CRA is committed to protecting your privacy. This Privacy Policy explains what personal data we collect through the Website, how we use it, who we share it with, and what rights you have in relation to your data.
Please read this policy carefully. By using the Website, you confirm that you have read and understood how we handle your personal data.
1. Who We Are
CRA (referred to as 'CRA', 'we', 'us', or 'our') is the data controller for personal data collected through cra.energy. We are an engineering company specialising in combustion systems, emissions control, and biogas processing solutions, headquartered in India with international project delivery.
Data Controller Contact: contact@cra.energy
2. What Data We Collect
2.1 Information You Provide Directly
When you use contact forms, inquiry submissions, or request a proposal through the Website, we may collect:
- Full name
- Job title and organisation name
- Business email address
- Phone number
- Country / region
- Project description and technical enquiry details
- Any other information you voluntarily provide in correspondence
2.2 Information Collected Automatically
When you visit the Website, we and our technology partners may automatically collect:
- IP address and approximate geographic location (country / city level)
- Browser type, version, and operating system
- Pages visited, time spent, and navigation path on the Website
- Referral source (e.g., search engine, referring website)
- Date and time of visit
This data is collected through cookies and similar tracking technologies. Please refer to our Cookie Policy below for full details.
2.3 Information from Analytics Platforms
We use Google Analytics 4 (GA4) and Google Search Console to understand how users interact with the Website. These tools may collect aggregated, anonymised usage data that helps us improve Website performance and content relevance.
3. How We Use Your Data
CRA uses personal data for the following purposes:
- To respond to enquiries, requests for proposals, and project-related communications
- To assess project scope and determine whether CRA's capabilities are a suitable fit
- To send information about CRA's products, services, and technical updates, where you have requested or consented to this
- To improve the Website's content, structure, and user experience through analytics
- To maintain records of client and prospect interactions for business continuity
- To comply with applicable legal and regulatory obligations
CRA does not use your personal data for automated decision-making or profiling.
4. Legal Basis for Processing
Where applicable data protection law requires us to identify a legal basis for processing, we rely on:
- Legitimate interests — to respond to business enquiries, manage client relationships, and improve our Website
- Contract performance — where data processing is necessary to progress a project engagement or formal agreement
- Legal obligation — where we are required to retain or disclose data under applicable law
- Consent — for optional communications such as newsletters or marketing updates, where you have opted in
5. Who We Share Data With
CRA does not sell, rent, or trade personal data. We may share data with:
- CRA's internal engineering, commercial, and project teams on a need-to-know basis
- Trusted third-party technology providers (e.g., website hosting, CRM, email platforms) under strict contractual data protection terms
- Analytics providers (including Google) in accordance with their own privacy and data policies
- Professional advisors, auditors, or legal counsel where required
- Government authorities or regulators where required by applicable law
6. International Data Transfers
CRA operates internationally and your data may be processed in countries outside your own. Where data is transferred outside your home jurisdiction, we take appropriate measures to ensure your data is protected in accordance with applicable law, including the use of standard contractual clauses or equivalent safeguards where required.
7. Data Retention
We retain personal data for as long as reasonably necessary to fulfil the purposes described in this Policy, or as required by applicable law. Enquiry data is typically retained for up to [3 years — please confirm] from the date of last contact. Analytics data is retained in line with the retention settings of the relevant platform.
You may request deletion of your personal data at any time (see Section 9 below).
8. Data Security
CRA implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. These include SSL/TLS encryption on the Website, access controls, and vendor security assessments.
No method of data transmission over the internet is entirely secure. While we take reasonable precautions, we cannot guarantee absolute security.
9. Your Rights
Depending on your location and applicable law, you may have the following rights in relation to your personal data:
- Access — to request a copy of the personal data we hold about you
- Rectification — to request correction of inaccurate or incomplete data
- Erasure — to request deletion of your data, subject to any legal retention obligations
- Restriction — to request that we limit processing of your data in certain circumstances
- Objection — to object to processing based on legitimate interests
- Portability — to receive your data in a structured, machine-readable format where technically feasible
- Withdrawal of consent — where processing is based on consent, you may withdraw it at any time
To exercise any of these rights, please contact us at: contact@cra.energy. We will respond within a reasonable timeframe and in accordance with applicable law.
10. Children's Privacy
The CRA Website is not directed at or intended for use by persons under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, please contact us immediately at contact@cra.energy so we can delete it.
11. Updates to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The updated policy will be published on this page with a revised effective date. We encourage you to review this Policy periodically.
12. Contact & Complaints
For any privacy-related questions or concerns, please contact:
CRA — Data Privacy
Email: contact@cra.energy
Website: www.cra.energy
If you have concerns about how we handle your data and are not satisfied with our response, you may have the right to lodge a complaint with your local data protection authority.