Skip to content
HCAS ResourcesE-waste recycling
Legal

Privacy Policy

This website does one thing with personal data: it takes what you type into the enquiry form and emails it to us. There are no cookies, no analytics, no trackers and no database. This page explains that in full.

Last updated
25 August 2026
Applies to
hcasresources.com and the enquiry form on it

Who we are

HCAS Resources Private Limited is the data fiduciary for the personal data submitted through this website. In the language of the Digital Personal Data Protection Act, 2023, that means we are the entity that decides why and how your personal data is processed, and we are answerable to you for it.

Legal name
HCAS Resources Private Limited (Private Limited Company)
Registered office
Khasra No. 63, 64, Hapur Road, Industrial Area, Peepli Khera, Meerut, Uttar Pradesh 245206, India
GSTIN
09AAHCH3508A1ZZ

What this policy covers

This policy covers the website at hcasresources.com and the enquiry form published on it. That form is the only place on this website where personal data is requested. There is no account, no login, no newsletter sign-up and no payment page.

It does not cover personal data you give us in other ways — a phone call, an email sent straight to our inbox, a WhatsApp message, or documents exchanged during a collection. Those are handled under the same principles, but they sit outside this website. It also does not cover the commercial terms of any collection, buy-back or recycling agreement, which are dealt with separately in writing.

The personal data we collect

Every item below is provided voluntarily by you, by typing it into the enquiry form and pressing send. We collect nothing else, and nothing at all if you simply read the site.

Your name
Required. Must be at least two characters. Used to address our reply.
Organisation
Optional. The company or institution you are enquiring on behalf of. If given, it is also used in the subject line of the email we receive.
Email address
Optional in itself, but you must give either an email address or a phone number so we can reply. If given, it is set as the reply-to address on the email, so replying to you is a single click.
Phone number
Optional in itself, subject to the same rule as the email address.
Pickup location
Optional. Free text — most people write a city or area.
Type of material
Optional. Chosen from a fixed list of categories; you cannot type into it.
Approximate quantity
Optional. Free text, for example a unit count or a number of pallets.
Details
Optional free text, up to 4,000 characters. Whatever you choose to write here reaches us — please include what helps us plan the collection, and nothing more.

Only your name is genuinely mandatory, alongside the rule that at least one of email or phone must be filled in so that a reply is possible. Any field you leave blank is left out of the email entirely — it is not sent as an empty value.

The hidden anti-spam field

The form contains one further field, labelled Website, which is positioned off-screen and hidden from assistive technology. It exists to catch automated submissions: people never see it, so they never fill it in, whereas bots usually do. If it arrives filled in, the submission is discarded, no email is sent and nothing is recorded. The screen still shows a success message, so that the bot stops retrying.

What we do not collect

Our application code does not read or record your IP address, your device, your browser, your location or your journey through the site, and it does not build any profile of you. Routine operational logging by our hosting provider is described in section 06.

Why we use it, and our lawful basis

There is one purpose: to read your enquiry and respond to it, and then to carry out any business relationship that follows from it — quoting, arranging a collection, and issuing the associated documentation.

Our lawful basis is your consent, given under the Digital Personal Data Protection Act, 2023 by voluntarily completing and submitting the form for that stated purpose. Using the form is entirely optional; you are free to telephone or email us instead and give us only what you choose to give.

We do not use what you submit for anything else. Specifically:

  • we do not add you to a marketing or mailing list;
  • we do not profile you or score you;
  • no decision affecting you is made automatically — a person reads every enquiry;
  • we do not combine your enquiry with data bought from anyone else.

Cookies, analytics and tracking

This website sets no cookies. Not essential cookies, not preference cookies, not analytics cookies, not advertising cookies. That is why you have not been shown a cookie banner — there is nothing to consent to.

There is also:

  • no analytics of any kind — no Google Analytics, no product analytics, no page-view counter;
  • no advertising pixels, conversion tags or retargeting scripts;
  • no session recording and no heatmaps;
  • no third-party embeds — no embedded maps, videos, chat widgets, social buttons or hosted forms;
  • no web fonts fetched from a third party. The fonts are packaged with the site at build time and served from this same domain, so your browser makes no request to Google Fonts or any other font host.

The practical effect is that reading a page here does not tell any third party that you visited, and we ourselves do not know how many people read it.

Who your data is shared with

We do not sell personal data, we do not share it for advertising, and we do not rent or trade contact lists. Your enquiry passes through exactly two third parties, both of them necessary to get it to us.

  1. Resend — email delivery. When you submit the form, our server assembles the fields you filled in into a plain-text message and hands it to Resend over its API for delivery to our inbox. Your email address, if you gave one, is attached as the reply-to address. Resend acts as a data processor on our instructions, and keeps its own delivery logs under its own retention policy. Resend operates outside India, so your enquiry may be processed on servers located outside India.
  2. Our hosting provider. The company whose infrastructure serves these pages and runs the code that handles the form. In the ordinary course of operating that infrastructure it may generate routine server logs containing request metadata such as an IP address and the URL requested. We do not use those logs for analytics or marketing, and we do not export them.

Beyond those two, we disclose personal data only where we are required to by law, by a court, or by a regulator acting within its powers, or to our professional advisers where strictly necessary and under a duty of confidence.

Where it is kept, and for how long

This application has no database. Your enquiry is not written to any datastore, file or spreadsheet that we control — it passes through the server, becomes an email and is gone from the application. Reloading the page after you submit brings nothing back.

Once delivered, your enquiry lives in our email inbox, like any other message sent to us. We keep it there for as long as we need it to deal with your enquiry and any business relationship that grows out of it, together with any period for which we are obliged to retain records for tax, GST and environmental-compliance purposes. Enquiries that lead nowhere are cleared out during routine housekeeping of the inbox.

You can ask us to delete your enquiry sooner. See section 09.

If an email fails to send

We would rather tell you this than not. If the email cannot be delivered — the provider is down, or the credentials are missing — the server writes the enquiry to its error log so that your message is not silently lost and we can follow it up by hand. The log entry contains the same field values you submitted.

Those logs sit with our hosting provider, are visible only to us, and are rotated and discarded by the provider on its own schedule. We do not copy them anywhere else and we do not process them for any other purpose. If you would prefer this never to happen to your details, contact us by telephone or by emailing info@hcasresources.com directly instead of using the form.

Your rights under the DPDP Act, 2023

As a Data Principal under the Digital Personal Data Protection Act, 2023, you have the right to:

  • ask us for a summary of the personal data we hold about you and how we are processing it, and with whom it has been shared;
  • ask us to correct, complete or update anything inaccurate or out of date;
  • ask us to erase personal data we no longer need for the purpose it was given for, or where you have withdrawn your consent, unless we are required by law to keep it;
  • withdraw your consent at any time, and as easily as you gave it — after which we stop processing, though this does not undo processing already lawfully carried out;
  • nominate another person to exercise these rights on your behalf in the event of your death or incapacity;
  • have any grievance about our handling of your data heard and answered by us.

How to exercise them

Email info@hcasresources.com — ideally from the address you used on the form — or write to us at the registered office above, saying what you would like done. There is no form to fill in and no charge. We will respond within a reasonable period. We may ask you for enough information to satisfy ourselves that the data is yours before we act on a request.

If you are not satisfied with how we have handled a grievance, you may complain to the Data Protection Board of India in the manner provided under the Act. The Act’s provisions and the rules under it are being brought into force in stages; we will meet each obligation as it takes effect.

How we protect it

Proportionate measures for what is, in practice, an email:

  • the form is submitted over an encrypted HTTPS connection;
  • the enquiry is passed to the email provider over an authenticated HTTPS API call;
  • the credentials for that provider are held as server-side environment variables and are never sent to your browser;
  • that call is given a hard ten-second timeout, so a slow provider cannot leave your submission hanging;
  • the application stores nothing, which removes an entire category of risk: there is no database here to breach.

No method of transmission or storage is completely secure, and ordinary email is not a confidential channel. Please do not send passwords, bank or card details, Aadhaar, PAN or other identity numbers, or any sensitive personal information through this form. We will never ask you for them here.

Children

This is a business service for organisations that need electronic waste collected. It is not directed at children, it is not designed to appeal to them, and we do not knowingly collect the personal data of anyone under the age of eighteen. We do not track children, we do not advertise, and we run no profiling of any visitor.

If you believe a child has submitted personal data through the enquiry form, email us and we will delete it from our inbox.

Changes to this policy

If what this website does changes — if we add analytics, add a field to the form, or begin storing enquiries — we will update this policy before or at the same time as that change, and revise the “last updated” date at the top of this page. That date moves only when the wording actually changes; it is not generated automatically on each deployment.

We keep no mailing list, so we cannot notify you of a revision. The current version always lives at this address. Where a change materially affects personal data we already hold, we will bring it to your attention directly and, where the law requires it, ask for fresh consent.

Contact and grievances

For any question about this policy, to make a request under section 09, or to raise a grievance about how we have handled your personal data, contact us at:

HCAS Resources Private LimitedKhasra No. 63, 64, Hapur Road
Industrial Area, Peepli Khera
Meerut, Uttar Pradesh 245206
India
info@hcasresources.com
+91 00000 00000

Our Terms of Service govern your use of this website.

Ready to clear a site?

Tell us what you have and where it is. We'll come back with a collection plan and a quote for anything with recoverable value.