Privacy Policy | Indogulf BioAg

Effective Date: 7 July, 2026

This privacy policy (“Privacy Policy”) describes how Indogulf BioAg LLC, a limited liability company organized under the laws of the State of Wyoming. (hereinafter referred to as "Indogulf BioAg ", "we", "us", "our", or the "Company"), collects, uses, stores, processes, and discloses information relating to its dealers, distributors, vendors, customers, Users, visitors, and other individuals who interact with the Company (collectively referred to as "you", "your", or the "User") obtained via any method including this website, (https://partner.indogulfbioag.com/) or (https://www.indogulfbioag.com) or any mobile application or other tools or any other method (“Website or Platform”).

Please read the following to learn about our practice of category and the purposes of data and information to be processed, secure collection, use, disclosure and dissemination of information practices, the contact details of the relevant Grievance Officer, the manner in which a User can exercise its rights which includes the right to withdraw its consent for processing of such data and right to grievance redressal. This Privacy Policy applies globally to all Users who access, use, or interact with our Platform, or Services, regardless of their country of residence.

By visiting this website or by virtue of any commercial relation (“Services”), you agree to be bound by the terms and conditions of this Privacy Policy. If you disagree, please do not use or access our website or Services. This Privacy Policy is to be read and interpreted along with our Terms of Use (“Terms”).

1. About the Platform

The Company is a biotechnology Company engaged in the research, development, manufacturing, and commercialization of microbial solutions, biofertilizers, nano fertilizers, environmental products, and related agricultural technologies. The Company also provides contract manufacturing, private label, custom formulation, and regulatory support Services.

The Company serves as a digital interface through which distributors, dealers, business partners, vendors, prospective customers, and other stakeholders can access information about the Company's products and Services, submit enquiries, request quotations, apply for business partnerships, and communicate with the Company. In connection with these Services, the Company may collect and process personal, business, and technical information in accordance with this Privacy Policy.

2. Intended Use and Purpose

The Platform is intended for distributors, dealers, retailers, contract manufacturing and private label clients, vendors, prospective business associates, research collaborators, consumers, and other stakeholders seeking information about the Company's biotechnology-based agricultural and environmental products and related Services.

The primary purpose of processing personal and business information is to facilitate User registration, respond to enquiries, process requests for quotations and product information, onboard business partners, manage commercial relationships, provide technical and customer support, and enable the delivery of the Company's products and Services.

The Company processes information submitted by Users solely for legitimate business, operational, contractual, regulatory, and customer support purposes. Such information may also be used to verify User identity, evaluate partnership requests, process orders, comply with applicable laws, maintain business records, and improve the functionality, security, and performance of the Platform.

The Company does not use personal or business information for any purpose that is incompatible with the purposes stated in this Privacy Policy or as otherwise permitted under applicable law. Personal information is not disclosed to third parties for their independent marketing purposes without the User's consent, except where such disclosure is required for providing the requested Services or to comply with legal or regulatory obligations.

Any information, documents, or other content submitted through the Platform remains the property of the respective User or organization. By submitting such information, Users grant the Company a limited, non-exclusive, and revocable right to collect, store, process, and use the information solely to provide the requested Services, manage business relationships, comply with applicable legal requirements, and perform activities described in this Privacy Policy.

3. Consent

By accessing or using the Platform and/or providing your personal or business information, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, storage, use, processing, and disclosure of your information by the Company in accordance with this Privacy Policy and applicable laws.

The Company processes personal information on lawful grounds, including your consent, the performance of a contract or pre-contractual measures, compliance with legal or regulatory obligations, and the Company's legitimate business interests, where permitted under applicable law.

Where you voluntarily submit information, including registration details, business information, enquiries, requests for quotations, partnership applications, or supporting documents through the Platform, you represent that you are authorized to provide such information and consent to its processing for the purposes set out in this Privacy Policy. your consent is captured electronically and maintained as part of our records, where required.

Where you choose to subscribe to newsletters, product updates, promotional communications, or other marketing materials, you consent to receiving such communications from the Company. You may opt out of these communications at any time by using the unsubscribe option provided in the communication or by contacting us through the details provided in this Privacy Policy.

4. Categories of Data Collected

We collect, process, and retain the following categories of information as necessary to provide our products, Services, and business support (collectively referred to as “Personal Data” or “Data”):

a) Personal and Account Information: Includes name, email address, mobile number, designation, company name, username, account credentials, business address, communication preferences, and other information necessary to register, manage, and administer User accounts on the Platform.

b) Business and Partner Information: Includes business registration details, Tax Number, corporate registration numbers or other registration identifiers (where applicable), details of distributors, dealers, vendors, private label or contract manufacturing clients, product categories of interest, territory of operation, and other information required for partner onboarding, business verification, and commercial relationship management.

c) Product Enquiries and Commercial Information: Includes enquiries, quotation requests, product interests, order details, purchase history, delivery information, customer support interactions, and other information required to process business transactions, fulfil orders, and provide after-sales support.

d) Payment and Transaction Information: Includes billing details, invoices, transaction references, payment status, bank account details (where required for business transactions), refunds, and other financial records necessary to process payments and maintain accounting records. The Company does not store complete payment card details and relies on secure third-party payment service providers, where applicable.

e) Documents and Verification Information: Includes documents voluntarily submitted by Users, such as business registration certificates, GST certificates, authorization letters, identity documents of authorized representatives, licenses, certifications, and other supporting documents required for due diligence, partner verification, regulatory compliance, or contract execution.

f) User Communications and Support Data: Includes Internet Protocol (IP) address, browser type, device type, operating system, session identifiers, timestamps, log files, usage information, error reports, and other technical data automatically collected when Users access or interact with the Platform.

g) Technical and Device Information: Includes Internet Protocol (IP) address, device type, browser type, operating system, session identifiers, timestamps, log files, error reports, and usage analytics automatically collected when Users access or use the Platform.

h) Cookies and Similar Technologies: Includes information collected through cookies and similar technologies to enable essential Platform functionality, maintain User sessions, remember User preferences, enhance website performance, improve User experience, and generate analytics, subject to applicable laws and User preferences.

i) Compliance, Security, and Verification Data: Includes identity verification records (where applicable), audit logs, access logs, consent records, security logs, and other information necessary to protect the Platform, prevent fraud or unauthorized access, investigate security incidents, enforce legal rights, and comply with applicable legal and regulatory obligations.

5. Security and Data Protection

The Company maintains appropriate administrative, technical, and organizational safeguards to protect the confidentiality, integrity, and availability of Personal Data processed through the Platform. Security measures include:

a) encryption of Personal Data during transmission and, where appropriate, while stored;

b) role-based access controls to ensure that Personal Data is accessible only to authorized personnel, service providers, and business partners on a need-to-know basis;

c) regular security monitoring, vulnerability assessments, audits, and risk management practices to identify and address potential security threats; and

d) Secure data storage, retention, backup, and disposal practices in accordance with applicable laws and the Company's internal information security policies.

The Company does not sell or rent Personal Data to third parties. Personal Data is processed only for legitimate business purposes, including providing products and Services, managing business relationships, processing enquiries and transactions, complying with legal and regulatory obligations, and other purposes described in this Privacy Policy

In the event of a Personal Data breach, the Company will take appropriate measures to contain, investigate, and mitigate the incident and, where required under applicable law, notify the relevant regulatory authorities and affected Users, where required, within the timelines prescribed under applicable data protection laws.

The Company continuously evaluates evolving cyber security threats and vulnerabilities to strengthen its safeguards. Based on such assessments, we may update and enhance our security practices to better protect User Data, we implement industry-standard administrative, technical, and physical security controls designed to prevent unauthorized access, loss, misuse, disclosure, alteration, or destruction of Personal Data. These measures are designed to protect the confidentiality of data transmitted over the internet and stored within our systems

While the Company implements reasonable safeguards to protect Personal Data, Users are responsible for maintaining the confidentiality of their account credentials, using secure devices and networks when accessing the Platform, and promptly notifying the Company of any suspected unauthorized access to their account.

6. Third Party Involvement

The Company engages only with secure cloud infrastructure as sub processors for hosting, storage, and system operations

7. Collection of Personal Data by the Company

The Company collects Personal Data in electronic or other forms to operate the Platform, provide its products and services, manage business relationships, process commercial transactions, respond to enquiries, and comply with applicable legal and regulatory requirements. The Company collects only the minimum Personal Data necessary for the stated purposes and ensures that no excessive, irrelevant, or unnecessary Personal Data is collected or processed. The following table sets out the categories of Personal Data collected, the purposes for which such data is processed, and the corresponding legal basis for such processing:

8. Usage of Personal Data

The Company collects Personal Data from Users through the Platform for the purpose of providing its products and services, managing business relationships, processing commercial transactions, responding to enquiries, improving the Platform, and complying with applicable legal and regulatory requirements. Personal Data is processed in accordance with applicable laws, contractual obligations, legitimate business interests, and, where required, the User's consent, while adhering to the principles of data minimisation, purpose limitation, and transparency.

The Company uses Personal Data only for the purposes for which it was collected, as described in this Privacy Policy, and processes only such Personal Data as is necessary to fulfil those purposes.

Users are requested not to provide any excessive or non-essential Personal Data unless specifically requested by the Company or required for the provision of products, services, or compliance with applicable laws.:

We collect and use your Personal Data only to the extent necessary for the following purposes:
a) Providing products and business Services: To facilitate User registration, provide information about the Company's biotechnology, agricultural and environmental products, process enquiries, quotations, orders, and deliver products and Services offered by the Company.

b) Partner onboarding and business relationship management: To evaluate and onboard distributors, dealers, vendors, contract manufacturing, clients, private label clients, business associates, and other commercial partners, verify business credentials, execute agreements, and administer ongoing business relationships.

c) Processing commercial transactions: To process purchase orders, quotations, invoices, payments, deliveries, returns, and other commercial transactions, and to maintain records relating to such transactions.

d) Contract manufacturing and product development Services: To process requests relating to contract manufacturing, private label manufacturing, custom formulations, product development, technical consultations, and regulatory support Services.

e) Customer support and business communications To respond to enquiries, provide technical and customer support, resolve complaints, communicate regarding products and Services, and provide updates relating to business transactions and service requests.

f) Platform operation, maintenance, and improvement: To operate, maintain, secure, monitor, troubleshoot, and improve the functionality, performance, and User experience of the Platform, including analysing usage trends and preventing unauthorized access.

g) Platform security, fraud prevention, and misuse detection: To authenticate users, monitor Platform usage, detect and prevent fraudulent activities, unauthorized access, misuse of the Platform, and violations of applicable laws or the Company's policies.

h) Compliance with legal and regulatory obligations: To comply with applicable laws, regulatory requirements, judicial or governmental requests, maintain statutory records, conduct audits, exercise or defend legal rights, and enforce the Company's contractual rights and policies.

i) Business communications and marketing: To send product updates, technical information, newsletters, event invitations, promotional materials, and other business communications, where permitted by applicable law or where the User has provided the necessary consent. Users may opt out of receiving such communications at any time.

9. Retention Period of Personal Data

The Company collects Personal Data from Users through the Platform for the purpose of providing its products and Services, managing business relationships, facilitating commercial transactions, responding to enquiries, improving the Platform, and complying with applicable legal and regulatory requirements. Personal Data is processed in accordance with applicable laws, contractual obligations, legitimate business interests, and, where required, the consent of the User. The Company adheres to the principles of data minimization, purpose limitation, transparency, and accountability while processing Personal Data. We implement strict data retention controls to ensure that Personal Data is not stored longer than required and is securely deleted or anonymised once it is no longer needed.

Business operations and commercial transactions: Personal Data collected through the Platform, including User registration details, business enquiries, quotations, distributor or dealer onboarding information, order details, transaction records, customer support communications, and other business-related information, is retained only for as long as necessary to provide the requested products or Services, manage business relationships, fulfil contractual obligations, resolve disputes, and comply with applicable legal and regulatory requirements.
In certain circumstances, specific Personal Data may be retained for a longer duration where: (i) retention is required to comply with applicable laws relating to taxation, accounting, corporate governance, or other legal and regulatory requirements; (ii) data is necessary for resolving disputes, fraud prevention, or defending legal claims; or (iii) extended retention is explicitly required for continued service delivery or as agreed with the User.
Upon expiry of the applicable retention period, Personal Data, including backups where feasible, is securely deleted, anonymised, or irreversibly destroyed using industry-standard security practices, unless retention is otherwise required under applicable law.
The Company periodically reviews its data retention policies to ensure compliance with applicable Information technology laws, data protection laws and other applicable laws to uphold the principles of data minimisation and purpose limitation.
The Company is committed to data minimisation and ensures that only the minimum necessary Personal Data is collected and retained for the stated purposes, and that such data is deleted or anonymised promptly once it is no longer required
Certain categories of data, such as transaction records, consent logs, and audit trails, may be retained for longer periods where required by law or necessary to establish, exercise, or defend legal claims.
Technical logs and usage data are retained for limited periods and are periodically reviewed and deleted when no longer required for security, analytics, or operational purposes.
Where Personal Data is retained beyond active use, the Company ensures that such data is subject to appropriate safeguards and access restrictions

10. Sharing of Personal Data

The Company may share your Personal Data only where necessary to operate the Platform, provide its products and Services, manage business relationships, fulfil commercial transactions, comply with applicable laws, or protect the security and integrity of its systems. The Company does not sell Personal Data or share it for unauthorized marketing, profiling, or cross-context behavioral advertising. Any disclosure of Personal Data is limited to what is necessary for the purposes described in this Privacy Policy.

11. Data accuracy and User responsibility

The Company takes reasonable steps to ensure that the Personal Data it processes is accurate, complete, and, where necessary, kept up to date, having regard to the purposes for which such Data is collected and processed. Users are responsible for ensuring that all Personal Data, business information, and supporting documents submitted through the Platform are accurate, complete, and current. Users shall promptly notify the Company of any changes or inaccuracies in the information provided to enable the Company to maintain accurate records and provide its products and Services effectively Where Personal Data is found to be inaccurate or incomplete, the Company will take reasonable steps to correct or update such data upon request or when otherwise required by applicable law.

12. Rights you have over your Data

As a User of the Platform, you have rights in relation to your Personal Data under applicable data protection laws. We respect and uphold these rights and provide mechanisms for you to exercise control over your Personal Data:

a) Right to Access: You have the right to request confirmation as to whether we process your Personal Data and to obtain information regarding the categories of data processed, purposes of processing, and categories of recipients with whom the data may be shared.

b) Right to Correction and Erasure: You may request the correction, updating, or completion of inaccurate, incomplete, or outdated Personal Data. You may also request the erasure of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to the Company's legal, regulatory, contractual, and statutory record retention obligations

c) Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time. Withdrawal of consent shall not affect the lawfulness of processing carried out prior to such withdrawal and may affect the Company's ability to provide certain products, Services, or respond to your requests.

d) Right to Restrict or Object to Processing: You may request restriction of processing or object to processing of your Personal Data in certain circumstances, unless we demonstrate legitimate grounds for processing or where processing is required for compliance with legal or Data Privacy regulatory obligations.

e) Right to Lodge a Complaint: You have the right to raise a grievance or lodge a complaint with our designated Grievance Officer regarding the handling of your Personal Data, The Company shall address such grievances in accordance with the Data Protection law and other applicable laws.

f) Right to Manage Communication Preferences: You may opt in or opt out of receiving non-essential communications, including promotional and marketing communications, at any time using the opt-out options provided. However, the Company may continue to send essential communications relating to your account, enquiries, orders, business transactions, or other service-related updates where necessary.

g) Right to Data Portability / Access to Data: You may request a copy of your Personal Data in a structured, commonly used, and machine-readable format, subject to identity verification and applicable legal and regulatory limitations.

h) Right to Non-Discrimination: You will not be denied access to the Company's products or services or be treated unfairly solely for exercising your rights under applicable data protection laws, except where certain Personal Data is necessary to provide the requested products or services or to comply with applicable legal requirements.

i) Right to Opt-Out of Non-Essential Communications: You may opt out of receiving marketing or promotional communications at any time. However, the Company may continue to send essential communications relating to your account, enquiries, orders, business transactions, or other service-related updates where necessary.

13. Right to be Informed

Users have the right to be informed, in a clear, transparent, and easily accessible manner, about how the Company collects, uses, stores, shares, retains, and protects their Personal Data. This Privacy Policy, together with any privacy notices or disclosures provided at the time of collecting Personal Data, is intended to inform Users about the Company's data processing practices, the purposes for which Personal Data is processed, the rights available to Users under applicable law, and the measures adopted to safeguard such information.

14. Use of Cookies

Cookies are small text files that are stored on your device when you visit the Platform. They help the Company enhance the functionality, security, and performance of the Platform by recognizing your device, remembering your preferences, maintaining User sessions, and improving your browsing experience.

The Company uses cookies and similar technologies to facilitate User authentication, analyze website traffic and usage patterns, improve Platform performance, personalize User experience, and ensure the security and integrity of the Platform. Some cookies are essential for the proper functioning of the Platform and cannot be disabled without affecting its core features.

You may manage, block, or delete cookies through your browser settings or any cookie preference tools made available on the Platform. However, disabling certain cookies may affect the availability or functionality of certain features of the Platform, including User login, account management, submission of enquiries, quotation requests, or other business-related Services.

15. Modifications to this Privacy Policy

The Company reserves the right to update, modify, or amend this Privacy Policy at its discretion to reflect changes in legal requirements, operational needs, or service enhancements. Any updates will be posted on the Platform and will become effective from the date of publication unless otherwise specified. Users are encouraged to review the Privacy Policy periodically. Continued use of the Platform after updates constitutes acceptance of the revised Privacy Policy.

16. Consequences of Not Providing Personal Data

Where the provision of Personal Data is necessary for User registration, responding to enquiries, processing orders, onboarding business partners, providing products or Services, or complying with applicable legal requirements, failure to provide such Personal Data may limit or prevent the Company from providing certain products, Services, or functionalities of the Platform.

17. Cross-Border Data Processing and Regional Compliance

The Company is committed to processing Personal Data in accordance with applicable data protection, privacy, cybersecurity, and other relevant laws in the jurisdictions in which it operates. Where the Company conducts business or processes Personal Data across borders, it shall implement appropriate safeguards and comply with applicable legal and regulatory requirements.
The Company follows the principle of data minimization and collects only the Personal Data necessary for the intended purpose. Users are requested not to provide any additional or non-essential Personal Data unless specifically requested or required for the provision of products, services, or compliance with applicable laws.

The Company respects the privacy rights of individuals across all jurisdictions in which it conducts business and is committed to maintaining appropriate standards of transparency, accountability, and data security.

18. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or our data protection practices, you may contact us at:
Registered Address:
Email: distribution@indogulfbioag.com
Website: www.partner.indogulfbioag.com

19. Grievance Redressal Mechanism:

The Company is committed to ensuring transparency, accountability, and protection of User rights. We have established a Grievance Redressal Mechanism to address concerns related to Personal Data, including order information, and Platform usage. The following can be accessed at:
_________

Users may submit grievances or requests (including access, correction, or withdrawal of consent) to our designated Grievance Officer. All complaints will be acknowledged within 3–7 business days and will be addressed within 30 business days, subject to the nature and complexity of the issue.
Details of Grievance Redressal Officer:
Name:
Email:

Annexure-1
Grievance Redressal Mechanism

1. Grievance Submission

Users may submit their grievances or concerns regarding their Personal Data in a Complaint Form as prescribed in Annexure-2 through the following channels:
Name-
Email-

2. Acknowledgement

Upon receiving a grievance, we will promptly acknowledge the receipt and provide a unique reference number for future correspondence. The acknowledgement will include information about the expected resolution timeline.

3. Investigation and Resolution

Our Grievance Officer will initiate an investigation into the reported grievance. This may involve gathering additional information, reviewing relevant policies and procedures, and consulting with relevant stakeholders.

Once the investigation is complete, we will communicate our findings and proposed resolution to the User. If necessary, we may request further clarification or provide additional information to ensure transparency and understanding.

4. Escalation

If the User is not satisfied with the proposed resolution, they have the option to escalate the grievance to higher levels of management within our Company. We will provide clear instructions on how to escalate the grievance and ensure that it is promptly reviewed by the appropriate authority.

5. Final Decision

After considering all relevant information and perspectives, we will make a final decision on the grievance and communicate it to the User in writing. This decision will be binding unless challenged through legal means as per the provisions of the Applicable Laws.

6. Record Keeping

We will maintain records of all grievances received, including details of the complaint, investigation, resolution, and any corrective actions taken as required by applicable laws. This information will be securely stored in accordance with data protection requirements.

7. Confidentiality

We will treat all information provided with the utmost confidentiality and will only share it with individuals involved in investigating and resolving your grievance.

8. Continuous Improvement

We are committed to continuously improving our Grievance Redressal Mechanism to ensure effectiveness and efficiency. Feedback from Users will be actively sought and used to inform enhancements to our processes and procedures.

Annexure-2
Complaint Form: Personal Data Grievances

Please complete this form if you wish to file a complaint or express concerns regarding handling your Personal Data by the Company. We take data privacy seriously and will address your concerns promptly and confidentially.

Declaration
I hereby declare that the information provided above is true and accurate to the best of my knowledge. I understand that providing false information may result in the dismissal of my grievance.

By submitting this form, I consent to the processing of the personal information provided solely for the purpose of investigating and resolving the grievance.
Signature-
Date-

Details of Grievance:

Resolution Expectations: