Effective 28 July 2026

Privacy Notice

This notice explains how CSTE Direct, operated by CSTE International (“CSTE”, “we”, “us”), handles personal data when you visit our website or submit a sourcing, webinar or consultation form.

What we collect

We may collect your name, email, phone or WhatsApp number, company or brand details, website links, product requirements, order quantity and sourcing preferences. A consultation questionnaire may also contain your business goals, sales and cost estimates, advertising spend, inventory information and the decision you want help making. We also receive campaign parameters, referring page, IP address, browser information and security-verification results when needed to operate, secure and measure a form.

Why we use it

We use this information to review your enquiry or registration, prepare and coordinate a consultation, research the business decision you ask us to assess, contact you about the request, maintain business records, prevent abuse and measure advertising performance. Qualification scores on sourcing enquiries help our team prioritise follow-up; they do not make decisions that have legal or similarly significant effects.

Consent and choices

Submitting a form is optional. When you submit a consultation questionnaire, you agree that CSTE may use those answers to prepare and coordinate your consultation. That questionnaire does not send its answers or hashed contact identifiers to Meta or Google Analytics. Other lead forms may share hashed contact identifiers with Meta for advertising measurement where their consent wording says so. You can withdraw consent by emailing us. Withdrawal does not affect processing already completed.

Google Analytics and the Meta Pixel may load on marketing pages and some lead forms so we can measure campaign performance. The consultation questionnaire does not load those tools. You can limit cookies through your browser settings. Necessary security technology may also run to protect forms.

Who receives data

Authorised CSTE team members and service providers may process data for us, including our hosting provider, Google Workspace and Sheets, email delivery services and, on relevant pages, Cloudflare Turnstile, Google Analytics and Meta Business Tools. Consultation answers are stored in a dedicated Google Sheet for our team to review. We share only what is needed for the stated purpose and do not sell personal data.

Storage and international processing

Some providers process data outside India. We use their contractual and security safeguards where applicable. We normally retain enquiry data for up to 24 months, then delete or anonymise it, unless an active business relationship, dispute, fraud-prevention need or legal obligation requires longer retention.

Security

We use access controls, encrypted connections, bot protection and restricted service credentials. No online system is completely risk-free, but we limit access to people and providers that need the information.

Your rights and complaints

You may ask what personal data we hold about you, request correction or erasure, withdraw consent, or raise a grievance. To make a request, email CSTEINTERNATIONAL@gmail.com. We may need to verify your identity before acting on a request.

Children

Our business forms are not intended for anyone under 18. Please do not submit a child’s personal data.

Changes

We may update this notice when our practices or legal obligations change. The effective date above shows the latest revision.