Privacy Policy

This Privacy Policy (“Policy”) governs the collection, processing, use, storage, disclosure, retention of and protection of personal data (“Personal Data”) by Bambrew Plant Fiber Technology Private Limited (“Bambrew”, “Company, us, we, our”). This policy is applicable to any user that accesses our website https://www.bambrew.in/ (“Website”) or has shared any information with us. We value your privacy, and our Company is committed to safeguarding your personal information and ensuring its security.

This Policy applies to any visitor to our Website including but not limited to our business customers and their authorized representatives, vendors, logistics partners, service providers and suppliers, job applicants, and/or any other person who provide Personal Data to the Company.

This Policy is framed in accordance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”), and the Information Technology Act, 2000.

1.Data we collect:

We collect Personal Data that is voluntarily provided to us when you access our website or create an account, place orders, submit inquiries, apply for employment, or otherwise interact with us through email, digital platforms or offline communications.

The categories of Personal Data collected include:

i.Business Customer

We collect and process personal data from our Business Customers, which includes their name, designation, business email address, and phone number. Additionally, we maintain company details such as the company name and GSTIN, alongside user IDs and authentication credentials, which are stored in an encrypted format to ensure security.

ii.Payment Information

We do not store credit card, debit card, or banking credentials. All payment transactions are processed securely through third-party payment gateways in compliance with applicable laws and PCI-DSS standards.

iii.Recruitment Information

We collect and process recruitment information, including curriculum vitae (CVs), work experience, educational qualifications, and any other relevant details voluntarily submitted by candidates during the job application process.

iv.Technical & Usage Data

We collect and process technical and usage data, including IP addresses, browser types, device identifiers, and access logs, as well as website usage information and cookies to monitor and improve our digital services.

v.Vendor, Supplier & Partner Information

We collect and process vendor, supplier, and partner information, including the contact details, business identifiers, and contractual information of our logistics partners, suppliers, consultants, certification agencies, and professional advisors.

vi.Aggregated Sustainability & Impact Data

We collect and process aggregated sustainability and impact data, which consists of non-personally identifiable information such as packaging volume metrics, compostable material usage, and environmental impact data used strictly for internal analysis, sustainability reporting, and industry research.

2.Processing of Information

We process Personal Data solely for lawful purposes and only to the extent necessary for the conduct of our business operations, contractual performance, legal compliance, and legitimate business interests, or based on consent where required under applicable law.

Personal Data is processed for the following purposes:

i.Account Management & Access: To enable creation, authentication and maintenance of user accounts and to manage user credentials and secure access to the Website and services.

ii.Order Processing, Contract Performance & Fulfilment: To fulfil order processing, contract performance, and fulfilment requirements, the Company manages the end-to-end lifecycle of transactions, beginning with the processing of enquiries, quotations, proposals, product specifications, and samples. This extends to the formal execution of purchase orders, supply contracts, and delivery arrangements, alongside the comprehensive management of billing, invoicing, payments, returns, and exchanges. Furthermore, the company coordinates closely with logistics and supply chain partners to ensure seamless fulfilment and delivery.

iii.Vendor, Supplier & Partner Management: To facilitate vendor, supplier, and partner management, the company onboards, evaluates, and manages suppliers, logistics partners, certification agencies, auditors, and other B2B service providers. These activities are conducted to ensure rigorous quality control, facilitate compliance verification, and maintain necessary sustainability certifications across the supply chain.

iv.Customer Support & Communications: To facilitate customer support and communications, the company processes responses to queries, requests, feedback, and grievances while providing essential transactional communications, service updates, and operational notifications.

v.Marketing & Business Development (Consent-Based): To facilitate marketing and business development, the company shares information regarding new products, innovations, sustainability updates, promotional offers, or events, which is conducted strictly on a consent-based basis. This information is only provided where you have explicitly granted permission, and you maintain the right to withdraw your consent for such communications at any time

vi.Sustainability Reporting & Business Analytics: To facilitate sustainability reporting and business analytics, the company analyzes aggregated and anonymized data to generate sustainability and environmental impact reports, track plastic reduction metrics, and conduct product performance and market research. This process is designed such that the resulting data does not identify any individual, ensuring privacy while supporting business insights.

vii.Recruitment & Talent Acquisition: To process job applications, assess candidate suitability, conduct interviews and complete recruitment formalities.

viii.Security, Fraud Prevention & Legal Compliance: To ensure security, fraud prevention, and legal compliance, the company actively monitors, prevents, and investigates fraud, misuse, unauthorised access, and cyber incidents. These activities are essential for meeting obligations under all applicable laws, court orders, tax regulations, and governmental requests.

ix.Website Performance & Improvement: To analyse Website usage, user behaviour and trends to improve user experience, platform stability and operational efficiency.

x.No Automated Decision-Making: We do not undertake automated processing, including profiling, which produces legal effects or significantly affects individuals.

3.Retention of data

Bambrew shall retain Personal Data only for such period as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying contractual obligations, statutory and regulatory requirements, dispute resolution, enforcement of legal rights, and legitimate business operations.

Without limiting the generality of the above:

i.Customer and transaction data shall be retained for the duration of the contractual relationship and thereafter for such period as required under applicable tax, accounting and commercial laws.

ii.Vendor, supplier and partner data shall be retained for the duration of the engagement and such additional period as may be required for audit, compliance and dispute resolution purposes.

iii.Recruitment data of unsuccessful candidates shall be retained only for a reasonable period for future hiring considerations or as required by applicable law, and shall thereafter be securely deleted.

iv.Marketing data shall be retained until consent is withdrawn.

v.Technical, usage and log data shall be retained for system security, analytics and performance monitoring for a limited duration in accordance with industry standards.

vi.Upon expiry of the applicable retention period, the Personal Data shall be securely deleted, anonymised or irreversibly destroyed in accordance with reasonable security practices and procedures.

vii.The Company will retain your data only for as long as is necessary for the purposes set out in this privacy policy. We will retain and use your data to the extent necessary to comply with our legal obligations required to comply with applicable laws, resolve disputes, and enforce our legal agreements and policies.

All data we collect will be retained only as long as it is necessary by Bambrew or is otherwise required under any other law for the time being in force.

4.User Rights

In accordance with applicable data protection laws, including the Digital Personal Data Protection Act, 2023, you have the following rights in relation to your Personal Data processed by the Company.

i.Right of Access

We provide you with the Right of Access, allowing you to request access to your Personal Data held by Bambrew, which includes obtaining confirmation of whether your data is being processed and a summary of the categories involved. Furthermore, you may request information regarding the specific purposes of such processing, details of any third parties or data processors with whom the data has been shared, and information concerning applicable retention periods or the criteria used to determine those periods.

ii.Right to Correction

iii.Right to Erasure (Deletion)

You may request the deletion or erasure of your Personal Data where such Personal Data is no longer necessary for the purposes for which it was collected or where you have withdrawn your consent, as applicable. Deletion requests will be processed subject to applicable legal, regulatory, contractual and statutory retention requirements. Please note that deletion of certain Personal Data may limit or prevent Bambrew from providing certain services or continuing the business relationship.

iv.Right to Withdraw Consent

Where the processing of Personal Data is based on your consent, you have the right to withdraw such consent at any time. Withdrawal of consent will not affect the lawfulness of any processing carried out prior to such withdrawal.

v.Right to Grievance Redressal

You have the right to raise any grievance or concern regarding the processing of your Personal Data. We will acknowledge and address such grievances within the timelines prescribed under applicable law.

Grievances may be raised by writing to: info@bambrew.in

vi.Right to Nominate

You have the right to nominate any individual to exercise your rights under this Privacy Policy and applicable data protection laws in the event of your death or incapacity. Such nomination shall be made in the manner prescribed under applicable law or as otherwise notified by us from time to time.

vii.Grievance Officer

In accordance with the Digital Personal Data Protection Act, 2023, Bambrew has appointed a Grievance Officer to address concerns, complaints or grievances relating to the processing of Personal Data.

Grievance Officer: Ayesha Syed

Designation: HR Manager

Email: hr@bambrew.in

Address: 1498, 2nd Floor, 19th Main Rd, 1st Sector, HSR Layout, Bengaluru, Karnataka 560102

5.Cookies

We use cookies and similar tracking technologies to enhance your experience on our Website, analyse usage patterns, and improve the performance and functionality of our Website. Cookies are small text files that are placed on your device when you visit a website. They help us recognise your browser, remember your preferences, and understand how users interact with our Website.

Types of Cookies we use:

a.Essential Cookies:

These cookies are necessary for the Website to function properly and enable core features such as security, network management, and accessibility.

b.Analytics and Performance Cookies:

These cookies help us understand how visitors use our Website, including pages visited and time spent on the Website, so that we can improve functionality and user experience.

c.Functionality Cookies:

These cookies allow the Website to remember choices you make (such as language or region) and provide enhanced, personalised features.

d.Session and Persistent Cookies

Session cookies are temporary and are deleted when you close your browser. Persistent cookies remain on your device for a specified period or until you delete them.

e.Managing Cookies

You may control or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality and performance of the Website.

By continuing to use our Website, you consent to the use of cookies in accordance with this Privacy Policy, unless you disable cookies through your browser settings.

6.Disclosure to third parties

We may disclose Personal Data to third parties only where such disclosure is lawful, necessary, and proportionate, and only for the purposes for which the Personal Data has been collected, or as otherwise permitted or required under applicable law.

We limit the sharing of Personal Data with third parties to what is reasonably necessary to fulfil the relevant processing purposes and deliver our products and services. Wherever Personal Data is shared, Bambrew ensures that appropriate contractual, technical and organisational safeguards are in place to protect the security and confidentiality of such data.

Personal Data may be disclosed in the following circumstances:

a.Service Providers and Vendors

We may share Personal Data with third-party service providers, vendors and consultants who provide services on our behalf, including but not limited to IT support, cloud hosting, data analytics, logistics, payment processing, and professional advisory services. Such third parties are authorised to process Personal Data only in accordance with our instructions and applicable data protection obligations.

b.Business Transactions

Personal Data may be disclosed in connection with, or during negotiations of, any merger, acquisition, restructuring, financing, sale of assets, or transfer of all or part of B’s business, subject to appropriate confidentiality and data protection safeguards.

c.Marketing and Promotions

Where you have provided your consent, we may share limited Personal Data with business partners for the purpose of offering relevant products, services or promotional communications. You may withdraw such consent at any time.

d.Legal and Regulatory Disclosures

We may disclose Personal Data where such disclosure is required to comply with applicable laws, regulations, court orders, or governmental requests, and to enforce our legal rights or policies. Furthermore, we may share information to investigate, prevent, or address fraud, security incidents, or unlawful activities, or to protect the rights, property, or safety of the Company, its users, or others. We do not sell Personal Data and do not disclose it to third parties except as described in this Privacy Policy.

7.Data Transfer

Your Personal Data may be processed at our operating offices and at any other locations where Bambrew, its affiliates, partners or service providers involved in the processing of such data are located.

As part of our business operations, your Personal Data may be transferred to, stored or processed by third parties located within or outside India, including in jurisdictions that may not have data protection laws equivalent to those applicable in your country of residence.

Bambrew ensures that any such transfer of Personal Data is carried out in accordance with applicable law and is subject to appropriate contractual, technical and organisational safeguards designed to protect your Personal Data and ensure an adequate level of data protection.

By submitting your Personal Data and using our Website or services, you acknowledge that such transfers may occur in accordance with this Privacy Policy.

8.Changes in privacy policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, business practices or operational processes.

Any updates to this Privacy Policy will be posted on this page, along with the revised “Last Updated” date. Where required under applicable law, or where the changes are material, Bambrew will provide additional notice, such as through email or a prominent notice on the Website, prior to such changes becoming effective.

You are encouraged to review this Privacy Policy periodically to stay informed about how your Personal Data is protected. Continued use of the Website or services after the updated Privacy Policy becomes effective will constitute your acknowledgement of the updated terms.

9.Contact us

If you have any questions about this privacy policy, clarifications, or grievances. Please email us at info@bambrew.in