Questions about this page?

Write to us and we will reply within one working day.

Privacy Policy | Bibhakar Spices

Who we are

This website is run by Bibhakar & Sons Private Limited (brand: Bibhakar Spices, BIBHAKAR®), CIN U46309UP2023PTC193607, Archana Enclave, Khora Colony, Ghaziabad, Uttar Pradesh 201020, India. We decide why and how your personal data is processed. Under Indian law we are the Data Fiduciary. Under the GDPR and UK GDPR we are the controller. Under Russian law we are the operator. Under Chinese law we are the personal information handler.

We are a business-to-business exporter of whole spices, seeds and coffee. This policy covers bibhakarspices.com in all languages (/en/, /ru/, /zh/) and direct contact with us by email, WhatsApp, Telegram and phone. Purchases on marketplaces such as Amazon, Walmart, Ozon, Joom, Flipkart, JioMart, ONDC, Etsy, GlobalLinker and IndiaMART are governed by that marketplace’s own privacy policy.

What personal data we collect

Enquiry and quote forms: name, company, country, email address or WhatsApp number, products and quantities, your message, and any file you choose to upload (for example a specification sheet).
Direct contact: the details and messages you send us by email, WhatsApp, Telegram or phone.
Orders and trade documents: contact person, billing and delivery address, tax or import IDs, and payment references needed for invoices, shipping and customs.
Technical data: IP address, browser type and request logs kept by our host and Cloudflare for security, a language cookie (pll_language) and, only if you agree, analytics data from Google Analytics 4 or Yandex Metrica.
We do not ask for sensitive data such as health, religion or biometric data. Please do not send it.

Where the data comes from

Most data comes directly from you. Some comes from your browser when you visit the site. We may also receive business contact details from trade fairs, export promotion bodies, B2B directories or marketplaces where you listed your business, or from a colleague who referred you. If we contact you using such details, we tell you where we found them, and you can ask us to stop at any time.

Why we use your data and our legal basis

We use personal data only for the purposes below. The legal basis column uses GDPR terms. In India we rely on your consent or on legitimate uses allowed by the DPDP Act. In Russia we rely on your consent or on a contract with you. In China we rely on consent or on what is needed to conclude or perform a contract.

Answer enquiries and send quotations or samplesSteps you request before a contract (GDPR Art. 6(1)(b)); consent where required (Russia, India)

Process orders, invoices, shipping and paymentPerformance of a contract (Art. 6(1)(b))

Keep tax, GST, export and customs recordsLegal obligation (Art. 6(1)(c)) under Indian law

Business follow-ups, price lists and product news to existing buyersLegitimate interest (Art. 6(1)(f)); you can opt out at any time

Protect the site from spam, fraud and attacksLegitimate interest (Art. 6(1)(f))

Website analytics (Google Analytics 4, Yandex Metrica)Consent (Art. 6(1)(a)); off until you accept

Respond to authorities and defend legal claimsLegal obligation or legitimate interest (Art. 6(1)(c) and (f))

Cookies

We use one functional cookie (pll_language) to remember your language. Analytics cookies are set only after you accept them in our cookie banner. We do not use advertising pixels, session recording or Google Fonts, Maps or YouTube embeds. See our Cookie Policy for the full list and how to change your choice.

International transfers

We are based in India. Our website, database and business email are hosted by Hostinger on servers in Mumbai, India, so data you send us from abroad is received, stored and handled in India. Cloudflare may process technical data on its global network to protect the site. India does not have an EU or UK adequacy decision. Where EU or UK data is involved, we rely on Standard Contractual Clauses, the UK Addendum or another lawful mechanism. You can ask us for a copy of the relevant safeguards.

Russian users: before any cross-border transfer, Russian law requires notice to Roskomnadzor and checks on the receiving country. See the Russia section below. Chinese users: personal information you provide is transferred to India, as explained in the China section.

How long we keep data

We keep data only as long as needed for the purpose, or longer if the law requires it. Then we delete or anonymise it.

Enquiries that did not lead to an order24 months after the last contact, then deleted

Customer, order, invoice and shipping recordsAt least 8 years from the end of the relevant financial year, as required by Indian company, GST and tax law

Uploaded files (specification sheets)With the related enquiry or order record

Security and server logsAt least 1 year (DPDP Rules), then deleted [confirm host log settings]

Analytics data14 months in Google Analytics 4; Yandex Metrica per its settings

Consent recordsFor as long as we rely on the consent, plus the limitation period for claims

How we protect data

We use HTTPS encryption, Cloudflare protection, access limited to staff who need it, strong passwords with two-factor login, regular updates and backups. No system is completely secure. If a breach affects your data, we will notify you and the relevant regulators as the law requires. Our service providers must also keep your data secure under their contracts with us.

Your rights in India

Under the Digital Personal Data Protection Act, 2023 you can access a summary of your data, correct, complete or erase it, withdraw consent, nominate another person to act for you, and raise a grievance with us. If you are not satisfied, you can complain to the Data Protection Board of India.

The DPDP Rules, 2025 were notified on 13 November 2025 and apply in phases. Most duties and rights start on 13 May 2027. Until then, the Information Technology Act, 2000 and the 2011 SPDI Rules also apply. We already follow the DPDP standard.

Your rights in the EU, EEA and UK

You can ask for access, correction, deletion, restriction, data portability, and object to processing based on legitimate interest, including direct marketing. You can withdraw consent at any time without affecting earlier processing. You can complain to your local supervisory authority, or in the UK to the Information Commissioner’s Office. We do not make decisions about you using only automated processing. [EU/UK representative: name and address, or state none appointed under Art. 27(2), to be decided].

Your rights in Russia

Under Federal Law No. 152-FZ you can get information about the processing of your data, ask us to correct, block or destroy it, withdraw consent, and complain to Roskomnadzor or a court. The Russian (/ru/) site has no online forms. Visitors from Russia contact us by email or Telegram, and our separate consent document, required since 1 September 2025, explains how we process the data you send us.

Your messages are received by us in India. [Roskomnadzor notifications: state registration and cross-border transfer notification status, to be confirmed by Russian counsel.]

Your rights in mainland China

Under the Personal Information Protection Law you can know about, decide on, restrict or refuse processing, access and copy your information, ask for correction, deletion or transfer, ask us to explain these rules, and withdraw consent. Your information is processed by us in India. By submitting a form on the /zh/ site you are asked to give separate consent to this transfer outside China. [Representative in China under PIPL Art. 53: name and contact, or decision pending.]

Your rights in the United States

We are a small business that does not sell or share personal data for advertising. We do not meet the thresholds of the California Consumer Privacy Act or similar state laws. Still, any US visitor can ask us to access, correct or delete their data, and we will respond.

How to exercise your rights and Grievance Officer

Email enquiry@bibhakarspices.com with the subject line Privacy Request. Tell us your name, the email or phone number you used with us, and what you want. We may ask for proof of identity. We reply within 30 days, and within the shorter time any local law sets. Grievances are resolved within 90 days at most.

Grievance Officer: Abhinav Jha, Co-founder, Bibhakar & Sons Private Limited, Archana Enclave, Khora Colony, Ghaziabad, Uttar Pradesh 201020, India. Email: enquiry@bibhakarspices.com. Phone: +91 70114 18721.

Children

This is a business website for adult professional buyers. We do not knowingly collect data from anyone under 18. If you believe a child has sent us data, contact us and we will delete it.

Changes to this policy

We may update this policy when the law or our services change. The date at the top shows the latest version. If a change is significant, we will show a notice on the site or contact customers directly.

Contact us

Bibhakar & Sons Private Limited, Archana Enclave, Khora Colony, Ghaziabad, Uttar Pradesh 201020, India. Email: enquiry@bibhakarspices.com. WhatsApp or phone: +91 70114 18721. Telegram: @bibhakarspices.

Frequently asked questions

Does Bibhakar Spices sell my personal data?

No. We never sell or rent personal data. We share it only with service providers such as our host, email provider, Cloudflare, logistics firms and banks, and only as needed to answer you or deliver your order.

Is my enquiry data sent outside my country?

Yes. We are based in India and our website, database and email are hosted in Mumbai, India, so your enquiry is received, stored and handled in India. We use contractual safeguards where the law requires them.

Do you use tracking or analytics cookies?

Only if you accept them. Google Analytics 4 (English site) and Yandex Metrica (Russian site) stay off until you consent. We use no advertising pixels and no session recording.

How do I delete my data?

Email enquiry@bibhakarspices.com with the subject Privacy Request. We delete data we no longer need, but must keep order, invoice and export records for the period Indian tax law requires.

This English version is the authoritative text. Russian and Chinese versions are translations.