Privacy Policy

Exim-Indis is a specialist chemical solutions company providing custom synthesis, pharmaceutical intermediates, API sourcing, contract research and manufacturing (CRAMS), supply chain support, and regulatory compliance services to clients across the life sciences, biotechnology, agrochemical, food, flavour, and fragrance industries.

Exim-Indis operates as part of the ExSyn Corp group of companies, with offices and operations in Houston (Texas), Europe, India, and China. For the purposes of data protection law, Exim-Indis acts as the data controller for personal data collected through this website.

We collect personal data in the following circumstances:

When you browse our website:

• IP address and general location data
• Browser type, version, and operating system
• Pages visited, time spent on site, and referring URLs
• Device identifiers

This data is collected automatically via cookies and analytics tools and is used solely to improve website performance and user experience.

When you contact us or submit an enquiry:

• Full name
• Job title and company name
• Email address and telephone number
• Country of residence
• The content of your message or enquiry

When you submit a request for services or samples:

• Business name and address
• Purchasing or procurement details
• Regulatory and compliance documentation (where required)

When you apply for a position with us:

• CV/résumé, employment history, and qualifications
• Contact details and references

We use your personal data for the following purposes:

• To respond to your enquiries and provide the services or information you have requested
• To manage business relationships — including quoting, ordering, invoicing, and after-sales support
• To deliver and improve our services — including custom synthesis, sourcing, and supply chain projects
• To ensure regulatory compliance — including customs documentation, export/import regulations, and industry-specific compliance requirements (FDA, REACH, TSCA, GMP)
• To operate and improve our website — using analytics data to enhance usability and content
• To process job applications — where you have voluntarily submitted your information
• To send service-related communications — where you have opted in, or where we have a legitimate business interest to do so

We will not use your personal information for unsolicited marketing without your prior consent.

Where applicable under the EU General Data Protection Regulation (GDPR) and other data protection laws, we process your personal data on one or more of the following legal bases:

• Legitimate interests — to operate our business, respond to enquiries, and manage client relationships
• Contractual necessity — to fulfil service agreements and procurement obligations
• Legal obligation — to comply with applicable regulatory, customs, and export/import requirements
• Consent — where you have specifically opted in to receive communications or for the use of non-essential cookies

Exim-Indis does not sell your personal information to third parties. We may share your data in the following circumstances only:

• Within the ExSyn Corp group — including subsidiaries and affiliated companies, for the purposes of delivering services, data storage, or processing
• With service providers and vendors — including IT partners, logistics providers, and professional advisors who are contractually bound to protect your data
• With regulatory and government bodies — when required to comply with applicable laws, including export/import control regulations, customs authorities, or court orders
• With INDIS Network partners — where necessary to fulfil international distribution or sourcing requirements, subject to appropriate data protection agreements

We ensure that any third party receiving your personal data is subject to equivalent privacy and security obligations.

As a global business with operations in the United States, Europe, India, and China, your personal data may be transferred to and processed in countries outside your home jurisdiction. Where such transfers occur, Exim-Indis will ensure that appropriate safeguards are in place — including standard contractual clauses approved by the European Commission, or equivalent mechanisms as required by applicable law.

Exim-Indis implements reasonable and appropriate technical, administrative, and physical security measures to protect your personal information against unauthorised access, loss, misuse, disclosure, or alteration. These include:

• Secure server infrastructure and encrypted data transmission (SSL/TLS)
• Access controls and authentication protocols
• Regular security reviews and staff data protection training

While we take all reasonable precautions, no data transmission over the internet can be guaranteed as completely secure.

We retain your personal data only for as long as is necessary for the purposes described in this policy, or as required by applicable law. Specifically:

• Enquiry and contact data: Up to 3 years from last contact
• Client and transaction records: As required by applicable financial, tax, and regulatory law (typically 7 years)
• Job applications (unsuccessful): Up to 12 months, unless you consent to longer retention
• Website analytics data: Anonymised after 26 months

After the applicable retention period, your data is securely deleted or anonymised.

Depending on your location and applicable data protection law, you may have the following rights regarding your personal data:

• Right of access — to request a copy of the personal data we hold about you
• Right to rectification — to request correction of inaccurate or incomplete data
• Right to erasure — to request deletion of your data, where no overriding legal basis applies
• Right to restriction — to request that we limit how we process your data
• Right to data portability — to receive your data in a structured, machine-readable format
• Right to object — to processing carried out on the basis of legitimate interests
• Right to withdraw consent — at any time, where processing is based on consent

To exercise any of these rights, please contact us at the details below. We will respond within 30 days of receiving your request.

Our website may contain links to third-party websites, including our parent company ExSyn Corp (www.exsyncorp.com) and the INDIS Group (www.indisgroup.com). Exim-Indis is not responsible for the privacy practices or content of those external sites. We encourage you to review the privacy policies of any third-party sites you visit.

Our website and services are directed at business professionals and are not intended for use by individuals under the age of 18. We do not knowingly collect personal data from minors.

Exim-Indis reserves the right to update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or operational needs. The updated policy will be published on this page with a revised effective date. We encourage you to review this page periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or how your personal data is handled, please contact us:

Exim-Indis
📧 info@exim-indis.com
🌐 www.exim-indis.com

For matters relating to our parent company, ExSyn Corp:
ExSyn Corp, G10-11 Creative Estate, NM Joshi Marg, Lower Parel East, Mumbai 400 011, India