Privacy Policy

Effective Date: June 15, 2026

Welcome to BBKrate Bombay (“Company”, “we”, “us”, or “our”). We operate the e-commerce platform and website through which we offer our products and services to you. This Privacy Policy (“Policy”) delineates our corporate protocols and legal framework governing the collection, utilization, processing, safeguarding, and disclosure of your personal and transactional information when you access our platform.

This Policy is formulated in strict compliance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, the Digital Personal Data Protection Act, 2023 (DPDP Act), and other applicable data privacy regulations within the territory of India.

By accessing our platform, registering an account, or executing a commercial transaction, you explicitly consent to the collection and processing of your information in accordance with the terms of this Policy.

1. Definitions

• Personal Data: Any objective data relating to an individual who is directly or indirectly identifiable, specifically by reference to an identifier such as a name, identification number, location data, or online identifier.

• Sensitive Personal Data or Information (SPDI): Financial information such as bank account details, credit card, debit card, or other payment instrument details as defined under Indian law.

• Usage Data: Diagnostic metrics collected automatically, generated either by the utilization of the platform or from the infrastructure of the service itself (e.g., duration of a webpage visit, device IP address).

• Data Principal / User: The living individual using or accessing our platform who is the subject of the Personal Data collected.

2. Categories of Data Collected

To provide a seamless commercial experience, execute orders, and maintain security, we collect several types of information from our users:

• Identity and Contact Credentials: Full legal name, billing address, shipping address, delivery coordinates, active telephone/mobile number, and electronic mail (Email) address.

• Financial and Transactional Data: Details regarding payments made by you and specific details of products purchased through our secure payment gateways.

  Legal Directive on Financial Security: BBKrate Bombay does not directly store, harvest, or retain your raw credit card, debit card, or banking authentication credentials. All payment processing is securely delegated to certified, PCI-DSS compliant third-party payment gateways.

• Technical and Usage Data: Internet Protocol (IP) address, browser classification, operating system specifications, unique device identifiers, behavioral patterns, and tracking metadata.

3. Purpose and Legal Basis for Data Processing

We process your Personal Data under valid legal bases, including performance of contracts, statutory obligations, and your explicit consent. Your data is utilized for the following explicit operations:

• Contractual Fulfillment: To process transactions, verify payment authenticity, manage inventory allocation, arrange logistical transit, and execute deliveries to your doorstep.

• Customer Support and Communication: To transmit transactional alerts, order updates, invoice summaries, and address service inquiries via SMS, telephonic voice calls, WhatsApp, and electronic mail.

• Risk Mitigation and Security: To monitor platform traffic, investigate suspicious account actions, and prevent electronic fraud, cyber-attacks, or unauthorized platform manipulation.

• Legal Compliance: To enforce our Terms and Conditions, satisfy tax audit requirements, and comply with binding mandates issued by law enforcement or regulatory authorities.

4. Data Retention Protocols

BBKrate Bombay will retain your Personal Data only for as long as is strictly necessary to fulfill the operational objectives set forth in this Policy.

• Statutory Retention: We are legally required to retain transaction histories, invoicing records, and corporate logs for a minimum specified period under Indian fiscal and corporate laws (including the Central Goods and Services Tax Act, 2017).

• Data Erasure: Once the processing purpose concludes and the statutory retention timelines expire, your personal records are subjected to irreversible anonymization or complete structural deletion from our secure databases.

5. Sharing and Disclosure of Information

We do not sell, rent, or trade your Personal Data to third-party entities for their independent marketing initiatives. Your data is shared exclusively with authorized classes of recipients as outlined below:

Recipient Category Purpose of Disclosure Data Shared

Logistics Partners Execution of order shipping, tracking, and final delivery across India. Name, Shipping Address, Phone Number.

Payment Processors Secure authentication and clearing of financial transactions. Billing details, Total Order Value, Transaction tokens.

Cloud Hosting Providers Secure infrastructure, database maintenance, and server uptime management. Encrypted platform databases and usage logs.

Statutory Authorities Compliance with court orders, tax audits, or law enforcement investigations. Requested transactional records and user logs.

6. Data Security Safeguards

The security of your information is a paramount corporate priority. BBKrate Bombay deploys industry-standard organizational and technical safeguards designed to protect your data against unauthorized access, loss, alteration, or disclosure.

• We utilize Secure Sockets Layer (SSL) encryption technology for the transmission of sensitive information across our platform.

• Access to your personal account data is structurally restricted to authorized employees, contractors, and agents who have a strict "need-to-know" basis to perform operational duties under strict non-disclosure mandates.

Disclaimer: While we execute reasonable commercial and legal security practices, no method of transmission over the internet or electronic database storage can be guaranteed as 100% secure against state-sponsored hacks or advanced persistent cyber threats.

7. Statutory Rights of the Data Principal

In accordance with applicable data protection legislation in India, you possess specific statutory rights regarding your Personal Data:

• Right to Access and Rectification: You have the right to review, update, or correct inaccuracies in your Personal Data directly through your platform account interface or by submitting a formal request to our support desk.

• Right to Erasure (Right to be Forgotten): You may request the deletion of your account and associated personal identifiers, subject to the condition that we do not require the retention of such data for active orders, unresolved disputes, or statutory compliance.

• Right to Withdraw Consent: Where data processing is grounded purely on your consent, you have the right to withdraw your consent at any time. Withdrawal of consent will not affect the legality of any data processing carried out prior to the revocation notice.

8. Cookies and Tracking Technologies

Our platform implements cookies, web beacons, and persistent tracking pixels to customize your browsing architecture, analyze user traffic trends, and retain your virtual shopping cart items.

• You maintain the absolute right to instruct your internet browser to refuse cookies or notify you when a cookie is being deployed.

• Please note that if you actively disable cookie acceptance, certain interactive blocks or functional parameters of our e-commerce platform may cease to operate correctly.

9. Third-Party Links and External Services

Our platform may contain hypertext links directing users to third-party digital assets, apps, or advertisements not owned or controlled by BBKrate Bombay. We assume zero legal responsibility for the content, independent privacy policies, tracking mechanisms, or data collection practices of any third-party websites. We strongly advise you to inspect the privacy disclosures of every external domain you visit.

10. Amendments to this Privacy Policy

BBKrate Bombay reserves the absolute right to revise, modify, or update this Privacy Policy at any time to align with evolving digital service models, industry standards, or legal shifts. When updates occur, the modified version will be uploaded to this page with an updated "Effective Date." Your continued utilization of our platform post-publication establishes your legal acceptance of the revised provisions.

11. Grievance Redressal and Corporate Contact Information

In accordance with the Information Technology Act, 2000, and the rules framed thereunder, the name and contact coordinates of the Grievance Officer designated to handle user complaints, data discrepancies, or privacy disputes are detailed below:

• Corporate Entity Name: BBKrate Bombay

• Operating Address: Mumbai, Maharashtra, India

• Corporate Support Line: +91 8097842458

• Official Data Protection Desk: bbkrate@gmail.com

• Availability Window: Monday through Saturday, 9:00 AM to 6:00 PM IST (Excluding Public and National Holidays)