1. Introduction

CorporateBuyings.com is committed to ensuring the privacy and security of your personal information. This Policy outlines the types of data we collect, the methods of collection, the purposes for processing, how we share it, and your rights with respect to your personal data.

By accessing our services or using our website, you consent to the practices described in this Policy.

2. Applicability

This Privacy Policy applies to:

• Visitors to our website (www.corporatebuyings.com)
• Registered users (buyers, vendors, and service providers)
• Anyone communicating with our team or using our contact forms
• Business clients using our enterprise procurement or vendor management solutions

3. Types of Information We Collect

A. Identifying Information

• Full Name
• Company Name
• Designation/Title
• GSTIN and PAN (for Indian entities)

B. Contact Information

• Email address
• Mobile phone number
• Official address
• Website URL and domain details

C. Payment and Transaction Information

• Transaction IDs
• Payment gateway tokens (non-sensitive)
• Billing information
• Bank or UPI references

D. Technical and Usage Information

• Browser and device type
• IP address and location (approximate)
• Date and time of access
• Referral source and usage patterns
• Cookies and session IDs

E. Communication Records

• Emails and chat correspondence
• Support tickets
• Contact form messages
• WhatsApp and SMS messages (where permitted)

4. Legal Grounds for Processing

We process your personal data based on the following lawful bases:

• Consent – where you have explicitly agreed to data collection.
• Contractual Necessity – to fulfill a contract or order placed.
• Legal Obligation – to comply with tax, financial, or governmental regulations.
• Legitimate Interest – to improve services, prevent fraud, and ensure security.

5. How We Collect Your Data

• Directly from you: when you register, fill out forms, upload listings, or make a purchase.
• Automatically: via cookies, browser metadata, and analytic tools.
• From third-party platforms: such as payment gateways or social login providers.
• Via communications: through email, WhatsApp, or customer support tickets.

6. How We Use Your Information

• To register and manage your vendor or buyer profile
• To fulfill and process orders, quotations, or procurement requests
• To respond to inquiries and support requests
• To send important notices, confirmations, and system messages
• To market relevant offers (with opt-out options)
• To maintain platform security, fraud prevention, and legal compliance
• To enforce Terms of Use or legal rights

7. Cookies and Tracking Technologies

We use cookies, web beacons, and session trackers to:

• Keep you logged in
• Personalize your browsing experience
• Analyze user behavior and improve site performance
• Track marketing campaign effectiveness

You can disable cookies through your browser settings; however, this may limit certain features of the website.

8. Data Sharing and Disclosure

We do not sell or rent your personal information. We may share your data with:

• Internal team for operational fulfillment
• Payment service providers (Razorpay, Paytm, etc.)
• Vetted third-party service partners (logistics, analytics, cloud storage)
• Government agencies or law enforcement, if legally mandated

9. Data Retention Policy

• For as long as your account is active
• To fulfill ongoing legal and contractual obligations (e.g., invoice retention for 8 years)
• Until you withdraw consent, subject to regulatory exceptions

Archived data is securely anonymized when no longer needed.

10. Data Security Measures

• End-to-end SSL encryption
• Firewall and DDoS protection
• Database access control
• Secure admin dashboards
• Staff confidentiality training and background checks

However, no system is immune to breaches. You acknowledge the risks of online data storage and transmission.

11. Your Rights (as per DPDP Act & GDPR)

You have the right to:

• Access your stored data
• Correct or update inaccurate data
• Delete personal data (right to erasure)
• Withdraw consent at any time
• Object to data processing or direct marketing
• Request data portability in machine-readable formats

Submit your requests by emailing: privacy@corporatebuyings.com or call +91 95945 06071

12. Cross-Border Data Transfers

Your data may be stored or processed in India or overseas (e.g., AWS, Google Cloud servers). All transfers comply with:

• Standard Contractual Clauses (SCCs) for GDPR
• Reasonable security practices for Indian laws

13. Children’s Privacy

We do not knowingly collect data from users under 18 years of age. If we become aware that a minor has submitted data, we will delete it immediately.

14. Third-Party Links and Integrations

Our site may include links to external websites or plugins (e.g., Google Maps, YouTube, LinkedIn). We are not responsible for their privacy practices. Please review their policies before engaging with them.

15. Grievance Redressal

If you believe your data rights have been violated, please raise a complaint with our Data Protection Officer (DPO):

• Name: DPO, CorporateBuyings.com
• Email: privacy@corporatebuyings.com
• Phone: +91 95945 06071

Unresolved complaints may be escalated to India’s Data Protection Board under the DPDP Act, 2023.

16. Data Breach Notification

• Users will be notified via email within 72 hours
• Authorities will be informed as per statutory requirements
• Affected parties will be advised on remedial steps

17. Changes to This Policy

We may revise this Policy from time to time. Updated versions will be posted with an updated “Effective Date.” Continued use implies acceptance.

18. Governing Law

This Privacy Policy is governed by Indian law, especially the DPDP Act, 2023. Any disputes shall fall under the exclusive jurisdiction of Mumbai, Maharashtra.

19. Contact Information

For questions, feedback, or legal concerns regarding this Policy, reach us at:

• Email: support@corporatebuyings.com
• Phone: +91 95945 06071
• Location: Devji Corporate Buyings LLP, Mumbai, India