Privacy Policy

1. Who we are and how to reach us

Darsavio EXIM Private Limited ("Darsavio EXIM", "we", "us", "our") is a private limited company incorporated in India under the Companies Act 2013, Corporate Identification Number U82990UP2025PTC226042, with its registered office at F-22, First Floor, Udyog Kunj Industrial Area, Near NH 24, Ghaziabad, Uttar Pradesh 201009. We operate the website www.darsavioexim.com (the "Website") and provide international trade, sourcing, and export services to commercial buyers worldwide. For the purposes of EU/UK GDPR we are the data controller; for the purposes of the DPDPA 2023 we are the Data Fiduciary; for the CCPA/CPRA we are the business.

You can contact us at: Sales@darsavioexim.com · +91-70425-80201 · F-22, First Floor, Udyog Kunj Industrial Area, Near NH 24, Ghaziabad, Uttar Pradesh 201009.

2. Information we collect

2.1 Information you give us directly

• Identity and contact data: first name, last name, company name, country of operation, business email address, WhatsApp number, telephone number.
• Commercial intent data: product category of interest, target volume, intended destination market, INCOTERMS preference, packaging preference, payment terms preference, preferred language for quotations, any free-text message or attachment you submit.
• Communication data: emails, WhatsApp messages, call notes, meeting notes, and any other correspondence with our sales, documentation, or operations team.
• Contractual data: proforma invoices, commercial invoices, packing lists, bills of lading, certificates of origin, letter-of-credit references, payment confirmations, shipping advice, collected when you become a customer.
• Compliance data: name and registration number of your business, importer reference number where applicable, sanctions-screening result, beneficial-owner identity for higher-value transactions, required by Indian and international anti-money-laundering and export-control law.

2.2 Information we collect automatically

• Network and device data: Internet Protocol (IP) address, approximate city and country derived from your IP, user-agent string, browser type and version, operating system, device type, screen resolution, language and locale preference, referring URL, exit URL.
• Usage data: pages viewed, time on page, click and scroll events, file downloads, video plays, search queries entered on the Website.
• Cookies and similar technologies: see Section 6 for a full breakdown.
• Server logs: request URL, method, status code, response time, and bytes served, retained for security and abuse prevention.

2.3 Information we receive from third parties

• Sanctions and watchlist data from OFAC (US Treasury), HM Treasury (UK), the EU consolidated list, and the United Nations Security Council list, used to screen counterparties before we ship.
• Identity and registration data from publicly available corporate registries (MCA21 in India, Companies House in the UK, equivalent registries in your country) to validate buyer legitimacy.
• Marketing data from Google LLC and Meta Platforms Inc.: aggregated audience signals tied to advertising you may have seen.

3. Why we use your information (purposes and legal bases)

We do not subject you to any decision based solely on automated processing that produces legal or similarly significant effects. Sanctions screening generates a flag for a human reviewer; the reviewer makes the final call.

4. Who we share your information with

4.1 Internal recipients

Authorised personnel of Darsavio EXIM Private Limited on a need-to-know basis, typically sales, documentation, finance, compliance, and senior management. All staff sign confidentiality undertakings and complete data-handling training.

4.2 Service providers (processors)

• Vercel Inc. (USA): hosting of the Website and edge logs. Vercel signs Standard Contractual Clauses (SCCs) where required.
• Google LLC (USA / EU): Google Analytics 4, Google Ads, Google reCAPTCHA, Google Workspace email and storage. Google relies on the EU-US Data Privacy Framework and SCCs.
• Meta Platforms Inc. (USA / Ireland): Meta Pixel and Conversions API for advertising measurement, where consent is granted.
• Zoho Corporation Pvt. Ltd. (India / EU / USA): CRM, ticketing, calendar, email, and contract management. Data primarily resides in EU and India regions.
• Customs brokers, freight forwarders, shipping lines, container line agents, surveyors, insurers, and inspection agencies appointed for your shipment, limited to the data each one needs to perform its role.
• Indian and destination-country banks processing FEMA-compliant inward remittances and outward documentation.
• Professional advisers (auditors, lawyers, chartered accountants, company secretaries) under strict confidentiality.

4.3 Authorities and law-enforcement

We disclose data when required by law or court order, including but not limited to: Directorate General of Foreign Trade (DGFT), Indian Customs (CBIC), Goods and Services Tax authorities, Income Tax Department, Reserve Bank of India under FEMA, Financial Intelligence Unit India under PMLA, Enforcement Directorate, equivalent authorities in destination countries, and foreign regulators acting through lawful international cooperation channels.

4.4 Business transfers

If Darsavio EXIM is involved in a merger, acquisition, restructuring, sale of substantial assets, insolvency, or similar event, your data may be transferred to the successor entity. Recipients are bound by confidentiality and by terms no less protective than this policy. You will be notified of any material change.

5. International data transfers

Your data may be transferred to and processed in jurisdictions outside your country of residence, including India, the United States, the European Economic Area, the United Kingdom, Singapore, and others depending on where our processors and counterparties operate. For transfers from the EEA, UK, or Switzerland we rely on the European Commission's Standard Contractual Clauses (SCCs), the UK International Data Transfer Addendum, the EU-US Data Privacy Framework where the processor is certified, and supplementary measures including encryption and access control. For transfers from India under DPDPA 2023, we transfer only to countries not on any restricted list notified by the Central Government. You may request a copy of the relevant safeguard by emailing us.

6. Cookies and similar technologies

A cookie is a small text file stored on your device when you visit a website. Similar technologies include localStorage, sessionStorage, IndexedDB, web beacons, and SDK identifiers. We classify what we use into four categories:

We implement Google Consent Mode v2. Before you make a choice, Google receives only cookieless, anonymous pings that count the visit but do not store any identifier on your device and cannot be used to recognise you on other websites. After you accept, cookies are written and full measurement applies. After you reject, the default cookieless mode continues for the duration of your visit.

You can change your choice any time via the Cookie preferences link in the footer of every page, or by clearing your browser's storage for this site.

7. How long we keep your information

• Unconverted enquiries: 36 months from your last contact, then deleted from active CRM. Anonymous aggregate metrics retained.
• Active customer records: for the duration of the commercial relationship plus eight (8) years thereafter to comply with Indian Income Tax Act 1961, Customs Act 1962, GST Act 2017, FEMA 1999, and PMLA 2002 retention requirements.
• Shipping documents and statutory filings: minimum eight (8) years; some categories ten (10) years.
• Email and chat correspondence: three (3) years from last message, then archived for two (2) more years, then deleted.
• Server access logs: 30 days rolling.
• Analytics aggregated data: 14 months (GA4 default; can be reduced on request).
• Marketing audiences: 540 days or until you withdraw consent, whichever is sooner.
• Cookie consent record: 12 months; banner reappears thereafter so you can reconfirm.

Where law requires longer retention, the legal minimum prevails. Where you exercise an erasure right and we are unable to comply for legal reasons, we will tell you why and what data we have retained.

8. Your rights

8.1 Rights under EU/UK GDPR

Right of access; right to rectification; right to erasure (subject to legal-retention overrides); right to restriction of processing; right to data portability; right to object to processing based on legitimate interest or direct marketing; right to withdraw consent at any time without affecting prior lawful processing; right not to be subject to a decision based solely on automated processing; right to lodge a complaint with your supervisory authority: for the EU this is the data protection authority of your country, for the UK this is the Information Commissioner's Office (ico.org.uk).

8.2 Rights under DPDPA 2023 (India)

Right to summary of personal data being processed; right to correction, completion, updating, and erasure; right to grievance redressal; right of nomination (the right to appoint another individual to exercise these rights in case of your death or incapacity); right to withdraw consent. Complaints can be escalated to the Data Protection Board of India under Section 27 once the Board is operational.

8.3 Rights under CCPA / CPRA (California)

Right to know what personal information we collect, use, share, or sell; right to delete; right to correct; right to opt out of sale or sharing (we do not sell personal information); right to limit use of sensitive personal information; right to non-discrimination for exercising any of these rights. The "Do Not Sell or Share My Personal Information" right is honoured via the Global Privacy Control (GPC) signal: if your browser sends GPC, we treat it as a valid opt-out.

8.4 Rights under LGPD (Brazil)

Right to confirmation, access, correction, anonymisation or deletion, portability, information about sharing, withdrawal of consent, and review of automated decisions. Brazilian data subjects can complain to the Autoridade Nacional de Proteção de Dados (ANPD).

8.5 How to exercise a right

Email Sales@darsavioexim.com with subject "Privacy request — [type]" and we will reply within 30 days (Indian DPDPA) or one (1) month (EU/UK GDPR), extendable by two further months for complex requests with notice to you. We may ask you to verify identity through reasonable means before acting. There is no charge for the first request in a 12-month period; we may charge a reasonable fee or refuse manifestly unfounded or excessive requests.

9. Security

We implement appropriate technical and organisational measures including: TLS 1.3 in transit; encryption at rest for production datastores; multi-factor authentication on administrator accounts; role-based access control with least-privilege principle; quarterly access reviews; logging and monitoring of privileged actions; regular dependency scanning and patching; segregated production and non-production environments; backup encryption and geographically separated copies; documented incident response plan with named owners; written agreements with all processors requiring equivalent measures. We do not process payment-card data on our infrastructure. Settlements go through buyer or beneficiary banks. In the event of a personal-data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and you without undue delay where the law requires.

10. Children

The Website is a business-to-business resource and is not directed at children. We do not knowingly collect personal data from anyone under 18 (under 13 for California / under 18 for India under DPDPA 2023). If you believe a minor has provided us with personal data, please contact us so we can delete it.

11. Direct marketing

We send transactional emails (quotes, shipment updates, document exchanges) that you cannot opt out of while a commercial relationship is active. We send marketing emails only with prior consent. You can withdraw consent any time by clicking the unsubscribe link in any marketing email or by emailing Sales@darsavioexim.com. Withdrawal applies to future marketing only.

12. Third-party links

The Website may link to third-party sites (carrier track-and-trace pages, partner directories, regulator portals). We are not responsible for the privacy practices of those sites. Review their policies before submitting data.

13. Changes to this policy

We may update this policy from time to time to reflect changes in our practices, in the services we offer, or in applicable law. The "Last updated" date at the top will change accordingly. For material changes we will give reasonable advance notice, typically by email to active enquiry-form contacts and by prominent notice on the Website for at least 30 days. Continued use of the Website after the effective date constitutes acceptance of the revised policy.

14. Governing law and dispute resolution

This policy is governed by the laws of India. The courts at Delhi NCR have exclusive jurisdiction, subject to the mandatory rights of data subjects under the law of their habitual residence to bring proceedings before their local supervisory authority or court.

15. Grievance Officer

For grievance redressal under DPDPA 2023 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules 2011:

Mr. Nitik Singh
Grievance Officer
Darsavio EXIM Private Limited
F-22, First Floor, Udyog Kunj Industrial Area, Near NH 24, Ghaziabad, Uttar Pradesh 201009
Telephone: +91-70425-80201
Email: darsavioeximpvtltd@gmail.com

The Grievance Officer will acknowledge complaints within 24 hours of receipt during business days and resolve them within 15 days as required by Indian law. If you remain unsatisfied with the response, you may approach the Data Protection Board of India once it is operational, or your local supervisory authority.

16. Contact us

Darsavio EXIM Private Limited
Corporate Identification Number: U82990UP2025PTC226042
Registered office: F-22, First Floor, Udyog Kunj Industrial Area, Near NH 24, Ghaziabad, Uttar Pradesh 201009
Sales: Sales@darsavioexim.com · +91-70425-80201
General: darsavioeximpvtltd@gmail.com