Anantay Exports Pvt. Ltd., trading as Stoneza, is the Data Fiduciary responsible for personal data collected through stoneza.in and through our sales channels. We are a natural stone manufacturer, supplier and exporter operating from Bhilwara, Rajasthan.
This policy explains what we collect, why, how long we keep it, who we share it with and what you can ask us to do. It is written to align with the Digital Personal Data Protection Act, 2023 and the Information Technology (Reasonable Security Practices) Rules, 2011.
We collect what we need to quote and deliver stone, we do not sell your data, and you can ask us to correct or delete it by writing to our Grievance Officer.
CategoryWhat it includesHow we get itEnquiry detailsName, phone or WhatsApp number, email address, your professional role, project type, approximate area, city or site location, stone of interest, messageWebsite enquiry formsCorrespondenceEmails, WhatsApp messages, drawings, BOQs and tender documents you send us, notes of calls, and call outcome recordsDirectly from youOrder and delivery dataBilling and shipping address, GSTIN, PAN where required for invoicing, consignee contact, site access detailsDirectly from you at order stageTechnical dataIP address, device and browser type, pages viewed, referring source, approximate location derived from IPCookies and analytics, automatically
We do not knowingly collect financial account credentials.
We do not operate an online checkout and we never ask for card details through this website.
We do not deliberately collect sensitive categories of personal data, and we ask that you do not send them.
To respond to your enquiry — prepare a quotation, confirm availability, arrange samples and lead times.
To fulfil an order — production scheduling, quality records, crating, dispatch, transport booking, delivery and export documentation.
To meet legal obligations — GST invoicing, export documentation, statutory books of account, tax and audit requirements.
To manage the relationship — service updates, order status, claims handling, and keeping a record of what was quoted and supplied so a later project phase can be matched.
Marketing, only with your consent — occasional emails or messages about new stones, collections and events. You can withdraw at any time.
To improve the website — aggregated analytics on which pages and products are used.
Our lawful basis is your consent, given when you submit an enquiry or opt into marketing, and the legitimate uses permitted under the DPDP Act for performing a contract you have entered into and for complying with law.
We do not sell personal data and we do not share it for third-party advertising.
We share the minimum necessary with:
Transport and logistics partners — consignee name, delivery address and contact number, so material can be delivered.
Customs brokers, freight forwarders and banks on export orders, for documentation and remittance.
Technology service providers that operate our website hosting, email, cloud storage and customer relationship management systems, under contractual confidentiality obligations.
Professional advisers — auditors, chartered accountants and legal counsel, where required.
Government and regulatory authorities, where disclosure is required by law, court order or a lawful investigation.
Some of these providers process data on servers outside India. Where they do, we require contractual protections consistent with Indian law before data is transferred.
DataRetentionEnquiries that do not convert to an orderUp to 36 months from last contact, then deleted or anonymisedCustomer and order records, invoices, statutory documents8 years from the end of the relevant financial year, as required under Indian tax and company lawQuality, lot and batch records tied to a supplied projectRetained for the life of the commercial relationship, so a later phase can be matched to the original lotMarketing consent recordsUntil consent is withdrawn, plus a record of the withdrawalWebsite analyticsUp to 26 months, in aggregated form
We apply reasonable security practices proportionate to the data we hold:
Access control on business systems.
Role-based permissions so staff see only what their role requires.
Encrypted transmission over HTTPS.
Confidentiality obligations on employees and service providers.
No system is completely secure. We cannot guarantee absolute security, and we ask that you do not send confidential commercial or personal information over unsecured channels where a secure alternative exists.
If a personal data breach occurs, we will notify the Data Protection Board and affected individuals as required by law.
Subject to verification of your identity, you may:
Access a summary of the personal data we hold about you and how it is processed.
Correct or complete inaccurate or outdated data.
Erase data where it is no longer needed for the purpose it was collected and no legal obligation requires us to keep it.
Withdraw consent at any time, including for marketing. Withdrawal does not affect processing already carried out, and may mean we can no longer progress an enquiry.
Nominate an individual to exercise your rights in the event of your death or incapacity.
Complain to our Grievance Officer, and thereafter to the Data Protection Board of India.
Write to kanishk.ostwal@stoneza.in with the subject line DATA REQUEST.
We respond within 30 days.
We use a small number of cookies and similar technologies:
Required for the site to function and to remember your preferences. These cannot be switched off.
Aggregated measurement of how the catalogue is used, so we can improve it.
Where enabled, these help us understand which campaigns bring genuine project enquiries.
Non-essential cookies are set only where you have consented through the cookie notice.
You can change your choice at any time through the cookie settings link, or block cookies in your browser, accepting that some features may not work.
This site is intended for architects, designers, contractors, developers and trade buyers.
It is not directed at children, and we do not knowingly collect personal data of anyone under 18.
If you believe a child has provided us data, write to our Grievance Officer and we will delete it.
In accordance with the Information Technology Act, 2000 and the rules made under it, and the DPDP Act, 2023, the contact details of our Grievance Officer are:
Name: Kanishk Ostwal
Designation: Director, Anantay Exports Pvt. Ltd.
Email: kanishk.ostwal@stoneza.in
Address: Anantay Exports Pvt. Ltd., [Street address], Bhilwara, Rajasthan [PIN], India.
Response time: Acknowledgement within 48 hours; resolution within 30 days
We may update this policy as our business, systems or the law change.
The last updated date at the top of this page shows when it was last revised.
Material changes will be notified on this page.
Continued use of the site after a change constitutes acceptance of the revised policy.
This policy is governed by the laws of India, with exclusive jurisdiction in the courts at Bhilwara, Rajasthan.
Write to us with your invoice number or enquiry reference and you will get a named person, not a ticket queue.
Email: sales@stoneza.in
Phone: +91 78771 08154
Kanishk Ostwal
Email: kanishk.ostwal@stoneza.in
Anantay Exports Pvt. Ltd.
[Street address], Bhilwara,
Rajasthan [PIN], India
GSTIN: 08AAWCA2095G1Z9
PAN: AAWCA2095G
UDYAM: UDYAM-RJ-17-0182591
