Privacy Policy

This Privacy Policy explains how Insta Bizmart Private Limited, a company registered in India (CIN: U51909DL2019PTC345272), trading in the United Kingdom through a virtual office, collects, uses, stores, and protects your personal information. We act as the data controller for the personal data you provide to us, and this policy is published in compliance with applicable data protection laws, including the UK GDPR, the EU GDPR, and the Digital Personal Data Protection Act, 2023 (India).

1. Information We Collect

We collect information you provide directly to us when you fill out a contact form, request a quote, subscribe to our newsletter, book an appointment, or use our services. This may include your name, email address, phone number, business details, and payment information processed on our behalf by our payment provider.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services.
• Process transactions and send related information, including confirmations and invoices.
• Send technical notices, updates, security alerts, and support messages.
• Respond to your comments, questions, and customer service requests.

3. International Data Transfers (India ↔ UK / EEA)

Because Insta Bizmart Private Limited is registered in India and trades in the UK, your personal data may be transferred between India, the United Kingdom, and the European Economic Area (EEA). Where personal data originating from the UK or EEA is transferred to India, we rely on appropriate safeguards — including Standard Contractual Clauses (SCCs) and binding internal data protection policies aligned with the Digital Personal Data Protection Act, 2023 (India) — to ensure your data receives a level of protection consistent with UK GDPR and EU GDPR requirements.

4. Data Sharing & Third Parties

We do not sell, trade, or rent your personal identification information to others. We may share generic aggregated demographic information with our business partners and trusted affiliates. We work with trusted third-party service providers to help us operate our business — including Stripe (payments), communication and automation platforms, and cloud hosting — provided that those parties agree to keep this information confidential and process it only on our instructions under appropriate data processing agreements.

5. Your Data Rights (UK GDPR, EU GDPR & India DPDP Act)

If you are a resident of the United Kingdom, the European Economic Area (EEA), or India, you have certain data protection rights. Under the UK/EU GDPR and the Digital Personal Data Protection Act, 2023 (India), you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your personal data ("right to be forgotten").
• Restrict or object to the processing of your data.
• Request portability of your data to another service.
• Withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, please contact us using the details in Section 8. We will respond within the statutory timeframes (generally one month).

6. Cookies

Our website uses "cookies" and similar technologies to enhance your experience and to understand how the website is used. Cookies are small text files stored on your device. You can set your web browser to refuse cookies or to alert you when cookies are being sent; however, some parts of our website may not function properly without them. We use the following categories of cookies:

• Strictly Necessary Cookies: Required for the website to function (e.g. remembering your cookie consent preference). These cannot be disabled.
• Performance & Analytics Cookies: Used by Google Analytics to collect anonymous information about how visitors use our website so we can improve it.
• Functionality Cookies: Remember your choices (e.g. language or region) to provide a more personalised experience.
• Targeting & Advertising Cookies: Used by our marketing partners (e.g. Meta) to deliver relevant ads and measure their effectiveness.

7. Data Controller & Contact Information

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, to comply with our legal obligations, resolve disputes, and enforce our agreements. When your data is no longer needed, we will securely delete or anonymise it in accordance with applicable law.

9. Data Security

We implement appropriate technical and organisational measures (including encryption in transit, access controls, and regular security reviews) to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date at the top.

11. Your Right to Complain

If you believe we have not handled your personal data in accordance with this policy or applicable law, you have the right to lodge a complaint with your local data protection authority — in the UK, the Information Commissioner's Office (ICO) at ico.org.uk.

If you have any questions about this Privacy Policy, please contact us.