Privacy Policy
This policy explains what personal data YesBatch collects, why, who we share it with, and the rights you have under the Digital Personal Data Protection Act, 2023 and other Indian law. YesBatch is run by [Company legal name, e.g. YesBatch Technologies Private Limited] ("we", "us"), which is the Data Fiduciary for the data described here.
1. What we collect
We collect only what we need to run the service:
- Account details: your name, email, mobile number, brand or business name, city, what you sell and, if you give it, your GST number.
- Requirements and quotes: the items, quantities, specifications, delivery city and pincode, dates and notes you send us, and the quotes we send you.
- Supplier details (for suppliers): business name, location, GST number, the categories you supply, and your prices and lead times.
- Messages you send us by email, phone or WhatsApp about an inquiry.
- Technical data: the cookies listed in section 8, and server logs (IP address, browser type, pages requested, time) that we keep for security.
We do not collect payment card or bank details on this site.
2. Why we use it
- To create and secure your account.
- To understand your requirement, prepare a quote, and contact you about it.
- To arrange sourcing, testing, manufacturing and delivery once you accept a quote.
- To issue GST invoices and keep the records Indian tax law requires.
- To prevent fraud and misuse, and to fix problems with the site.
- To improve our catalogue and service, using summaries that do not identify you.
3. Your consent
We process your personal data with your consent, which you give when you create an account, and for the legitimate uses the Act allows (for example, to meet a legal duty). You can withdraw consent at any time by writing to our Grievance Officer (section 10). Withdrawing does not affect processing already done, but we may not be able to handle open inquiries without your details.
4. Who we share it with
- Makers, suppliers, labs and couriers who work on your inquiry or order. We share only what they need, such as specifications, quantities and the delivery address. We do not give suppliers your contact details unless it is needed to deliver or fix your order.
- Service providers who host the site, send email or messages, and store backups, under contracts that require them to protect your data.
- Authorities when the law requires it, such as tax or law-enforcement requests.
We do not sell your personal data.
5. How long we keep it
We keep account data while your account is open. When you close your account or withdraw consent, we delete or anonymise your data within a reasonable time, except records we must keep by law (for example, invoices and tax records for the period required under GST law) or to settle a dispute.
6. Your rights
Under the Digital Personal Data Protection Act, 2023 you can:
- Ask for a summary of the personal data we hold about you and how we use it.
- Ask us to correct, complete or update it. You can also edit most details on your profile page.
- Ask us to erase it, subject to what we must keep by law.
- Withdraw your consent.
- Nominate another person to exercise these rights if you die or cannot act.
- Have your complaint handled by our Grievance Officer, and if you are not satisfied, complain to the Data Protection Board of India.
Write to the Grievance Officer (section 10) to use any of these rights. We may need to confirm your identity first.
7. How we protect it
We use encrypted connections (HTTPS), store passwords only as salted hashes, limit staff access to what their role needs, and keep backups. No system is perfectly secure; if a breach affects your data, we will inform you and the Data Protection Board as the law requires.
8. Cookies
We use only cookies the site needs to work. We do not use advertising or tracking cookies.
- sh_session: keeps you signed in.
- sh_city: remembers your delivery city.
- sh_req: holds your requirement list before you send it.
- sh_pending: holds a list you built before signing in, so we can send it after you sign in.
9. Children
YesBatch is a business service for people aged 18 or over. We do not knowingly collect data from children. If you believe a child has given us data, contact us and we will delete it.
10. Contact and Grievance Officer
Questions, requests and complaints about your personal data:
[Grievance Officer name], Grievance Officer
[Company legal name, e.g. YesBatch Technologies Private Limited]
[Registered office address]
Email: grievance@yesbatch.com
We aim to reply within 30 days.
11. Changes to this policy
We may update this policy as the service or the law changes. We will change the date at the top and, for important changes, tell signed-in users by email or on the site.