- We collect only what you give us through forms, calls or WhatsApp — such as your name, phone, email, location and enquiry — and use it to respond to you.
- We send promotional messages only if you agree, and you can withdraw consent at any time.
- We do not sell your personal data.
- You can ask us to access, correct or erase your data, and complain to our Grievance Officer or the Data Protection Board of India.
1. Who we are and what this policy covers
Balaji Agro Chemicals & Fertilizers (“BACF®”, “we”, “us”, “our”) is a sole proprietorship firm with its principal place of business at B014, Gopalpur Industrial Area, Sikandrabad, Uttar Pradesh 203205, India. We manufacture fertilizers and micronutrient mixtures, and market agricultural inputs — including products we trade under our licences — under brands including Nutricrop® and Urbankhetti®.
This Privacy Policy explains how we collect, use, store, share and protect personal data when you use our websites (balajiagrochem.com and bacf.org.in, together the “Website”), contact us by phone, email or WhatsApp, apply to become a dealer or distributor, make an enquiry, or otherwise interact with us (together, our “Services”).
For the purposes of the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the rules made under it, we are the Data Fiduciary for personal data we process for our own purposes, and you are the Data Principal. This policy is our notice to you under Section 5 of the DPDP Act. It is also published in accordance with the Information Technology Act, 2000 and the rules made under it, to the extent applicable.
By using the Website or providing personal data to us, you acknowledge that you have read and understood this policy. Where we rely on your consent, we will ask for it clearly and separately.
2. Personal data we collect
We collect only the personal data that is necessary for the purposes described below.
| Category | Examples | How we collect it |
|---|---|---|
| Identity and contact details | Name, mobile number, email address | Contact, enquiry, dealer and bulk-enquiry forms; calls; WhatsApp; email |
| Location details | Village or town, district, state, PIN code | Forms and dealer search |
| Precise location (optional) | Latitude and longitude from your device | Only when you choose “Use my location” and allow it in your browser |
| Business details (dealers and buyers) | Business or organisation name, GST number, brands handled, products of interest, estimated volumes | Dealer and institutional enquiry forms |
| Agricultural details | Crop, crop stage, growing space, problem description, photos you send | Forms, WhatsApp and calls |
| Communications | Content of your messages and our replies | Forms, email, WhatsApp, calls |
| Technical and usage data | IP address, browser and device type, pages visited, approximate region, date and time of access | Automatically, through our hosting, security systems and — only with your consent — analytics |
| Preferences | Language choice, cookie choices, marketing preferences | Your selections on the Website |
| Staff account data (employees only) | Work email, name, role, sign-in records | Employee sign-in through our identity provider |
We do not intentionally collect sensitive information such as financial account details, card numbers, health data, religion, caste or biometric data through the Website. Please do not send such information to us.
3. Why we use your personal data
We use personal data only for the following purposes:
| Purpose | Personal data used | Basis |
|---|---|---|
| Responding to your enquiry, call or message, and following up on it | Contact, location, agricultural and communication data | Your consent, given when you submit the form or contact us |
| Connecting you to a nearby authorised dealer | Location details, PIN code, precise location if you allow it | Your consent |
| Evaluating and managing dealer, distributor and institutional relationships | Contact and business details | Your consent; performance of a contract you request |
| Sending a confirmation of your enquiry | Name, email | Your consent |
| Sending product updates, offers and newsletters | Name, email, phone | Your separate, optional consent — never a condition of our Services |
| Providing advisory support on crops and products | Agricultural details and photos | Your consent |
| Operating, securing and preventing misuse of the Website (for example, rate-limiting and fraud prevention) | Technical data including IP address | Legitimate uses permitted under Section 7 of the DPDP Act and our obligations to keep systems secure |
| Understanding how the Website is used to improve it | Usage data through analytics | Your consent through cookie settings |
| Complying with law, regulators, courts and tax requirements; establishing or defending legal claims | Any relevant data | Legal obligation and legitimate uses under Section 7 of the DPDP Act |
We will not use your personal data for a new purpose that is incompatible with these purposes without telling you and, where required, obtaining your consent.
4. Consent and how to withdraw it
Where we rely on consent, it is free, specific, informed, unconditional and unambiguous, and is given by a clear affirmative action — such as ticking a box or submitting a form after reading this notice.
You may withdraw your consent at any time, as easily as you gave it, by:
- clicking “unsubscribe” in any email we send;
- replying “STOP” to a WhatsApp or SMS message from us;
- changing your choices under “Cookie settings” at the bottom of any page; or
- writing to us at [email protected].
Withdrawal does not affect processing carried out before you withdrew. After withdrawal we will stop processing the relevant personal data, and ask our service providers to do the same, within a reasonable time — unless retention is required or permitted by law. If you withdraw consent needed to respond to an enquiry, we may be unable to complete it.
5. Who we share personal data with
We do not sell, rent or trade your personal data. We share it only as follows:
- Service providers (Data Processors) who process data on our behalf and under our instructions: website hosting, content delivery and security (Cloudflare); database hosting (Supabase); transactional and newsletter email (Mailgun); website analytics, only with your consent (Google Analytics); error and performance monitoring, which receives technical details of errors and page timings but not your form entries (Sentry); employee sign-in (Microsoft). They are contractually or by their terms required to protect the data and use it only to provide services to us.
- Our authorised dealers and distributors, when you ask to be connected to a dealer or your enquiry concerns a purchase in their area — limited to what they need to serve you.
- Messaging platforms you choose to use, such as WhatsApp, are operated by third parties; their own privacy terms apply to your use of those platforms.
- Government authorities, regulators, courts or law enforcement, when required by law or to protect our rights, property or safety, or that of others.
- A successor entity, in the event of a reorganisation, transfer of business or change in the constitution of our firm, subject to this policy.
Dealers and distributors listed on the Website are independent businesses. When you contact a dealer directly, the dealer is responsible for the personal data it collects from you.
6. Where your data is stored and transferred
Our service providers may store or process personal data on servers located outside India. Any such transfer is made in accordance with Section 16 of the DPDP Act and will not be made to any country or territory that the Central Government has restricted by notification.
7. How long we keep personal data
We keep personal data only for as long as it is needed for the purpose for which it was collected, and then erase it, unless a longer period is required by law. In general:
- Enquiries and related communications: up to three (3) years from our last interaction with you.
- Dealer, distributor and institutional records: for the duration of the relationship and up to eight (8) years afterwards, for accounting, tax and legal purposes.
- Marketing preferences: until you withdraw consent; we keep a record of the withdrawal so that we do not contact you again.
- Security and access logs: for at least one (1) year, as required for security and legal purposes.
- Analytics data: according to the retention settings of our analytics provider, which we keep to the minimum practical period.
We may keep personal data longer where it is necessary to establish, exercise or defend legal claims, or where a law, regulator or court requires it.
8. How we protect personal data
We take reasonable security safeguards to prevent personal data breaches, including encryption of data in transit (HTTPS), access controls and role-based permissions, authentication for staff systems, rate-limiting and abuse prevention, and restricting access to people who need it for their work.
No method of transmission over the internet or electronic storage is completely secure. While we work to protect your data, we cannot guarantee absolute security.
If a personal data breach occurs, we will inform affected Data Principals and the Data Protection Board of India as required by the DPDP Act and the rules made under it, and take steps to contain and remedy it.
9. Your rights
Subject to the DPDP Act, you have the right to:
- Access information: obtain a summary of the personal data we process about you, the processing activities, and the identities of others with whom it has been shared.
- Correction and erasure: have inaccurate or misleading data corrected, incomplete data completed, data updated, and data erased once it is no longer necessary — unless retention is required by law.
- Grievance redressal: have your grievance about our processing addressed by our Grievance Officer.
- Nominate: nominate another individual to exercise your rights in the event of your death or incapacity.
- Withdraw consent: at any time, as described above.
To exercise any right, write to our Grievance Officer, Ms. Asha Tyagi, at [email protected] with the subject “Data request”, from the email or phone number you used with us. We may ask you to verify your identity before acting on the request, to protect your data from others. We will respond within the time required by law and in any case within thirty (30) days.
10. Your duties
Under Section 15 of the DPDP Act, when you share personal data with us you must comply with applicable law, must not impersonate another person, must not suppress material information, must not register a false or frivolous grievance or complaint, and must provide only information that is verifiably authentic when exercising your right to correction or erasure.
If you share personal data about another person (for example, a family member or employee), you confirm that you are authorised to do so.
11. Children
Our Services are intended for persons aged 18 years and above. We do not knowingly collect personal data from children, and we do not track, behaviourally monitor or target advertising at children. If you are under 18, please use the Website only under the supervision of a parent or lawful guardian and do not submit personal data. If we learn that we have collected a child’s personal data without verifiable consent of a parent or lawful guardian, we will erase it.
12. Cookies and similar technologies
We use a small number of cookies and browser storage items. Strictly necessary items are always on; analytics runs only with your consent. See our Cookie Policy for details and how to change your choices.
13. Calls, SMS and WhatsApp
By submitting your phone number in an enquiry, you agree that we and our authorised dealers may call you or message you by SMS or WhatsApp about that enquiry, even if your number is registered on the National Customer Preference Register (DND). We will send promotional messages only with your separate consent.
14. Third-party websites
The Website may link to third-party websites and services, such as maps, messaging apps and government portals. We are not responsible for their content or privacy practices. Please read their policies before sharing personal data with them.
15. Complaints and the Data Protection Board
If you have a concern about how we handle your personal data, please contact our Grievance Officer, Ms. Asha Tyagi, first at [email protected] or +91 94122 13305 (Monday to Friday, 12:00 noon to 5:00 pm IST, except public holidays), or by post to B014, Gopalpur Industrial Area, Sikandrabad, Uttar Pradesh 203205, India. We will acknowledge your grievance within forty-eight (48) hours and aim to resolve it within thirty (30) days.
If you are not satisfied with our response, you may file a complaint with the Data Protection Board of India in the manner prescribed under the DPDP Act, after exhausting the grievance redressal process with us.
16. Changes to this policy
We may update this policy from time to time to reflect changes in our practices or the law. The “Last updated” date at the top shows when it was last changed. Where changes are material, we will take reasonable steps to notify you, such as a notice on the Website, and seek fresh consent where required.
17. Language
This policy is published in English. Where a translation is provided for convenience, the English version prevails in case of any difference.