Privacy Policy for Trimoss (OPC) Private Limited

Last Updated: October 6, 2025

1. Introduction

Trimoss (Opc) Private Limited (“Trimoss,” “we,” “us,” or “our”) is a company registered in India, specializing in the manufacture and export of glass mosaics. We operate both a business-to-business (B2B) model and a direct-to-consumer (D2C) model. We are committed to protecting the privacy of our clients, partners, and customers by complying with the data protection laws of the countries in which we operate.

This policy outlines our practices regarding the collection, use, and disclosure of personal information and explains the rights individuals have concerning their data.

2. Who We Are

• Legal Name: Trimoss (Opc) Private Limited
• Registered Address: First Floor, Raghukamal Nivas, Nathdwara Road, Jalchakki, Kankroli, Rajsamand, Rajasthan, India 313324
• Contact for Privacy Matters: For any questions or concerns regarding this policy or our data practices, please contact our dedicated privacy team at contact@trimoss.com.

3. Information We Collect

A. Personal Information from Business Clients and Partners (B2B)

We collect information from our B2B clients to facilitate and manage our business relationships. This may include:

• Identity and Contact Data: Name, job title, company name, business email address, and phone number.
• Financial and Transaction Data: Billing addresses, GSTIN/tax information, and details related to contracts, invoicing, and payments.
• Professional and Demographic Data: Industry and professional background.
• Attitudinal Data: Information voluntarily provided through feedback and surveys.

B. Personal Information from Individual Consumers (D2C)

When you make a purchase or create an account on our website, we collect information necessary to fulfill your order and provide customer service. This includes:

• Identity and Contact Data: Full name, email address, shipping address, and phone number.
• Financial and Transaction Data: Payment information (which is processed by secure third-party payment gateways) and purchase history.
• Account Information: Your chosen username and a securely encrypted password.
• Voluntary Information: Data you provide in surveys, product reviews, and customer service inquiries.

C. Information Collected Automatically

When you visit our website, we may automatically collect certain data, including:

• Behavioral Data: Pages you visit, time spent on pages, and your navigation path.
• Technical Data: Your IP address, browser type, device information, and operating system.
• Cookies and Other Tracking Technologies: We use cookies to remember your preferences, analyze website traffic, and personalize content. You can manage your cookie preferences through your browser settings.

4. How and Why We Use Your Information (Legal Basis for Processing)

We collect and process your personal information based on the following legal grounds:

• For the performance of a contract: To fulfill your order, process payments, and manage our business relationship.
• For our legitimate business interests: To improve our products and services, personalize your experience, conduct marketing, and ensure the security of our operations.
• With your consent: For specific purposes, such as sending you marketing communications, for which you have the right to withdraw your consent at any time.

5. How We Share and Disclose Your Information

We do not sell your personal information to third parties. We share data only with a limited number of trusted partners and under strict confidentiality agreements for the following purposes:

• Service Providers: We engage third-party companies to perform services on our behalf, such as payment processing, shipping (e.g., FedEx, DHL), and email marketing. These partners are authorized to use your data only as necessary to provide their services to us.
• Legal and Regulatory Compliance: We may disclose your data to legal and regulatory authorities when required by law or to protect our rights and safety. This includes complying with requests from agencies in the U.S. and other regions in which we operate.
• Business Transfer: In the event of a merger, acquisition, or sale of our assets, your information may be transferred to the new entity.

6. International Data Transfers

As an export-oriented company, your personal data may be transferred to and processed in countries outside of India, including the U.S., Canada, China, the United Kingdom, and the European Union. These countries may have different data protection laws.

We ensure that all cross-border data transfers comply with applicable legal requirements. For transfers to the EU/UK, we use legal safeguards such as Standard Contractual Clauses to ensure that your data receives an adequate level of protection. For transfers from China, we comply with the Personal Information Protection Law (PIPL) requirements.

7. Your Privacy Rights

You have the right to access and control your personal information.

• Right to Access: You can request a copy of the personal information we hold about you.
• Right to Rectification: You can ask us to correct any inaccurate information.
• Right to Opt-Out: You can opt-out of our marketing communications at any time. Every marketing email we send includes an “unsubscribe” link.
• Data Deletion Policy: We do not typically delete personal data upon request as we retain it for ongoing business relationships. We will, however, delete data when the business purpose for which it was collected is no longer valid or after a specified period of inactivity, in accordance with our data minimization policy.

For Customers in Specific Jurisdictions:

• California Residents (CCPA/CPRA): You have the right to request access to and information about the personal information we collect, as well as the right to opt-out of the “sale” or “sharing” of your personal information (though we do not sell or share data as those terms are defined under the law). You can learn more about your rights under the CCPA/CPRA by visiting the California Attorney General’s website.
• European Union and UK Residents (GDPR/UK GDPR): You have additional rights, including the right to data portability and the right to lodge a complaint with a supervisory authority. You can find more information about your rights under the GDPR and the UK GDPR from their official sources.

8. Data Security

We implement a range of technical and organizational measures to protect your information, including:

• Encryption: We use encryption to protect your data both in transit and at rest.
• Access Controls: Access to personal data is restricted to authorized personnel on a “need-to-know” basis. We also use multi-factor authentication (MFA).
• Network Security: Our systems are protected by firewalls and intrusion detection systems.
• Procedural Measures: We conduct regular security audits and have a data minimization policy to only collect necessary data.
• Employee Training: Our employees receive regular training on data security and privacy best practices.

9. Changes to This Privacy Policy

We reserve the right to modify this policy at any time. When we make a material change, we will update the “Last Updated” date at the top of the policy and notify you by:

• Posting a prominent notice on our website.
• Sending an email to our clients and partners.