Bilimbe Digital Privacy Policy

1. Interpretation Clause

In this Privacy Notice:

• "Personal Information" means any information that identifies, relates to, or describes you as an individual, such as your name, email address or phone number.
• "Processing" refers to any operation performed on personal information, such as collecting, storing, using, or sharing it.
• "We," "Our," or "Us" refers to Bilimbe Digital, the organization responsible for managing your personal information.
• "You" or "Your" refers to the individual who interacts with our services and whose personal information we collect and process.
• "Service Providers" are third-party companies that help us operate and provide our services, such as payment processors, hosting providers, or marketing firms.
• "Controller" means the entity that determines the purpose and means of processing personal information.
• "Processor" refers to the entity processing personal information on behalf of the Controller.
• "Supervisory Authority" means an independent public authority responsible for monitoring compliance with data protection laws.
• "Usage Data" refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).
• Application refers to Bilimbe Digital, the software program provided by the Company.
• Company (referred to as either "the Company", "We", "Us" or "Our" in this Agreement) refers to Bilimbe Digital, 6/36, Mariamman Kovil St, KK Nagar West, K. K. Nagar, Chennai, Tamil Nadu.
• Country refers to India, Tamil Nadu, Chennai, 600078.

These definitions are provided to ensure that the terms used in this Privacy Notice are clear and understandable.

2. Personal Data We Collect

We may collect the following categories of personal information:

3. How We Use Your Information

Subject to applicable laws and regulations, the personal information collected by us may be used for one or more of the following purposes:

• Provision of Services: To deliver, operate, maintain, and enhance the functionality and performance of our products and services, including any associated features or support.
• Account Administration: To administer user accounts, facilitate account-related functions, and provide technical or customer support, including responses to queries, requests, or complaints.
• Marketing and Communications: To send you promotional materials, service updates, newsletters, and other communications relating to our products or services, where you have provided the requisite consent or where otherwise permitted under applicable law.
• Legal and Regulatory Compliance: To comply with applicable legal obligations, including those arising under statutory or regulatory provisions, and to enforce our legal rights and contractual obligations, including our Terms of Use or other governing agreements.
• Security and Risk Management: To detect, prevent, and address actual or suspected fraud, unauthorized access, data breaches, or other unlawful activities that may pose a risk to our users or systems.
• Personalization and User Experience: To analyse user preferences and behaviour for the purpose of personalizing content, recommendations, and communications, and to improve user experience and engagement with our services.

4. Disclosure of Personal Information

We may disclose or otherwise make available your personal information to third parties under the following circumstances, subject to applicable data protection laws:

• Service Providers: We may share your personal information with third-party service providers, contractors, and agents who perform services on our behalf, including but not limited to data hosting, payment processing, analytics, and customer support. Such parties are bound by contractual obligations, including confidentiality and data protection provisions, to ensure the security and lawful processing of personal information.
• Business Partners and Affiliates: We may disclose your personal information to our business partners or affiliates with whom we jointly offer products or services, or with whom we engage in co-branded activities. Such disclosures are based on our legitimate interests or your prior consent, as applicable.
• Legal Compliance and Law Enforcement: We may disclose your personal information where such disclosure is required by applicable law, regulation, legal process, or governmental request, including to law enforcement agencies, regulatory authorities, courts, or other public bodies.
• Corporate Transactions: In connection with any actual or potential merger, acquisition, reorganization, sale of assets, or insolvency proceeding involving our business, we may transfer your personal information to the relevant acquiring or successor entity, subject to appropriate confidentiality and data protection safeguards.

We undertake reasonable efforts to ensure that all third parties with whom personal information is shared comply with applicable data protection laws and implement adequate safeguards to uphold the privacy and security of such information.

5. Cookies and Similar Technologies

We use cookies and similar tracking technologies on our website to enhance your browsing experience, analyse site traffic, personalize content, and deliver relevant advertisements. These technologies help us understand how you interact with our website and improve its functionality.

6. Your Rights as a Data Subject

Subject to applicable data protection laws and depending on your jurisdiction, you may have the following rights in relation to your personal information:

• Right of Access: Request confirmation as to whether we process your personal information and, if so, to access such information.
• Right to Rectification: Request the correction or updating of any inaccurate or incomplete personal information concerning you.
• Right to Erasure (Right to be Forgotten): In certain circumstances, request the deletion of your personal information.
• Right to Restrict Processing: Request the restriction of processing under specific conditions.
• Right to Know: Obtain information about the categories and specific pieces of personal information we collect, the sources, purposes, and third parties with whom it is shared.
• Right to Data Portability: Receive your personal information in a structured, commonly used, and machine-readable format.
• Right to Object: Object to processing for certain purposes, including direct marketing and profiling based on legitimate interests.
• Right to Withdraw Consent: Where processing is based on consent, withdraw such consent at any time.
• Right to Non-Discrimination: Exercise your privacy rights without discriminatory treatment.
• Right to Opt-Out of Sale or Sharing: Where applicable, opt out of the sale or sharing of your personal information.

To exercise any of the above rights, or to obtain further information regarding your rights, please submit a request through privacy@bilimbe.in. When you contact us, please provide your full name, email address and the specific type of request you are making. We will respond to your request within 30 days.

7. Data Retention

We retain personal information for no longer than is necessary to fulfil the purposes for which it was collected, as outlined in this Privacy Notice, unless a longer retention period is required or permitted by applicable law. Specifically, personal information may be retained for the following purposes:

• To Fulfil Contractual and Operational Obligations: Including the provision of services, account management, and customer support.
• To Comply with Legal and Regulatory Requirements: Such as obligations under tax laws, corporate laws, financial regulations, and data protection legislation.
• To Resolve Disputes and Enforce Legal Rights: Including the defense or establishment of legal claims, investigation of violations, and enforcement of our terms and conditions or other contractual agreements.

Retention periods may vary depending on the nature of the data and the context in which it is processed. Upon expiry of the applicable retention period, or upon fulfilment of the purposes for which the personal information was collected (whichever is later), we will securely delete, anonymize, or otherwise render the personal information inaccessible, unless further retention is required by law.

8. Security Measures

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk associated with the processing of personal information. These measures are designed to protect personal information against unauthorized access, alteration, disclosure, or destruction and include, but are not limited to:

• Encryption Technologies: Use of encryption protocols to secure personal information in transit and at rest.
• Access Controls: Restriction of access to personal information on a need-to-know basis through role-based permissions and authentication mechanisms.
• Firewalls and Intrusion Detection Systems: Deployment of firewalls, intrusion detection, and prevention technologies to monitor and protect our networks and systems.
• Security Audits and Monitoring: Regular review, testing, and updating of our information security practices and protocols to identify and mitigate emerging security threats.

We also encourage users to take reasonable steps to protect their personal information, including the use of strong, unique passwords and maintaining the confidentiality of their account credentials.

While we take commercially reasonable efforts to safeguard personal information, no method of transmission over the Internet or method of electronic storage is entirely secure. Accordingly, we cannot guarantee absolute security.

9. International Data Transfers

If you access or use our services from a jurisdiction outside the United States, please be aware that your personal information may be transferred to, stored in, and processed in the United States or in other jurisdictions where our affiliates, service providers, or business partners are located. These jurisdictions may not offer the same level of data protection as your home country.

To ensure that such cross-border data transfers are conducted in compliance with applicable data protection laws, we implement appropriate safeguards, including Standard Contractual Clauses (SCCs) and contractual protections with third-party recipients.

By using our services and providing us with your personal information, you acknowledge and consent to the transfer, processing, and storage of your personal information in jurisdictions outside your country of residence, including the United States, subject to the safeguards described herein.

10. Children's Privacy

Our services are not directed to, and we do not knowingly collect or solicit personal information from, individuals under the age of 18 (or such other minimum age as may be prescribed by applicable data protection laws in the relevant jurisdiction). If you are under the applicable age threshold, you are not permitted to use our services or submit any personal information to us.

If we become aware that we have inadvertently collected personal information from a child in violation of applicable law, we shall take immediate steps to delete such information from our records and systems.

If you are a parent or legal guardian and believe that your child has provided personal information to us without your consent, you are encouraged to contact us using the contact details provided in this Privacy Notice so that we may take appropriate action.

11. GDPR Compliance

If you are located in the European Union (EU), European Economic Area (EEA), or the United Kingdom (UK), your personal data is processed in accordance with the General Data Protection Regulation (GDPR).

12. Consumer Rights under DPDP Act

As an Indian resident, you have the following rights under the DPDP Act:

• Right to Know: Request information about the personal data we have collected about you in the past 12 months.
• Right to Delete: Request the deletion of your personal data, subject to certain exceptions.
• Right to Opt-Out of Sales: Opt-out of the sale of your personal data. Since we do not sell personal data, this right does not apply unless we change this practice in the future.
• Right to Opt-Out of Sharing: Request opt-out of the sharing of your personal data for business purposes.
• Right to Non-Discrimination: Not be discriminated against for exercising any of your DPDP Act rights.

To exercise your rights under the DPDP Act, submit a request by contacting us at privacy@bilimbe.in. We will verify your identity before processing your request and, in most cases, respond within 45 days.

We do not sell personal information to third parties. We may disclose personal data to third parties for a business purpose, but this does not constitute a sale under the DPDP Act.

13. DPDP Act Compliance

This section applies to individuals located in India and explains your rights under the Digital Personal Data Protection Act, 2023 (DPDP Act). We are committed to ensuring that your personal data is collected, processed, stored, and shared in a transparent and secure manner.

14. Changes to This Privacy Notice

We may update this Privacy Notice periodically. Any significant changes will be communicated to you in advance via email or through a notice on our website. The updated Privacy Notice will include a new effective date.

15. Contact Us

If you have any questions about this Privacy Policy, you can contact us:

By email: privacy@bilimbe.in

By visiting our website: www.bilimbe.in