Privacy Policy

Last updated: 29 August 2026

Baba Biswanath Trading Company (“we”, “us”, “our”) is a tea sourcing and export business based in Assam, India. This policy explains what personal data we collect through this website, why we collect it, who we share it with, and the rights you have over it.

Who we are

Baba Biswanath Trading Company
NT Road, Behind Royal Palace Hotel
NH 15, Principal Main Road, Biswanath Chariali
Biswanath, Assam 784176, India
Email: [email protected]

We are the data controller for the information described below. For questions, complaints, or requests about your data, write to the address above — we aim to respond within 30 days.

Information we collect

• Enquiry data you give us through our quotation, sample request, contact, quick enquiry, and document download forms: your name, business email, telephone number, company, country, product and grade interest, quantity, target price, shipping address where relevant, and anything you write in the message field.
• Usage data collected by analytics: pages viewed, approximate location derived from your IP address, referring site, and general device and browser information. This is used in aggregate.
• Technical data processed to keep the site working and to prevent abuse, including your IP address, which is used for rate limiting and spam prevention. We do not retain IP addresses as part of your enquiry record.

We do not knowingly collect special category data, and you should not send us any. We ask only for what a quotation actually requires.

Why we use it, and on what basis

• To answer your enquiry and prepare quotations, samples, and documentation. Where the UK or EU GDPR applies, the basis is taking steps at your request before entering a contract.
• To manage the business relationship and follow up on enquiries. Basis: our legitimate interest in responding to and servicing business enquiries.
• To operate, secure, and improve the site. Basis: our legitimate interest in a functioning, non-abused website.
• To meet legal and export obligations where record-keeping is required.

Where India’s Digital Personal Data Protection Act, 2023 applies, we process your data for the lawful purpose for which you provided it — responding to your enquiry — and you may withdraw consent at any time by writing to us.

Cookies and analytics

We use Google Analytics 4 to understand how the site is used. It sets cookies that record visits in aggregate. We do not use advertising cookies, and we do not sell or share your data with advertising networks.

We use Cloudflare Turnstile on our forms to distinguish people from automated abuse. It is a privacy-preserving alternative to a conventional CAPTCHA and does not track you across sites.

You can block or delete cookies in your browser settings. The forms and the rest of the site will continue to work.

Who we share it with

We do not sell your personal data. We share it only with the service providers that operate this site on our behalf, each under their own contractual obligations:

• Railway — application hosting.
• Neon — the database in which enquiries are stored.
• Cloudflare — domain, content delivery, form spam protection, and email routing.
• Resend — delivery of enquiry confirmation and notification emails.
• Google — website analytics.

We may also disclose data where we are legally required to, or to establish or defend a legal claim.

International transfers

We are based in India, and the providers above operate infrastructure in various countries. If you contact us from the UK, EU, or elsewhere, your data will be transferred to and processed in those locations. Where such a transfer is subject to GDPR, it is made under appropriate safeguards, such as the European Commission’s standard contractual clauses.

How long we keep it

We keep enquiry records for 36 months from our last contact with you, which reflects how long a trade enquiry realistically stays live, after which they are deleted or anonymised. Where export, tax, or other law requires a longer period, we keep only what that law requires. Analytics data is retained according to Google Analytics’ own retention settings.

Your rights

Depending on where you are, you may have the right to:

• ask for a copy of the personal data we hold about you;
• have inaccurate data corrected;
• have your data deleted;
• restrict or object to how we use it;
• receive your data in a portable format;
• withdraw consent, where we relied on it; and
• complain to your data protection authority.

To exercise any of these, email [email protected] or write to the postal address above. We will not charge you or treat you differently for asking.

Security

The site is served over encrypted connections (HTTPS), administrative access requires multi-factor authentication, and enquiry data is held in an access-controlled database. No system is perfectly secure, but we take reasonable technical and organisational measures appropriate to the data we hold.

Children

This is a business-to-business website and is not directed at children. We do not knowingly collect data from anyone under 18.

Changes to this policy

We may update this policy as our business or the law changes. The date at the top shows when it was last revised.

Contact

For any privacy question or request, email [email protected], or use our contact page.

This document is currently undergoing legal review. Where it conflicts with a signed contract or a written quotation, that document prevails.