Privacy Policy

Effective Date: 20 June, 2026  |  Last Updated: 20 June, 2026

India Biz Data (“we”, “us”, “our”) is committed to protecting your privacy and handling your information responsibly. This Privacy Policy explains how we collect, use, store, share, process, and protect information when you access IndiaBizData.com (“Website”), purchase our products, communicate with us, or otherwise use our services.

As a provider of business information products in India, we are committed to handling personal information responsibly and in accordance with applicable laws, including the Digital Personal Data Protection Act, 2023 (DPDP Act), where applicable.

By accessing or using the Website, you acknowledge that you have read and understood this Privacy Policy.

1. Scope

This Privacy Policy applies to information collected through:

• Your use of the Website and its features
• Purchases of our products and datasets
• Customer support and communications
• Account registration and management
• Marketing and promotional interactions

This Policy does not cover the privacy practices of third-party websites, services, or payment processors linked from or integrated with our Website. Please review their respective privacy policies independently.

2. Definitions

For the purposes of this Privacy Policy:

• “Personal Data” or “Personal Information” means information relating to an identified or identifiable individual, as defined under the DPDP Act, 2023 and other applicable law.
• “Data Fiduciary” means India Biz Data, being the entity that determines the purpose and means of processing personal data.
• “Data Principal” means the individual to whom the personal data relates — in most cases, you as a user or customer of our Website.
• “Processing” means any operation performed on personal data, including collection, storage, use, disclosure, and deletion.
• “Services” means all products, databases, reports, downloads, and related services provided by India Biz Data.
• “Website” means IndiaBizData.com and all associated pages and content.

3. Information You Provide to Us

We collect information that you actively provide when using our Website or Services, including:

• Full name
• Email address
• Phone number
• Company name and designation
• Billing address and GST details (where applicable)
• Order and transaction information
• Support inquiries, feedback, and communications

We collect only the information necessary for the purpose for which it is collected. Providing inaccurate or incomplete information may affect our ability to process your order or provide support.

4. Information Collected Automatically

When you visit the Website, certain information may be collected automatically through our systems and service providers, including:

• IP address and approximate geographic location
• Browser type, version, and language settings
• Device type and operating system
• Pages visited and navigation patterns
• Session duration and visit timestamps
• Referring URL or traffic source

This information is used to maintain and improve Website functionality, diagnose technical issues, analyze usage patterns, and prevent fraud and abuse. It is not used to identify individual users beyond what is necessary for these purposes.

5. Cookies & Tracking Technologies

We may use cookies, web beacons, pixels, log files, and similar tracking technologies to operate and improve the Website. These technologies may collect information about your interactions with the Website.

We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Website to function correctly, including session management, security, and order processing. These cannot be disabled.
• Functional Cookies: Enable enhanced functionality such as remembering your preferences, login status, and language settings.
• Analytics Cookies: Help us understand how visitors use the Website by collecting aggregated, anonymized usage data. Used to improve performance and user experience.
• Marketing Cookies: May be used to measure the effectiveness of our marketing activities. Where required by law, these are activated only with your consent.

You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect Website functionality.

6. Purposes of Processing

We use the information we collect for the following purposes:

• Processing orders and managing payments
• Delivering purchased products and services
• Managing and verifying customer accounts
• Providing customer support and resolving disputes
• Sending transactional communications and order confirmations
• Sending marketing and promotional communications where permitted
• Preventing fraud, abuse, and unauthorized access
• Improving Website functionality, performance, and user experience
• Maintaining business and financial records
• Complying with legal and regulatory obligations
• Exercising or defending legal rights and claims

Information is used only for the purposes stated at the time of collection or as otherwise permitted under applicable law. We do not use your information for purposes incompatible with those stated without obtaining fresh consent or establishing a valid lawful basis.

7. Lawful Basis for Processing

We process personal data only where a lawful basis exists. Depending on the nature of the processing activity, the applicable basis may include:

• Contract Performance: Processing necessary to fulfill your purchase order, deliver products, and manage your account.
• Legitimate Business Interests: Processing for fraud prevention, security monitoring, Website analytics, and service improvement, where these interests are not overridden by your rights.
• Legal Obligation: Processing required to comply with applicable laws, tax regulations, court orders, or regulatory requirements.
• Consent: Where required by the DPDP Act, 2023, or other applicable law — for example, for certain marketing communications or non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.
• Protection of Legal Rights: Processing necessary to establish, exercise, or defend legal claims.

8. Business Database Activities

India Biz Data provides business information products, including B2B Company Databases, B2B Business Databases, and B2C Business Databases, intended exclusively for legitimate commercial purposes such as B2B outreach, lead generation, sales, marketing, recruitment, market research, business development, and business intelligence.

B2B Company Databases may include company profiles, company email addresses, company phone numbers, official website information, and other publicly available business information obtained from lawful business information sources. Where available, company records may be enriched with publicly available company email addresses collected from official company websites and other legitimate business information sources. We do not intentionally collect, compile, process, market, or provide private, personal, or non-business email addresses.

B2B Business Databases and B2C Business Databases primarily contain publicly available business information, including business names, business categories, business addresses, websites (where available), and business phone numbers. These datasets do not ordinarily include business email addresses. Where a customer specifically requests business email addresses as part of a customized database, such information, where available, may be obtained only from publicly available business sources, including official business websites. We do not intentionally collect, compile, process, market, or provide private, personal, or non-business email addresses.

India Biz Data does not intentionally compile, collect, process, market, or sell employee personal information, consumer personal databases, student databases, residential contact databases, sensitive personal data, financial information, government-issued identification information, health information, or personal information intended for private or household use.

Customers who purchase our datasets are independently responsible for ensuring that their use of such data complies with all applicable privacy, data protection, anti-spam, and marketing communication laws and regulations. Please refer to our Terms & Conditions for additional customer responsibilities.

9. Publicly Available Business Information

Information contained within our business datasets is derived from publicly available business information obtained through lawful business information sources. Where applicable, certain B2B Company Databases may be enriched with publicly available company email addresses obtained from official company websites. The compilation, structuring, organization, enrichment, and presentation of such information into our datasets constitute the intellectual property of India Biz Data.

Inclusion of information within a dataset does not imply endorsement, affiliation, formal relationship, or verification by any referenced individual, company, or organization.

10. Information Sharing

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

Information may be shared in the following limited circumstances:

• Payment Processors: To facilitate secure payment transactions.
• Hosting & Infrastructure Providers: To operate and maintain the Website and associated systems.
• Email & Communication Service Providers: To deliver transactional and marketing communications.
• Professional Advisers: Including legal counsel, auditors, and compliance consultants, where necessary.
• Regulatory Authorities & Law Enforcement: Where disclosure is required by law, court order, or regulatory mandate.
• Business Successors: In connection with a merger, acquisition, corporate restructuring, or sale of business assets, subject to the successor maintaining appropriate privacy protections.
• Business Operations Providers: Including accounting, bookkeeping, tax, fraud prevention, customer relationship management (CRM), analytics, and operational support providers engaged to assist in running our business.

11. Service Providers

We may engage third-party service providers to perform functions on our behalf, including payment processing, website hosting, analytics, email delivery, and customer support infrastructure. These providers are permitted to access information only to the extent necessary to perform their contracted functions and are required to maintain appropriate confidentiality and security standards.

We do not authorize service providers to use your personal information for their own independent purposes.

12. International Transfers

Some of our service providers and infrastructure partners may operate in, or transfer data to, jurisdictions outside India. Where such transfers occur, we take reasonable steps to ensure that appropriate safeguards are in place consistent with applicable Indian data protection law, including the DPDP Act, 2023, and any cross-border transfer regulations notified thereunder.

12A. Data Minimization

India Biz Data seeks to collect and process only the information reasonably necessary for the purposes described in this Privacy Policy. We do not intentionally collect excessive personal information and take reasonable steps to ensure that personal data processed is relevant, proportionate, and limited to what is necessary for the stated purposes.

13. Data Retention

We retain personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected, or as required by applicable law. Retention periods are determined based on:

• The duration of the customer relationship and contractual obligations
• Legal and regulatory record-keeping requirements
• Tax, audit, and financial compliance obligations
• Fraud prevention and security monitoring needs
• Dispute resolution and legal claims management

Where information is no longer required for any of the above purposes, we take reasonable steps to securely delete, anonymize, or de-identify it.

Notwithstanding the foregoing, India Biz Data may retain certain information for longer periods where necessary to comply with legal obligations, prevent fraud, enforce contractual rights, maintain audit records, resolve disputes, or protect the security and integrity of its systems and services.

14. Data Security

We implement reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, loss, and misuse. Our security practices are consistent with the requirements of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 and applicable provisions of the DPDP Act, 2023.

Security measures include, as appropriate, access controls, encrypted transmission, secure storage practices, and vendor due diligence. However, no internet-based transmission or storage system can be guaranteed to be completely secure, and we cannot warrant absolute security.

Access to personal information is restricted to authorized personnel, contractors, and service providers who require such access for legitimate business purposes and who are subject to appropriate confidentiality obligations.

You are responsible for maintaining the confidentiality of your account credentials and for any activity conducted under your account.

15. Security Incidents & Breach Response

In the event of a personal data breach, we will take prompt steps to:

• Investigate and contain the incident
• Assess the nature, scope, and likely impact of the breach
• Notify the Data Protection Board of India and affected Data Principals as required under the DPDP Act, 2023
• Implement remedial measures to reduce the risk of recurrence
• Cooperate with competent regulatory authorities as appropriate

Notification to affected individuals will be made in accordance with applicable legal timelines and requirements.

16. Your Individual Rights

Subject to applicable law, you may have the following rights with respect to your personal information:

• Right of Access: The right to obtain confirmation of whether we process your personal data and to receive a summary of such data.
• Right to Correction: The right to request correction of inaccurate, incomplete, or outdated personal information.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to applicable legal exceptions.
• Right to Withdraw Consent: Where processing is based on your consent, the right to withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to Grievance Redressal: The right to raise a complaint regarding the handling of your personal data and to have it addressed in a timely manner.
• Right to Nominate: Under the DPDP Act, 2023, the right to nominate another individual to exercise your data rights on your behalf in the event of your death or incapacity.

To exercise any of the above rights, please contact us using the details provided in Section 25. We will respond within a reasonable time and in accordance with applicable legal requirements. Identity verification may be required before processing your request.

17. Your Rights Under the DPDP Act, 2023

As a Data Principal under the Digital Personal Data Protection Act, 2023, you have the right to:

• Obtain a summary of the personal data we process about you and our processing activities
• Correct or update inaccurate or incomplete personal data
• Erase personal data where the purpose for which it was collected has been fulfilled and retention is no longer legally required
• Withdraw consent previously given for processing, without affecting prior lawful processing
• Lodge a complaint with our Grievance Officer (see Section 25) and, thereafter, with the Data Protection Board of India if your complaint is not resolved to your satisfaction
• Nominate an individual to exercise these rights on your behalf in cases of death or incapacity

We are committed to facilitating the exercise of these rights in accordance with the DPDP Act and any rules or regulations notified thereunder.

18. Marketing Preferences & Opt-Out

We may send marketing communications where permitted by applicable law. You may opt out of marketing communications at any time by:

• Clicking the unsubscribe link in any marketing email you receive from us
• Contacting us directly at info@indiabizdata.com with an opt-out request

Opting out of marketing communications will not affect the delivery of transactional and service-related notifications, such as order confirmations and product delivery communications, which are necessary for fulfilling your purchase.

19. Payment Processing

All payments are processed through secure third-party payment service providers. India Biz Data does not directly store, process, or have access to complete payment card numbers or banking credentials on our own servers.

Payment processors operate under their own privacy policies and security standards. We encourage you to review the privacy policy of your payment provider. India Biz Data retains limited transaction records (such as order amounts, dates, and payment status) for order management, refund processing, and financial record-keeping purposes.

20. Customer Accounts

Where you create an account on our Website, you are responsible for maintaining the confidentiality of your login credentials and for all activity conducted under your account. Please notify us immediately if you suspect any unauthorized access to your account.

You are responsible for ensuring that your account information remains accurate, complete, and up to date. India Biz Data reserves the right to suspend or terminate accounts where information is found to be inaccurate, misleading, or fraudulent.

21. Children’s Privacy

Our Website and Services are intended exclusively for adults and business users. We do not knowingly collect, process, or store personal information from individuals under 18 years of age. If we become aware that personal data of a minor has been collected without appropriate consent, we will take steps to delete such data promptly. If you believe a minor has provided us with personal information, please contact us at info@indiabizdata.com.

22. Third-Party Websites

Our Website may contain links to third-party websites, platforms, and services. These links are provided for informational convenience only. India Biz Data does not control, endorse, or assume responsibility for the content, privacy practices, data handling, or terms of any third-party website. We encourage you to review the privacy policy of any third-party website you visit.

23. Communications

We may communicate with you for the following purposes:

• Transactional: Order confirmations, product delivery notifications, payment receipts, and account activity notices.
• Support: Responses to inquiries, issue resolution, and customer care communications.
• Policy & Legal: Updates to our Terms & Conditions, Privacy Policy, or other policies affecting your use of our Services.
• Marketing: Promotional offers, product updates, and business communications, sent only where permitted by law and subject to your opt-out rights under Section 18.

By using our Website or purchasing our products, you consent to receiving the transactional and support communications described above, as these are necessary for the delivery of our Services.

24. Changes to This Policy

We may update or revise this Privacy Policy periodically to reflect changes in our practices, services, or applicable law. The updated Policy will be published on the Website with a revised “Last Updated” date. We encourage you to review this Policy regularly.

Where changes are material, we will make reasonable efforts to notify you through the Website or via direct communication. Your continued use of the Website following any changes constitutes your acceptance of the updated Privacy Policy.

Where required by applicable law, we may seek renewed consent before implementing changes that materially affect how your personal information is collected, used, or disclosed.

25. Grievance Officer & Privacy Contact

In accordance with the Information Technology Act, 2000, the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and the Digital Personal Data Protection Act, 2023, India Biz Data has designated a Grievance Officer to address privacy-related concerns, data requests, and complaints.

If you have any questions, concerns, data access requests, correction requests, erasure requests, or complaints regarding this Privacy Policy or the handling of your personal information, please contact:

Grievance Officer
India Biz Data
Website: www.indiabizdata.com
Email: info@indiabizdata.com

We will make reasonable efforts to acknowledge your complaint or request within three (3) business days and endeavour to resolve it within thirty (30) days of receipt, subject to the complexity of the request and applicable legal requirements.

If you are not satisfied with the resolution provided by our Grievance Officer, you may escalate your complaint to the Data Protection Board of India, once constituted and operational under the DPDP Act, 2023.

26. Acceptance

By accessing or using the Website, purchasing products, or otherwise interacting with our Services, you acknowledge that you have read, understood, and agreed to this Privacy Policy and consent to the collection, use, and processing of your information as described herein.