This privacy policy explains how Ametheus Holdings Private Limited (“Ametheus”, “we”, “us” or “our”) collects, uses and protects personal information when you use ametheus.com (the “Website”). It is written for visitors in India, including under the Digital Personal Data Protection Act, 2023 (“DPDP Act”), and for international visitors who contact us through the Website.

This policy is effective from 1 December 2020 and was last updated on 12 November 2026. We may change it by updating this page.

Who we are

Ametheus Holdings Private Limited is a commodity and trade company operating this Website. For privacy questions or requests, email [email protected] or use our Contact Us page.

What we collect on this Website

We have reviewed what the live Website actually collects. We do not use Google Analytics, advertising pixels or marketing trackers, and we do not run a newsletter sign-up on the Website.

The personal information we collect through the Website is mainly what you choose to send us:

• Enquiry form (WPForms on Contact Us): name, company name, telephone number, email address, subject, your message, and the business segment you select (for example Chartering, Oil & Gas, Commodities, Trade Finance).
• Email or other direct messages: any details you send to our published email addresses.

We also process limited technical information needed to run and secure the Website (for example IP address and browser type as recorded in hosting, security and form-protection logs). Google reCAPTCHA, which appears on the Contact Us form, may process device and interaction data to help prevent spam, under Google’s terms.

Cookies and similar technologies are described in our Cookie Policy.

How we use this information

We use enquiry details to:

• respond to your request and discuss a possible transaction or service;
• keep internal business records of correspondence; and
• protect the Website against spam and abuse (including through reCAPTCHA and form security).

We do not sell your personal data. We do not use Website enquiry data to send promotional or marketing emails unless you have separately asked us to. We will email you about your enquiry and, where relevant, about a transaction you have started with us.

Legal basis (India and international visitors)

For visitors in India, we process personal data in line with the DPDP Act, generally on the basis of your consent when you submit the form or email us, and as needed to respond to that request and keep appropriate business records. For international visitors, we process the same information in order to take steps at your request before a possible contract, to pursue our legitimate interest in answering trade enquiries, and to keep the Website secure.

You may choose not to submit the form. Some fields are required so that we can reply to you.

Where information is stored and who we share it with

Enquiry submissions are stored in our WordPress / WPForms system on our website host and are sent by email to our company mailboxes so the relevant desk can reply. We use service providers who help us operate the Website, including website hosting, email delivery, Cloudflare (content delivery, security and cookieless web analytics), and Google (reCAPTCHA on the contact form; Google Fonts; YouTube on pages that include video). These providers may process limited data in India or in other countries.

We may also share information if the law requires it, or with professional advisers under confidentiality, or if it is necessary to complete a transaction you have asked us to pursue (for example, as needed to arrange inspection, logistics or banking for an agreed stem).

How long we keep information

We keep enquiry records for as long as needed to handle your request, follow up a potential or agreed transaction, meet record-keeping and legal obligations, and resolve disputes. We then delete or securely archive the information in line with our internal records practice.

Your rights

Subject to applicable law, including the DPDP Act for individuals in India, you may request access to your personal data, correction of inaccurate data, erasure, or a withdrawal of consent where processing is based on consent (this will not affect earlier lawful use). You may also raise a grievance with us.

To make a request, email [email protected]. We may need to verify your identity before fulfilling a request. If you are not satisfied with our response, you may have the right to approach the Data Protection Board of India or another competent authority in your country.

Ametheus Contact Sync — Google data

This private integration reads source contacts and checks destination contacts before creating new destination contacts. It also verifies the authorized account’s email identity. Processed fields may include names, email addresses, phone numbers, organizations, addresses, notes, birthdays and website links. Photos, contact labels and custom fields are not copied.

Source access is read-only. Google’s destination Contacts permission also permits editing and deletion, but the integration code uses it only to read and create contacts. Existing contacts are not edited or deleted; uncertain or potentially duplicate records require review.

The integration runs on a hosted computer and communicates with Google’s official APIs over HTTPS. Contact fields are processed in memory. OAuth credentials and synchronization records are stored locally with restricted filesystem permissions, without application-level encryption. Synchronization identifiers, status and timestamps have no automatic expiry. Hosting-platform processing and backup practices are separate from the integration code; no claim of exclusive Google processing or encrypted backups is made.

For Google-derived data, this section overrides the website’s general advertising, marketing and improvement provisions. The integration code does not use Google-derived data for advertising, sale or AI-model training.

Access may be revoked through each Google account’s third-party connections settings. Revocation does not remove copied destination contacts or retained local records. For assistance stopping synchronization or requesting removal of local integration records, use the website’s existing contact information or email [email protected].

Security

We take appropriate technical and organisational measures to protect personal information we hold, including access controls on the Website and use of HTTPS. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Children

The Website is intended for business users. We do not knowingly collect personal data from children through the Website.

Contact

For privacy questions, requests or grievances: [email protected] or the Contact Us page.