Privacy Policy

This Privacy Policy explains how Business Owners Group (“we”, “us”) collects, uses, shares and protects personal data when you use our website, member dashboard, mobile application and events (the “Platform”).

It is written in line with the Information Technology Act, 2000, the rules made under it and the Digital Personal Data Protection Act, 2023. By using the Platform you agree to this policy and to our Terms & Conditions.

Information you give us

• Account details: name, date of birth, mobile number, email address and password (stored only as a secure hash).
• Business details: business name, business type and category, address, city, state and PIN code, GSTIN, website, logo, contact mobile, WhatsApp number and business email.
• Products: photos, names, descriptions, prices and availability of what you list.
• Communications: enquiries, quotes and messages exchanged with other members, contact requests, and messages you send us through the contact form.
• Event bookings: the events and slots you book, the number of seats and your check-in status.

Information created when you use the Platform

• Payment records: amount, purpose, status, receipt number, payment method type and the reference IDs issued by Razorpay. We do not receive or store your card number, CVV, UPI PIN or banking passwords.
• Technical data: IP address, device and browser type, login sessions and security logs.

Photos you upload are re-encoded when they are saved, which also removes hidden metadata such as the GPS location that phone cameras embed.

• to create and manage your account, activate your membership and issue your Business ID;
• to show your business profile and products to other active members, and to enable search, enquiries, quotes and messages;
• to process payments, issue receipts and handle refunds;
• to manage event bookings, issue QR tickets and check you in at the venue;
• to send service messages such as payment and booking confirmations, renewal reminders and important account notices;
• to answer your questions and resolve complaints;
• to keep the Platform secure, prevent fraud and misuse, and enforce our Terms;
• to comply with legal obligations, such as tax and accounting rules.

We do not sell your personal data, and we do not use it for third-party advertising.

Member contact details are protected by controlled access:

• Your business profile is visible only to logged-in members with an active membership — not to the public and not to search engines.
• By default your contact number and email are hidden. Another member can see them only if you approve their contact request, if you choose “all active members” in your profile settings, if you send them a contact request yourself, or if an enquiry between your businesses reaches the quoted, accepted or completed stage.
• You can change who sees your contact details at any time from your dashboard.

Members may use each other's contact details only for genuine business purposes.

• Other members: your business profile and products, and your contact details under the rules above.
• Payment gateway: Razorpay processes your payments and handles payment data under its own privacy policy and applicable RBI and PCI-DSS requirements.
• Service providers: hosting, email and messaging providers that process data on our behalf, under confidentiality obligations and only to provide the service.
• Legal and safety reasons: government authorities, courts or law enforcement when required by law, or to protect the rights, property and safety of our members and the Platform.
• Business transfers: a buyer or successor if our business is reorganised, merged or sold, who must continue to protect your data under this policy.

We use essential cookies to keep you logged in and to keep your session secure. They are necessary for the Platform to work; if you block them in your browser, you will not be able to log in.

We do not use advertising cookies. If we introduce analytics in the future, we will update this policy.

We keep your account and business data for as long as your account exists. If you ask us to delete your account, we delete or anonymise your personal data within a reasonable time, except where we must keep it longer — for example payment records required by tax and accounting laws, or information needed to resolve disputes, prevent fraud or enforce our Terms.

Messages sent through our contact form are kept for as long as needed to respond and for our records.

• Passwords are stored only as secure hashes, never in plain text.
• Data travels over encrypted (HTTPS) connections.
• Access to member data is limited to authorised staff who need it to run the Platform.
• Card and bank details are handled by Razorpay, a PCI-DSS compliant payment gateway.

No system is completely secure. If we become aware of a personal data breach that affects you, we will inform you and the authorities as required by law.

Subject to applicable law, you can:

• ask for a summary of the personal data we hold about you and how it is used;
• correct or update inaccurate or incomplete data — most details can be edited directly in your dashboard;
• ask us to erase your data by closing your account, subject to legal retention requirements;
• withdraw consent at any time (this does not affect processing already carried out);
• nominate another person to exercise your rights in the event of death or incapacity;
• raise a grievance with us, and escalate it to the Data Protection Board of India if you are not satisfied with our response.

To exercise these rights, contact us using the details below. We may need to verify your identity before we act on a request.

The Platform is meant for business owners aged 18 and above. We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.

We may update this policy from time to time. The “Last updated” date at the top shows when it last changed. For significant changes, we will also notify you on the Platform or by email.

If you have questions or complaints about this policy or how we handle your data, contact our Grievance Officer, Business Owners Group:

• Contact form: send us a message

We acknowledge complaints within 24 hours and aim to resolve them within 15 days of receipt.