Privacy Policy
Last updated: May 2026
1. Who We Are
Indobridge Procurement is an independent procurement company registered and operating from Surat, Gujarat, India. We act as an on-ground procurement partner for international buyers sourcing products from India. For any data protection enquiries, you may contact us at: contact@indobridgeprocurement.com.
2. Information We Collect
When you use our website or contact us, we may collect the following categories of personal data:
- Identity data: your name and company name
- Contact data: email address, phone number, and country of residence
- Communication data: the content of enquiries, messages, or files you send us
- Technical data: IP address, browser type, device information, and pages visited (collected via analytics tools)
3. How We Use Your Information
We use personal data only for the following purposes:
- To respond to your enquiries and provide procurement services
- To send you information about our services that you have requested
- To improve our website and understand how visitors use it
- To comply with legal obligations
- To protect the legitimate interests of our business
4. Legal Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA), we process your personal data under the following lawful bases under Article 6 of the GDPR:
- Consent (Art. 6(1)(a)): where you have opted in to receive communications from us
- Contract (Art. 6(1)(b)): where processing is necessary to take steps at your request prior to entering into a contract or to fulfil a contract
- Legal obligation (Art. 6(1)(c)): where we are required to process data to comply with applicable law
- Legitimate interests (Art. 6(1)(f)): where we have a legitimate business interest in processing your data and that interest is not overridden by your rights
5. Data Retention
We retain personal data only for as long as necessary for the purposes described in this policy. Our standard retention periods are:
- Enquiry and correspondence records: 3 years from the date of last contact
- Contract and financial records: 7 years in accordance with applicable accounting and tax laws
- Website analytics data: 26 months, as recommended by supervisory authorities
- After these periods, data is securely deleted or anonymised
6. Cookies
Our website uses cookies and similar technologies to improve your browsing experience and to analyse website traffic. Strictly necessary cookies are set automatically. Analytics cookies are only set with your consent. You may manage your cookie preferences at any time via the cookie settings on our website.
7. Third-Party Service Providers
We share personal data only with trusted third parties who help us operate our business, including:
- Email service providers for business communication
- Website analytics providers (e.g. Google Analytics)
- Cloud hosting and IT infrastructure providers
- All third-party providers are bound by data processing agreements and are prohibited from using your data for any other purpose
8. International Data Transfers
Indobridge Procurement is based in India. When you submit personal data to us, it is transferred to and processed in India. India is not currently recognised by the European Commission as providing an adequate level of data protection. Where we transfer data from the EEA, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission to ensure your data receives equivalent protection.
9. Your Rights Under GDPR
If you are located in the EEA, you have the following rights in relation to your personal data:
- Right of access — to request a copy of the personal data we hold about you
- Right to rectification — to request correction of inaccurate or incomplete data
- Right to erasure — to request deletion of your personal data where there is no compelling reason for its continued processing
- Right to restriction — to request that we restrict processing of your data
- Right to data portability — to receive your data in a structured, machine-readable format
- Right to object — to object to processing based on legitimate interests or for direct marketing
- Right to withdraw consent — at any time, where processing is based on consent, without affecting the lawfulness of prior processing
10. How to Exercise Your Rights
To exercise any of your rights, please contact us at contact@indobridgeprocurement.com. We will respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority. In the United Kingdom, this is the Information Commissioner's Office (ICO). In the EU, this is the data protection authority in your country of residence.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the date at the top of this page. We encourage you to review this policy periodically. Your continued use of our website after any changes constitutes your acceptance of the updated policy.
12. Contact Us
If you have any questions or concerns about this Privacy Policy or how we handle your personal data, please contact us at: Indobridge Procurement, Surat, Gujarat, India. Email: contact@indobridgeprocurement.com.