as page views and session duration). This helps us improve the Platform.

You can control or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform.

If we use Google Analytics, your data may be processed by Google in accordance with Google’s own privacy policy.

9. Children

The Platform and our services are intended for business and commercial use. They are not directed at, and we do not knowingly collect personal data from, minors (individuals under 18 years of age). If you believe a minor has submitted data to us, please contact us immediately.

10. Grievance & Contact

For any questions, requests, or grievances relating to this Privacy Policy or the handling of your personal data, you may contact the Proprietor / Grievance Officer:

We aim to acknowledge your request within 72 hours and resolve it within 30 days. If you are not satisfied with our response, you may approach the Data Protection Board of India once it is constituted under the DPDP Act.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we do, we will revise the “Last updated” date at the top of this page. We encourage you to review this policy periodically. Continued use of the Platform after changes are posted constitutes your acceptance of the updated policy.