Privacy Policy

01What this policy covers

This policy covers the mynkleenergies.in website — what happens to information when you read these pages, use the demo calculator, or send us an enquiry. Mynkle Energies is responsible for that information.

It does not cover client engagements. Once work begins, the data we handle — emissions records, meter readings, invoices, activity data, the contents of a verification file — is governed by the engagement letter and any confidentiality or data-processing terms signed with it, not by a website policy. Verification files in particular are held under the confidentiality obligations that come with ISO 14064-3 work.

02What we collect

What you send us

Two forms on this site send us anything: the enquiry form on the contact page, and the verification application on the verification page. Between them they collect:

• Your name.
• Your email address.
• Your organization.
• Your phone number and country code, if you choose to give one.
• Which service you are asking about, and — on the contact form — roughly what you need.
• Whatever you write in the message box.
• On the verification application only: your sector, approximate annual emissions, which scopes you are interested in, and whether you have been verified before.

Every one of those is something you typed. There is no hidden field, no fingerprinting script, and no enrichment step that looks your company up somewhere else and appends what it finds.

What is collected automatically

• Aggregate visit statistics. Which pages were viewed, roughly where in the world from, and which of a handful of actions occurred — an enquiry sent, the calculator run, the registry filtered. These are counts. They carry no cookie, no identifier, and nothing that resolves to a person. See the cookies page for exactly what this is and is not.
• Server logs. Our hosting provider records ordinary request logs, which include IP addresses, for security and to keep the site running. We do not use them to build any profile of a visitor.

03What we do not do

• We do not set cookies. Not one, not even a functional one.
• There are no accounts, no logins, and no passwords.
• We do not sell, rent or trade personal information, and we run no advertising or advertising trackers.
• The site makes no third-party requests at all. Fonts and icons are served from this domain rather than from a font network, so loading a page tells nobody but us that you did.
• We do not use your enquiry to train anything, and we do not add you to a mailing list because you asked a question.

04Why we hold it, and on what basis

We use what you send for one purpose: to answer you, and to carry out the work if you go on to engage us. An enquiry about verification is read to scope the verification; an enquiry about services is read to reply to it.

The basis for holding it is that you asked us to contact you — you filled in a form whose only purpose is a reply. Where the Digital Personal Data Protection Act, 2023 applies, that is your consent, given for the stated purpose, and you can withdraw it at any time by writing to director@mynkleenergies.in. For visitors in the EU or UK, the equivalent bases are your consent and our legitimate interest in responding to a business enquiry addressed to us.

05Where it goes and who sees it

An enquiry is posted to this site’s own server, formatted, and delivered to our inbox. It is not stored in a database on this website — the site keeps no copy of its own. From there it lives where our business correspondence lives, readable by the small number of people at Mynkle Energies who need to act on it.

Three service providers are involved in running this site, and no others:

• Vercel — hosting, and the aggregate, cookieless visit statistics described above.
• Our email delivery provider — the service that carries a submitted enquiry from this site to our inbox.
• Our email and business-records provider — where the enquiry is then read and kept.

These providers process the information on our instructions and for no purpose of their own. Some of them operate infrastructure outside India, which means an enquiry may be processed abroad. We will tell you which providers we currently use, by name, if you ask.

We will also disclose information where the law genuinely requires it — a court order, a regulator with the power to compel it. We will not do so on an informal request.

06The public registry

The verification registry is published deliberately: that is what makes a verification statement checkable by a third party. It lists organizations, not individuals, and it lists them only with the verified organization’s agreement.

Each entry states what was verified — scope, reporting period, assurance level — and nothing more. No grade, no score, no contact details of the people who did the work on the client’s side. If a listed organization asks to be removed, we remove the listing; withdrawing a listing does not alter the verification statement itself, which is a separate document.

07How long we keep it

An enquiry that goes nowhere is kept while it is still plausibly live correspondence and then deleted. An enquiry that becomes an engagement is kept with the engagement records, for as long as our professional and tax obligations require — verification records in particular have retention obligations attached to them. Aggregate visit statistics carry nothing personal and are kept as ordinary analytics history. If you want your enquiry deleted sooner, ask, and we will delete it unless we are required to keep it.

08How it is protected

Everything travels over an encrypted connection. The site holds no database of enquiries to be breached, and collects no special-category data, no payment details and no identity documents. Access to the inbox is limited to the people who need it. No website can promise perfect security, and we will not pretend otherwise — what we can say is that the smallest amount of data is the strongest protection available, and this site is built to collect very little.

09Your rights

Write to director@mynkleenergies.in and you can ask us to:

• Tell you what we hold about you, and where it came from.
• Correct anything that is wrong.
• Delete it — which we will do unless a legal or professional obligation requires us to keep it, in which case we will tell you which one.
• Stop contacting you.

We aim to respond within thirty days. Under the Digital Personal Data Protection Act, 2023 you may also nominate someone to exercise these rights on your behalf, and you may complain to the relevant data protection authority if you are not satisfied with how we have handled a request. Visitors in the EU or UK have the equivalent GDPR rights, including data portability and objection to processing, and may complain to their own supervisory authority.

10Children

This is a business-to-business site. It is not directed at children, and we do not knowingly collect information from them. If a child has sent us something through a form, tell us and we will delete it.

11Changes to this policy

If what the site collects changes, this page changes with it — in the same release, not afterwards. The date at the top of this page is the date of the current wording. A change that materially affects information you have already sent us will be notified to you directly rather than left here to be discovered.