Privacy Policy

This Privacy Policy explains how Rexpack Packaging Machines ("we", "us", "our", or "Rexpack"), a proprietorship based in India with its place of business at Plot No.64, Shramika Nagar, Moula-Ali, Hyderabad - 500 040, Telangana, India, collects, uses, stores, shares, and protects personal data.

We manufacture and supply industrial filling and packaging machinery. We also operate:

• Our public website at https://rexpack.in (enquiries, product information, and contact forms); and
• Our business CRM used to manage leads, customer conversations (including WhatsApp), quotes, and related sales records. That CRM is powered by MaxCore CRM, built by MOFUSA Tech Solutions.

Contact:
Email: info@rexpack.in
Website: https://rexpack.in
Phone: +91 8712344876

Under India's Digital Personal Data Protection Act, 2023 ("DPDP Act"), our responsibilities depend on whose data is involved:

(a) We are the Data Fiduciary for personal data of website visitors, enquiry contacts, and authorised users of our CRM — we decide why and how that data is processed for our business.

(b) We are the Data Fiduciary for personal data of our end customers and leads who contact us (including over WhatsApp). We use MaxCore CRM / MOFUSA Tech Solutions as a Data Processor / service provider to host and operate the CRM on our instructions.

Meta Platforms, Inc. ("Meta") provides the WhatsApp Business Platform and related login / business tools. Meta's handling of data is governed by Meta's own terms and privacy policies.

If you messaged Rexpack over WhatsApp or submitted an enquiry and want to know how your data is handled, contact us at info@rexpack.in.

3.1 Website and enquiry data

• Name, business name, and job title (if provided)
• Email address and phone number
• Machine or product interest, message content, and related enquiry details
• IP address, browser/device information, and timestamps from website access logs

3.2 CRM and WhatsApp business data

When we use our CRM (MaxCore) and connected Meta / WhatsApp Business tools, we may process:

• Lead and customer phone numbers and WhatsApp profile names
• Message content — text, images, documents, audio, video, location, and contact cards
• Message metadata — delivery, read and failure status, timestamps, and conversation identifiers
• Template message delivery and engagement records
• Additional attributes we store against a contact, such as name, email, order reference, tags, quotes, and pipeline notes
• Meta Business Account ID, WhatsApp Business Account ID, phone number IDs, and access tokens needed to operate connected WhatsApp / Meta integrations

3.3 Data received via Meta Login

If we or our authorised users connect Meta / Facebook Login for Business to operate WhatsApp or related Meta assets, we may receive Meta user ID, name, email address, and the Business Accounts / WhatsApp assets granted for management. We request only the permissions necessary to operate our CRM integrations.

3.4 Data we do not collect

• We do not collect payment card numbers on this website.
• We do not use Google Analytics or similar advertising/analytics trackers on this website.
• We do not knowingly collect data from children under 18.
• We do not purchase contact lists from third parties for marketing.

We do not sell personal data. We do not use WhatsApp / end-customer message content to train machine learning models. We do not use end-customer data for third-party advertising.

Where we rely on consent, you may withdraw it at any time by writing to info@rexpack.in. Withdrawal does not affect processing already carried out lawfully, and may limit our ability to respond to enquiries or provide related services.

When we message customers or leads on WhatsApp, we do so only where permitted under applicable law and Meta / WhatsApp Business policies (including valid customer-initiated conversations or approved template messaging where required).

We share personal data only with:

• Meta Platforms, Inc. and its affiliates — as needed to send and receive messages and operate WhatsApp Business / Meta integrations. See WhatsApp Business Data Transfer Addendum and Meta Privacy Policy.
• MOFUSA Tech Solutions / MaxCore CRM — as our CRM platform provider and Data Processor, to host and operate the CRM on our documented instructions. See MaxCore CRM and MOFUSA Tech Solutions.
• Hosting provider — Square Brothers VPS server infrastructure used to host CRM / related application data.
• Professional advisers — auditors, lawyers and accountants, under confidentiality obligations, where required.
• Government authorities, courts or law enforcement — where required by Indian law, a valid court order, or a lawful request.

Service providers that process personal data for us are expected to maintain confidentiality, apply reasonable security safeguards, and process data only for the purposes we instruct.

In a merger, acquisition or business transfer, personal data may transfer to the acquiring entity. We will notify affected individuals where required.

Storage: CRM and related application data is hosted on a Square Brothers VPS server. Website enquiry emails are received at info@rexpack.in. Meta / WhatsApp may also process message data on Meta's infrastructure as part of delivering the WhatsApp Business Platform.

Cross-border transfer: Some providers, including Meta, may process data outside India. We transfer or permit such processing only where allowed under applicable Indian law (including the DPDP Act) and with appropriate safeguards where required.

How long we keep data (retention): We keep personal data only for as long as needed for the purpose it was collected, or as required by law. In plain terms:

We erase or anonymise personal data once the purpose is no longer served and retention is not required by law.

If you are an individual whose personal data we hold as Data Fiduciary, the DPDP Act gives you the right to:

1. Access — obtain a summary of the personal data we process about you and related processing information
2. Correction and completion — have inaccurate or incomplete data corrected or updated
3. Erasure — request deletion where retention is no longer necessary
4. Grievance redressal — raise a complaint with us (see Section 9)
5. Nominate — appoint another individual to exercise these rights on your behalf in the event of your death or incapacity

To exercise any of these, email info@rexpack.in with the subject line "DPDP Rights Request". We will verify your identity and respond within 30 days.

In accordance with the DPDP Act and applicable Information Technology rules:

Grievance Officer: Mr. Mohammed Ghowsoddin
Designation: Proprietor
Email: info@rexpack.in
Address: Plot No.64, Shramika Nagar, Moula-Ali, Hyderabad - 500 040, Telangana, India
Response time: We acknowledge grievances within 48 hours and aim to resolve them within 30 days.

If you are not satisfied with our response, you may lodge a complaint with the Data Protection Board of India when available / applicable.

This section is intended to satisfy Meta's user data deletion requirements for apps and integrations connected to Meta / WhatsApp Business.

Request deletion: Email info@rexpack.in with the subject "Delete My Data", or use our dedicated instructions page: rexpack.in/data-deletion.

Please include the email address, phone number, or WhatsApp number associated with your data so we can locate and verify the request. We erase identifiable personal data within 30 days, except records we must retain for tax, legal, or dispute purposes.

Revoking Meta access: You can remove our app / integration access at any time from Meta Business Suite under Settings → Business Integrations → [Rexpack / connected app] → Remove. This revokes access tokens for that connection.

Data deletion instructions URL: https://rexpack.in/data-deletion

We maintain reasonable security safeguards as required under applicable law, including:

• TLS encryption for data in transit where supported
• Access controls and least-privilege access for authorised personnel
• Encrypted storage of access tokens where applicable
• Hosting on managed VPS infrastructure (Square Brothers)
• Confidentiality expectations for staff and processors handling personal data

No system is completely secure. In the event of a personal data breach, we will notify affected individuals and authorities as required by law.

Our website may use strictly necessary cookies or similar technologies required for basic site operation and security. We do not currently use Google Analytics or advertising cookies on rexpack.in.

You can manage cookies through your browser settings. Blocking strictly necessary cookies may affect some site features.

Our website and CRM may link to third-party websites and services (including Meta, WhatsApp, Google Maps, and MOFUSA / MaxCore). We are not responsible for their privacy practices. Please read their policies before providing personal data.

Our website and CRM are intended for business use and are not directed at children. We do not knowingly process the personal data of anyone under 18. If you believe a child's data has been provided to us, contact info@rexpack.in and we will erase it.

We may update this Policy from time to time. The "Last updated" date at the top will change. For material changes we will provide notice on this page and, where appropriate, by email. Continued use after the effective date constitutes acceptance of the updated Policy.

Rexpack Packaging Machines
Plot No.64, Shramika Nagar, Moula-Ali, Hyderabad - 500 040, Telangana, India
Email: info@rexpack.in
Grievance Officer: Mr. Mohammed Ghowsoddin (info@rexpack.in)
Website: https://rexpack.in
Data deletion: https://rexpack.in/data-deletion