Privacy Policy & Data Notice

1. Personal Data We Process

We process only the minimum necessary personal data required to fulfill our B2B ecological logistics services. This includes:

• Identity & Contact Data: Name, business email address, corporate telephone/WhatsApp number, designation, and official business location.
• Logistics & Security Data: Authorized representative names, vehicle driver identification data (for premises access logs), and gate authorization signatures.
• Technical Data: IP address, browser information, and access timestamps captured during waste audit form submissions.

2. Specified Lawful Purposes of Processing

In accordance with Section 4 of the DPDP Act, your data is processed solely under valid consent for the following specified, lawful purposes:

• Scheduling and conducting mandatory waste audits, volume estimations, and pilot trials.
• Drafting and issuing formal B2B service agreements, quotations, and statutory compliance documentations (Waste Disposal Certificates, monthly logs).
• Verifying on-site logistics access credentials for our daily green/blue bin exchange fleet.
• Responding to direct queries, grievances, and support requests.

3. Consent & Your Right to Withdraw

Your consent is the primary legal basis for our processing of your personal data. You have the right to withdraw your consent at any time without any negative consequences or retroactive impact on processing already completed. To withdraw consent, write to us at privacy@bhoomikaeco.com.

4. Rights of the Data Principal

As a Data Principal under Chapter III of the DPDP Act, 2023, you hold the following statutory rights, which you can exercise at any time:

• Right to Access: Request a summary of your personal data processed by us and the list of processors with whom your data is shared.
• Right to Correction & Completion: Request the rectification of incorrect details, completion of incomplete fields, or updating of stale contact files.
• Right to Erasure ("Right to be Forgotten"): Request the complete deletion of your personal data when the business purpose for which it was collected has been completed, or when you withdraw your consent, subject to legal retention overrides.
• Right to Nominate: Nominate any individual to exercise your rights on your behalf in the event of your death or physical/mental incapacity.

5. Data Storage, Retention & Security

All personal data is stored securely on servers located strictly within the territory of India. We implement industry-standard encryption, firewalls, and audit trails to prevent unauthorized access, alteration, or disclosure. We retain personal data only for as long as is necessary to satisfy our service delivery agreements or comply with statutory corporate or tax records retention rules.

6. Grievance Redressal & Contact Details

In compliance with Section 13 of the DPDP Act, we have set up a dedicated grievance redressal channel. If you have any questions, wish to exercise your rights, or want to file a query regarding your data, contact our designated Grievance Officer:

If any grievance is not resolved to your satisfaction within 30 days, you have the right to appeal directly to the Data Protection Board of India (DPBI).