Privacy Policy

We collect information you provide directly and information generated automatically when you use our services:

• Contact & identity data: Name, company name, email address, phone/WhatsApp number — provided when you submit an RFQ, register for the Buyer Portal, or contact us.
• Order & transaction data: Product specifications, quantities, destination country, shipping addresses, and payment records associated with your orders.
• Portal account data: Login credentials (hashed), portal activity, quote history, sample requests, and uploaded documents (e.g. spec sheets, BOL).
• Linen Intelligence quiz data: Business type, target market, quality tier, and product category selections — used only to generate your on-screen recommendations and are not retained beyond your session unless you request a quote.
• Usage data: Pages visited, referring URLs, device type, browser, IP address (anonymised after 24 hours), and on-page interactions via Google Analytics and Microsoft Clarity.
• Communications: Emails, WhatsApp messages, and chat transcripts when you contact our export desk.

We use your data to:

• Process and fulfil your export orders, including generating proforma invoices, packing lists, and certificates of origin.
• Respond to RFQs, sample requests, and general enquiries — typically within 24 hours.
• Operate and personalise your Buyer Portal experience (order history, saved quotes, reorder flows).
• Generate tailored product recommendations (e.g. through our Linen Intelligence tool).
• Send transactional communications: shipment notifications, port arrival alerts, and document-ready notifications.
• Send marketing communications only if you have explicitly opted in; you may withdraw consent at any time.
• Improve our website, tools, and services through aggregated analytics.
• Comply with Indian export regulations (DGFT, FEMA, GST), international trade law, and anti-money-laundering requirements.

We rely on the following legal bases (GDPR Article 6): contract performance for order fulfilment, legitimate interest for fraud prevention and service improvement, and consent for marketing.

We do not sell your personal data. We share it only with:

• Manufacturing & logistics partners: Verified mill partners and freight forwarders receive minimum necessary data (e.g. shipper name, product specs) to fulfil your order.
• Payment processors: If applicable, PCI-DSS compliant payment providers handling wire-transfer or online payment confirmation.
• Cloud service providers: Google Firebase (database, authentication, file storage) and Google Cloud (hosting). All are GDPR-compliant data processors under our DPA.
• Analytics providers: Google Analytics 4 (anonymised) and Microsoft Clarity (session recordings with personally identifiable data masked).
• Legal authorities: Where required by Indian law, court order, or customs authority in your import country.

Any third party receiving your data is contractually bound to use it solely for the described purpose.

We use the following cookies and similar technologies:

• Strictly necessary: Session and authentication cookies for the Buyer Portal. Cannot be disabled.
• Analytics (Google Analytics 4): Anonymised usage statistics. IP addresses are truncated before storage. You can opt out via your browser or Google Analytics Opt-out Add-on.
• Session recording (Microsoft Clarity): Heatmaps and session replays. PII fields (email, phone, passwords) are automatically masked. Disabled on the Buyer Portal.
• Local storage: We store your RFQ draft and quote-cart selections in your browser's localStorage so you can resume incomplete forms. This data never leaves your device unless you submit.

You can manage or delete cookies through your browser settings. Disabling analytics cookies does not affect your ability to use our site or portal.

Our website integrates with the following services, each governed by their own privacy policy:

• Google Firebase — Authentication, Firestore database, and file storage.
• Google Analytics 4 — Website usage analytics.
• Microsoft Clarity — Session recording and heatmaps.
• WhatsApp Business API — Enquiry chat (opt-in only).
• Vercel / Firebase App Hosting — Website and portal hosting.

Links to external sites (suppliers, certification bodies, logistics partners) are not covered by this policy.

• Order and transaction records: Retained for 7 years to comply with Indian GST and FEMA regulations.
• RFQ and enquiry data: Retained for 3 years from last contact, after which it is anonymised or deleted.
• Buyer Portal accounts: Retained while your account is active. You may request deletion; regulatory records must be retained for the statutory period even after account closure.
• Analytics data: Google Analytics data is retained for 14 months; Clarity recordings are retained for 90 days.
• Email / WhatsApp communications: Retained for 2 years, then deleted unless related to an active order.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Correct inaccurate or incomplete data.
• Erasure (“right to be forgotten”): Request deletion, subject to statutory retention obligations.
• Restriction: Ask us to limit how we process your data in certain circumstances.
• Data portability: Receive your data in a machine-readable format.
• Objection: Object to processing based on legitimate interest, including direct marketing.
• Withdraw consent: Where processing is consent-based, you may withdraw at any time without affecting prior processing.

To exercise any right, email privacy@anabyn.com. We respond within 30 days. If you are in the EU/UK, you also have the right to lodge a complaint with your local data protection authority.

We implement industry-standard safeguards including:

• TLS 1.3 encryption for all data in transit.
• AES-256 encryption for all data at rest in Firebase/Google Cloud.
• Role-based access controls: Buyer Portal data is accessible only to your account; admin data is restricted to authorised Anabyn staff via Firebase Security Rules.
• Passwords are never stored in plain text; Firebase Authentication handles credential hashing.
• Regular security reviews of Firestore rules and API endpoints.

Despite these measures, no internet transmission is 100% secure. In the event of a data breach that creates a high risk to you, we will notify you and the relevant authority within 72 hours as required by applicable law.

Our services are intended for business-to-business use and are not directed at children under 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal information, please contact us and we will promptly delete it.

Anabyn Global Ventures LLP is based in Palakkad, Kerala, India. Your data may be stored and processed by our service providers (Google Cloud, Firebase) in data centres located in the United States, European Union, and Asia Pacific regions.

Transfers to countries outside the European Economic Area are covered by Google's Standard Contractual Clauses (SCCs) and adequacy decisions where applicable, ensuring equivalent protection to EU data protection law.

We may update this policy to reflect changes in our practices or applicable law. When we make material changes, we will update the “Last updated” date at the top of this page and, where required, notify registered Buyer Portal users by email. We encourage you to review this policy periodically.

For privacy-related questions, data subject requests, or to report a concern: