All Time Plastics Limited – Privacy Policy

1. Who We Are

All Time Plastics is a manufacturer and global supplier of plastic products. Our registered/ corporate contact details are available at www.alltimeplastics.com/contact-us. You can contact our privacy team at customer.support@alltimeplastics.com".

2. Scope

This Policy applies where we act as a data controller for the personal data of website visitors, customers, prospects, suppliers, and other individuals who interact with us online or offline. It also covers our use of messaging platforms (e.g., WhatsApp Business and Google RCS) for customer support, notifications, and marketing, where permitted.

3. Definitions

‘Personal Data’ means any information relating to an identified or identifiable individual. ‘Processing’ means any operation performed on Personal Data (collection, storage, use, disclosure, etc.). ‘Controller’ means the entity that determines the purposes and means of Processing.

4. What We Collect

We collect the following categories of Personal Data, depending on your interactions with us:

• Identifiers and contact details (name, email, phone, postal address)
• Account and profile data
• Communications data (including messages you send to us, call recordings where lawful)
• Commercial information (orders, invoices, transaction history)
• Device and usage data (IP address, browser type, pages viewed, referral URLs)
• Cookies and similar technologies data
• Messaging platform interaction data (e.g., message templates used, delivery status, unsubscribe preferences)
• Job application data (if you apply for roles with us)

5. Sources of Personal Data

We obtain Personal Data directly from you, from your devices when you use our services, from publicly available sources, and from service providers or partners who support our operations (e.g., hosting, analytics, messaging and communication providers).

6. Purposes and Legal Bases

We process Personal Data to: (a) provide and improve our products and services; (b) manage accounts, orders, and payments; (c) provide customer support; (d) send service and transactional communications; (e) send marketing communications with your consent or as permitted by law; (f) secure, monitor, and protect our services; (g) comply with laws and enforce our terms; (h) analytics and reporting; (i) manage messaging-platform communications. Our legal bases typically include consent, contract performance, legitimate interests (e.g., service improvement, fraud prevention), and legal obligations.

7. Messaging Platforms (WhatsApp Business & Google RCS)

We use messaging platforms to support customer service and send relevant updates. We comply with each platform’s policies and require explicit, verifiable opt-in for marketing messages where required. We do not deploy general‑purpose AI chatbots via WhatsApp Business. We maintain accurate business identity and branding on RCS and adhere to acceptable use requirements. Templates sent via WhatsApp may be reviewed by the platform for compliance. You can opt out at any time by using provided unsubscribe options or by contacting us.

8. Cookies and Similar Technologies

We use cookies and similar technologies for authentication, remembering preferences, analytics, and to measure campaign performance. You can control cookies through your browser settings. For more information, see our Cookie Notice (if available) or contact us.

9. Data Sharing and Disclosure

We share Personal Data with: (a) our subsidiaries and affiliates; (b) service providers (hosting, analytics, communications, logistics, payment); (c) professional advisors; (d) authorities where required by law; (e) potential acquirers and their advisors in connection with corporate transactions. We require processors to implement appropriate confidentiality and security measures and process data only under our instructions.

10. International Data Transfers

Where Personal Data is transferred outside your country, we implement appropriate safeguards (such as contractual protections) consistent with applicable law. Details are available upon request.

11. Data Retention

We retain Personal Data only for as long as necessary to fulfill the purposes described in this Policy, including to meet legal, accounting, or reporting requirements. We apply specific retention periods by data category (see Annex A) and securely delete or anonymize data when no longer needed.

12. Your Privacy Choices and Rights

Depending on your jurisdiction, you may have rights to: access, correct, delete, restrict or object to processing, withdraw consent, and receive a copy of your data in a portable format. You may also lodge a complaint with your local data protection authority. To exercise your rights, contact customer.support@alltimeplastics.com"

13. Children’s Privacy

Our services are not directed to children, and we do not knowingly collect Personal Data from children. If you believe a child has provided us with Personal Data, please contact us so we can take appropriate action.

14. Security

We implement technical and organizational measures designed to protect Personal Data, including encryption in transit (e.g., TLS/SSL), access controls, monitoring, and staff training. No system is 100% secure; if we become aware of a data incident affecting your Personal Data, we will notify you and regulators as required by law.

15. Changes to This Policy

We may update this Policy from time to time. We will post the updated version with an updated effective date and, where appropriate, notify you of material changes. Prior versions will be available upon request.

16. Contact Us

Questions or requests regarding this Policy can be directed to customer.support@alltimeplastics.com" or through the contact options listed on our website.

Annex A – Illustrative Data Retention Schedule

• Account & profile data: for the life of the account and up to 3 years after closure (or longer if required by law).
• Transaction & billing records: 8 years (or as required by tax/financial laws).
• Customer support communications: 2 years after resolution.
• Marketing preferences and consent logs: while active + 3 years.
• Device/analytics logs: 12–24 months (aggregated/anonymized thereafter).
• Messaging platform interaction logs: 24 months or as required by platform policy and legal obligations.

Annex B – Platform & Policy References

• WhatsApp Business Messaging Policies and Terms (Meta)
• Google RCS Business Messaging – Terms, Acceptable Use Policy, and Security Documentation
• Applicable data protection laws (e.g., India’s DPDP Act, GDPR where applicable)