Last updated: 11 November 2026 · Version 1.0 (company review required before public launch)
Before public launch: The company must confirm its legal entity name and registered address, the correct privacy contact, retention periods, and any processors/international transfers. This draft is not a legal sign-off.
The data controller is the Sarita Handa business entity operating this catalogue. The exact legal entity name and registered address must be inserted before public launch. Privacy contact: uk.info@saritahanda.com.
If you send an enquiry, we collect your name, company/store, city and country, email address, phone number, optional notes, the products in your shortlist, and an enquiry reference. We also record the date/time the enquiry is received and the version of this notice acknowledged.
We use enquiry information to respond to your request, discuss product availability, delivery and payment, and take steps you ask us to take before a possible contract. The intended legal basis is GDPR Article 6(1)(b) where the enquiry is made by an individual seeking those steps, or Article 6(1)(f) legitimate interests where appropriate for a business contact. The controller must confirm the basis for its actual sales process.
Marketing is separate and optional. We will only treat the marketing checkbox as a marketing preference where it is actively selected. The controller must confirm the applicable marketing rules for the recipient's country.
Enquiry notifications are sent using the company's Microsoft 365 service to uk.info@saritahanda.com. The sending mailbox and Microsoft 365 tenant are configured by the company. Microsoft processes data as a service provider under the company's Microsoft agreement. Access to the recipient mailbox should be limited to authorised staff.
This catalogue website does not keep submitted enquiry contents in its own database. The enquiry is delivered by email and may remain in the recipient's Microsoft 365 mailbox and backups under the company's retention, backup and deletion rules. The company must set and publish a specific retention period before public launch. Shortlist selections and cookie preferences are stored locally in your browser; contact form details are not saved in browser storage.
Essential browser storage is used for catalogue shortlist functionality and remembering cookie preferences. Optional analytics and marketing technologies are not enabled by this release. If optional technologies are added later, they must remain off until you choose them. See the Cookie Policy and use Cookie settings on the catalogue to change your choice.
Depending on the circumstances, you may have rights to request access, correction, deletion, restriction, objection, and data portability, and to withdraw consent where processing is based on consent. Contact uk.info@saritahanda.com. You may also complain to the data protection authority in the country where you live or work, or where you believe an infringement took place.
Microsoft 365 may process data in different locations according to the company's tenant configuration and Microsoft contractual terms. The company must confirm its tenant data location, transfer safeguards and any other recipients before public launch.
The company uses access controls and HTTPS for the public production website. Do not submit sensitive personal information through this catalogue. The company should maintain access reviews, mailbox retention controls, backups and an incident response process.
For privacy requests: uk.info@saritahanda.com.