1. Data Fiduciary & Scope of Policy

This Privacy Policy governs the processing of personal data collected by Bhuvanesh Groups (hereinafter referred to as the "Company", "we", "our", or "us"), having its principal technology operations in India, across this website, our partner onboarding portals, demonstration instances, and client communication channels.

This Policy applies to all natural persons who interact with us, including prospective Business Growth Partners, Franchise Applicants, Enterprise Software Clients, Resellers, and general website visitors (collectively referred to as "Data Principals" or "Users").

2. Categories of Information We Collect

We only collect personal information that is reasonably necessary, adequate, and relevant for specified business and commercial evaluation purposes:

• Identity & Contact Details: Full legal name, mobile/WhatsApp telephone number, authorized email address, residential and business addresses, state, district, and postal pin code.
• Commercial & Professional Profile: Business name, current profession or trade, years of sales/marketing experience, local customer network size, preferred partnership model (e.g. City, District, State Franchise, or Growth Partner), and investment capacity.
• Statutory & Business KYC (Post-Approval Only): When executing definitive legal agreements or disbursing commercial commissions, we collect PAN (Permanent Account Number), GSTIN registration certificates, bank account IFSC and settlement details, and authorized signatory resolutions. Note: We never ask for sensitive bank passwords, UPI PINs, or Aadhaar biometric data on our public website.
• Technical & Telemetry Data: IP address, browser type and version, operating system, time-zone settings, referring URLs, access timestamps, and session interactions with interactive calculators.

3. Lawful Grounds & Purposes of Processing

Under Section 4 and Section 7 of the DPDP Act 2023, Bhuvanesh Groups processes personal data exclusively on lawful grounds, including affirmative consent, performance of contracts, and legitimate corporate uses:

4. Data Storage, Security & Encryption Standards

We implement industry-grade technical and organizational safeguards to prevent unauthorized access, loss, alteration, or disclosure of your personal data:

• Sovereign Data Storage: All primary databases and applicant records are hosted in secure enterprise cloud data centers located within the territorial boundaries of the Republic of India.
• Encryption Standards: Data in transit is protected using Transport Layer Security (TLS 1.3 with 256-bit encryption). Sensitive stored records (such as bank details and tax IDs) are protected with AES-256 encryption at rest.
• Role-Based Access Control (RBAC): Access to partner leads and applications is strictly restricted to verified Bhuvanesh Groups onboarding officers and legal counsel bound by non-disclosure agreements.
• Isolated Tenant Databases: Production software instances delivered to clients operate on sandboxed database architectures to prevent cross-account data leakage.

5. Sharing & Third-Party Disclosures

Bhuvanesh Groups does not sell, rent, monetize, or trade your personal information. Disclosures are strictly limited to the following operational contexts:

• Cloud Infrastructure Providers: Managed enterprise cloud hosts (e.g. AWS, DigitalOcean, Google Cloud India regions) that provide server compute and database backup under rigorous data processing addenda.
• Communication Gateways: Authorized telecom and messaging providers (e.g. SMS gateways, transactional email APIs, WhatsApp Business APIs) solely for transmitting application status, tracking numbers, and login credentials.
• Statutory & Law Enforcement Authorities: When compelled by valid legal process, judicial court orders, or statutory tax reporting requirements under Indian law (e.g., GST Returns, Income Tax Form 16A TDS certificates).

6. Cookies & Digital Telemetry

Our website uses minimal, functional cookies:

• Essential Session Cookies: Required to maintain secure browsing states, CSRF security tokens, and sample agreement unlock verification.
• Analytical Cookies: Aggregated, anonymized telemetry metrics (such as page visit counts and calculator interactions) to help us optimize server performance and user navigation.

You can configure your browser to block cookies. However, disabling essential session cookies may prevent forms or the sample agreement viewer from operating correctly.

7. Rights of Data Principals (DPDP Act 2023)

As an applicant, partner, or client, you possess enforceable statutory rights under the Digital Personal Data Protection Act 2023:

• Right to Access & Summary: You may request a confirmation of whether we are processing your personal data and a summary of information held.
• Right to Correction & Updation: You have the right to correct inaccurate, misleading, or outdated personal information in our records.
• Right to Erasure: You may request the deletion of your applicant records where the data is no longer necessary for the purpose it was collected, subject to statutory retention obligations.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time without retroactive invalidation of prior lawful processing.
• Right to Nominate: You have the right to nominate an individual to exercise your data rights in the event of death or incapacity.

8. Data Retention & Destruction Schedules

We retain personal data only for as long as required to fulfill the legitimate business purpose for which it was obtained:

• Unsuccessful Inquiries: Applicant inquiries that do not proceed to contract execution are purged from active marketing systems within twelve (12) months.
• Active Partner & Client Records: Maintained for the duration of the active partnership agreement plus seven (7) financial years following termination to satisfy statutory audit requirements under the Indian Income Tax Act 1961 and Companies Act 2013.

9. Grievance Officer & Regulatory Redressal

In accordance with the Information Technology Act 2000 and the Digital Personal Data Protection Act 2023, Bhuvanesh Groups has designated a Grievance Redressal Officer to address inquiries and grievances: