Privacy policy

This website is operated by [Registered company name] (“Bombay Creamery”, “we”, “us”), the Data Fiduciary for the personal data described here under India’s Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.

This policy covers this website and the partnership enquiries and messages sent through it. It does not cover other websites we link to.

When you submit the partnership enquiry form, we collect:

• your first and last name, email address and mobile number;
• your state, city and pincode, and — if you choose to give them — your address and a landmark;
• the partnership model you are interested in and, optionally, your investment readiness;
• your consent to be contacted, and the date and time you submitted the form.

When you send us a message through the contact form, we collect your name, email address, your phone number if you give it, the topic you choose, your message, your consent to be contacted, and the date and time you sent it.

To protect the forms from spam, we also briefly use your IP address to limit how many enquiries and messages can be sent from one network, and note how quickly a form was completed. The IP address is held in memory for a few minutes and is not saved with what you send.

Like most websites, our hosting provider keeps standard server logs (such as IP address, browser type and the pages requested) for security and reliability.

We do not ask for sensitive personal data such as bank details, Aadhaar or PAN through this website. Please do not include them in either form.

We use the details you give us to:

• reply to your enquiry or message, and talk to you about the partnership you are interested in;
• check whether the model and territory you asked about are available and suit your business;
• keep a record of our conversations with you;
• keep this website and its forms secure and free of spam and fraud;
• meet our legal and regulatory obligations.

We do not sell your personal data, and we do not use it for unrelated marketing.

We process your enquiry or message on the basis of the consent you give when you tick the box on the form. You can withdraw your consent at any time by writing to us (see “Contact us” below). Withdrawing consent does not affect anything we did with your data before you withdrew it, but we will no longer be able to take your enquiry forward or answer your message.

Your enquiry is seen by the Bombay Creamery team that handles partnerships, and a message by the team best placed to answer it. We also use a small number of service providers who process data on our behalf and only on our instructions:

• our website hosting provider;
• the email and spreadsheet or CRM services that deliver and store enquiries and messages for our team.

We may also disclose personal data where the law requires it, to protect our rights or the safety of others, or to a successor if our business is reorganised or sold — in which case this policy will continue to apply to your data.

Some of our service providers may store or process data on servers outside India. Where that happens, we choose providers with appropriate safeguards and transfer data only to countries the Government of India has not restricted.

This website does not use advertising or analytics cookies, and it does not track you across other sites. If we add analytics in future, we will update this policy first and ask for your consent where the law requires it.

If your enquiry leads to a partnership, we keep your details for as long as the partnership lasts and afterwards as required by law. Otherwise, we keep enquiries for up to 24 months after our last contact with you, so that we can pick the conversation up again if a territory opens, and then delete them. Messages sent through the contact form are kept for up to 24 months after our last contact with you, and then deleted.

The website is served over an encrypted (HTTPS) connection, everything sent through the forms is re-checked on our server before it is accepted, and access to it is limited to the people who need it. No system is perfectly secure, but we take reasonable steps to protect your data and will notify you and the authorities of a breach where the law requires it.

Subject to applicable law, you can ask us to:

• tell you what personal data we hold about you and how we have used it;
• correct, complete or update it;
• erase it, where we no longer need it or you withdraw consent;
• nominate someone to exercise these rights for you in the event of death or incapacity.

To make a request, write to us using the details below. We will reply within a reasonable time and may need to confirm your identity first. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

Partnership enquiries are for adults running or planning a business. We do not knowingly collect personal data from anyone under 18.

We may update this policy from time to time. The date at the top of the page shows when it last changed. If a change materially affects how we use data you have already given us, we will tell you.

For questions about this policy, to exercise your rights or to raise a grievance, contact:

• Grievance Officer: [Name, designation]
• [Registered company name]
• [Registered office address]
• Email: [legal@your-domain.com]