Privacy Policy

1. Introduction

XIMPEX (“we,” “us,” or “our”) operates the website https://ximpex.in and provides export consultancy services to Indian businesses. This Privacy Policy explains how we collect, use, store, and protect your personal information when you access our website, use our tools, subscribe to our services, or make payments through our platform.

By using our website or services, you consent to the practices described in this Privacy Policy. If you do not agree with this policy, please do not use our services.

2. Information We Collect

2.1 Information You Provide Directly

When you register, subscribe, or use our services, we may collect:

2.1.1 — Full name and contact details (email address, phone number).
2.1.2 — Company or business name, designation, and industry.
2.1.3 — Product details, target markets, and export-related information you submit through our tools or consultation forms.
2.1.4 — Billing address and GST number (where applicable).
2.1.5 — Communication records including emails, messages, and call notes exchanged with our team.

2.2 Information Collected Automatically

When you visit our website, we automatically collect:

2.2.1 — Device information (browser type, operating system, screen resolution).
2.2.2 — IP address and approximate geographic location.
2.2.3 — Pages visited, time spent, referral sources, and click patterns.
2.2.4 — Cookies and similar tracking identifiers (see Section 5).

2.3 Information from Third Parties

2.3.1 — Payment confirmation details from Razorpay (transaction status, payment method type — not card numbers).
2.3.2 — Analytics data from Google Analytics and Google Search Console.

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 — Service Delivery: To provide, manage, and improve our export consultancy services, including market research, lead generation, documentation support, and logistics coordination.

3.2 — Communication: To respond to your inquiries, send service updates, share reports, provide onboarding support, and send transactional notifications related to your subscription or purchases.

3.3 — Payment Processing: To process subscription payments and one-time purchases through our payment gateway partner, Razorpay.

3.4 — Service Improvement: To analyse usage patterns, improve our tools (HS Code Finder, Market Finder, Duty Calculator, Export Readiness Assessment), enhance website performance, and develop new features.

3.5 — Legal Compliance: To comply with applicable laws, respond to legal process, and enforce our Terms & Conditions.

3.6 — Marketing: To send promotional materials about our services, with your prior consent. You may opt out at any time.

4. Payment Data Handling

4.1 — All payment transactions on our platform are processed by Razorpay Software Private Limited, a PCI-DSS compliant payment gateway.

4.2 — We do not store, collect, or have access to your full credit/debit card numbers, CVV, or banking credentials. This information is handled entirely by Razorpay in accordance with their security standards.

4.3 — We receive and store only: transaction ID, order ID, payment status (success/failure), payment method type (UPI/card/net banking), and transaction amount.

4.4 — For information on how Razorpay handles your payment data, please refer to Razorpay's Privacy Policy.

5. Cookies and Tracking Technologies

5.1 — Essential Cookies: Required for website functionality, session management, and security. These cannot be disabled.

5.2 — Analytics Cookies: We use Google Analytics to understand how visitors interact with our website. This data is aggregated and anonymised where possible.

5.3 — Google Search Console: We use Search Console data to monitor and improve our website's search performance.

5.4 — You may manage cookie preferences through your browser settings. Disabling certain cookies may affect your experience on our website.

6. Data Sharing with Third Parties

6.1 — Payment Processors: Transaction data is shared with Razorpay for payment processing.

6.2 — Analytics Providers: Anonymised usage data is shared with Google Analytics for website improvement.

6.3 — Service Partners: In certain cases, we may share limited business information (company name, product category, target market) with logistics partners, documentation agents, or trade show organisers solely for the purpose of delivering contracted services to you.

6.4 — Legal Requirements: We may disclose information if required by law, court order, or government authority.

6.5 — We do not sell, rent, or trade your personal information to any third party for marketing purposes.

7. Data Retention

7.1 — Account information and service records are retained for the duration of your active subscription and for a period of 3 years after your last interaction with our services.

7.2 — Payment and billing records are retained for 8 years as required under Indian tax and accounting regulations (Income Tax Act, 1961 and GST Act, 2017).

7.3 — Analytics data is retained for 26 months in line with Google Analytics data retention settings.

7.4 — You may request early deletion of your personal data (subject to legal retention requirements) by contacting us at the address provided in Section 12.

8. Your Rights

Under the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (DPDP Act), you have the following rights:

8.1 — Right to Access: You may request a copy of the personal data we hold about you.

8.2 — Right to Correction: You may request correction of inaccurate or incomplete personal data.

8.3 — Right to Erasure: You may request deletion of your personal data, subject to legal retention obligations.

8.4 — Right to Withdraw Consent: You may withdraw consent for data processing at any time. This may affect our ability to deliver services to you.

8.5 — Right to Grievance Redressal: You may raise complaints regarding data processing by contacting our Grievance Officer (see Section 12).

8.6 — To exercise any of these rights, please email us at info@ximpex.in. We will respond within 30 days of receiving your request.

9. Data Security

9.1 — We implement industry-standard security measures including SSL/TLS encryption for all data in transit, secure server infrastructure, and access controls to protect your information.

9.2 — Payment processing is handled by PCI-DSS Level 1 compliant payment gateways.

9.3 — Access to personal data is restricted to authorised personnel on a need-to-know basis.

9.4 — While we take reasonable precautions to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your information.

10. Children's Privacy

Our services are designed for businesses and individuals who are 18 years of age or older. We do not knowingly collect personal information from individuals under the age of 18. If we become aware that we have collected data from a minor, we will take steps to delete such information promptly.

11. Changes to This Policy

11.1 — We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

11.2 — Material changes will be communicated via email to registered users and by posting a notice on our website.

11.3 — The “Last Updated” date at the top of this page indicates when the policy was last revised.

11.4 — Your continued use of our services after changes are posted constitutes acceptance of the revised policy.

12. Contact Information

For any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

13. Governing Law

This Privacy Policy shall be governed by and construed in accordance with the laws of India, including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023. Any disputes arising from this policy shall be subject to the exclusive jurisdiction of the courts in Faridabad, Haryana, India.