Privacy Policy

We collect information in the following broad categories:

• Information you provide directly: Your name, email address, phone number, company name, designation, and any details you share when you fill out a contact form, request a consultation, subscribe to our newsletter, apply for a job, or enrol in a training program.
• Business information: When you engage our services, we may collect business details such as your website, industry, marketing goals, ad-account access, and any assets or credentials required to deliver the engagement.
• Payment information: Billing name, address, GSTIN, and transaction references. Card numbers and net-banking credentials are handled entirely by our payment gateway partners and are never stored on our servers.
• Technical information: IP address, browser type and version, device identifiers, operating system, referring URLs, pages visited, and time spent on pages, collected through cookies and similar technologies.
• Communications: Records of emails, WhatsApp messages, support tickets, and call notes created when you interact with our team.

We use your personal information for the following lawful purposes:

• To respond to your enquiries and provide consultations, proposals, and quotes.
• To deliver, manage, and improve the services you have engaged us for.
• To process payments, issue invoices, and maintain accounting and tax records.
• To communicate with you about your project, renewals, and relevant updates.
• To send marketing communications, newsletters, and event invitations (only with your consent, which you may withdraw at any time).
• To analyse and improve our website, services, and marketing performance.
• To detect, prevent, and address fraud, security issues, and policy violations.
• To comply with legal, regulatory, and contractual obligations.

We process your information on the basis of consent, contractual necessity, legal obligation, and our legitimate business interests in operating and securing our services.

Under the DPDP Act, 2023, we process your personal data only when we have a valid legal ground. Specifically, we process your data when:

• You have given clear, specific, and informed consent for a particular purpose;
• Processing is necessary for the performance of a contract or engagement you have with us;
• Processing is required to comply with a legal or regulatory obligation; or
• Processing is necessary for a legitimate purpose that does not override your rights and interests.

You may withdraw your consent at any time by contacting us at the details provided below. Withdrawing consent will not affect the lawfulness of processing carried out before withdrawal.

We do not sell your personal information. We may share it only in the following limited circumstances:

• Service providers & sub-processors: Trusted third parties that support our operations — such as cloud-hosting providers, email and analytics platforms, payment gateways, CRM tools, and ad-platform partners — under written agreements requiring confidentiality and data protection.
• Client engagements: When you refer us to a partner or when delivering services, only the minimum information necessary to perform the engagement is shared.
• Legal compliance: If required by law, court order, or government authority, or to protect our rights, property, or safety.
• Business transfers: In the event of a merger, acquisition, or asset sale, information may be transferred subject to the protections of this policy.

When sharing data with third parties, we require them to handle it in accordance with applicable data-protection laws and this policy.

We retain personal information only for as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required by law. General retention guidelines:

• Active client records: For the duration of the engagement plus 7 years for accounting and tax compliance.
• Marketing contacts: Until you unsubscribe or until 2 years of inactivity, whichever is earlier.
• Job applications: Up to 24 months unless you request earlier deletion.
• Website & analytics logs: Up to 13 months.
• Backups: Securely overwritten on a rolling schedule.

After the retention period, data is securely deleted or anonymised so it can no longer identify you.

We implement industry-standard technical, administrative, and physical safeguards to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (TLS) and at rest where applicable.
• Role-based access controls and multi-factor authentication for internal systems.
• Regular security reviews and staff training on data protection.
• Vetted, contractually-bound sub-processors with confidentiality obligations.
• Incident-response procedures for suspected breaches.

Under applicable law, you have the following rights regarding your personal data:

• Access & portability: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your data, subject to legal retention obligations.
• Withdrawal of consent: Withdraw consent for processing at any time.
• Objection & restriction: Object to or restrict certain processing activities.
• Grievance redressal: Lodge a complaint with our Grievance Officer or the Data Protection Board of India.

To exercise any of these rights, email info@bizmeals.in. We will respond within the timeframes prescribed by law (typically 30 days).

We use cookies and similar technologies to operate, secure, and analyse our website and to personalise your experience. This includes essential cookies (required for the site to function), analytics cookies (to understand usage), and marketing cookies (to measure ad performance). You can control cookies through your browser settings, and our Cookie Policy provides further detail.

Our services are intended for businesses and professionals. We do not knowingly collect personal information from children under 18. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

BizMeals is headquartered in India. Some of our service providers may process data outside India. Where this occurs, we ensure that appropriate safeguards — such as standard contractual clauses and the transfer-impact assessments required under the DPDP Act — are in place to protect your information.

In compliance with the DPDP Act, 2023, we have appointed a Grievance Officer to address concerns regarding the processing of your personal data:

You may also lodge a complaint with the Data Protection Board of India if you are not satisfied with our response.

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. The “Last Updated” date at the top of this page indicates when the policy was last revised. Material changes will be highlighted on our website. Continued use of our services after a change constitutes acceptance of the updated policy.

If you have any questions about this Privacy Policy or our data practices, please contact us:

• Email: info@bizmeals.in
• Phone: +91 8217330484
• Address: Bangalore, Karnataka, India