Privacy Policy

1) Scope

This Privacy Policy explains how we collect, use, share, and protect information when you access or use the NILE SPECTRA™ Global Trade Platform (“GTP”), participate in the International Trade Fair 2025 (“ITF 2025”), submit the Enterprise Quote Request form, or interact with our websites, emails, and services.

2) Who we are (Controller)

NILE SPECTRA™ (Nile Spectra Private Limited) acts as the controller of your personal data for activities described in this Policy. For certain services we may act as a processor on behalf of enterprise customers, under a separate data processing agreement (DPA).

3) Information we collect

• Account & Business Info: name, role, business name, registered address, email, phone, tax IDs (e.g., GST/VAT), sector, country.
• KYC & Compliance Docs: identity and company proofs, licenses/certificates, product certifications, and related metadata (handled via registered partner agencies where applicable).
• Platform Content: product listings, catalogs, pricing shown to buyers, RFQs, bids, messages, and files uploaded through forms (e.g., Enterprise Quote Request).
• Payments: payment method details are processed by our gateway (e.g., Cashfree). We don’t store full card/UPI credentials. We receive payment status, amount, and references.
• Usage & Device Data: pages visited, actions, timestamps, IP address, device/browser info, locale, referral/UTM/gclid parameters, cookies/identifiers, error logs.
• Communications: emails, chat, support tickets, and call/meeting notes where applicable.
• Public/Third-Party Sources: trade registries, sanction/PEP checks, business databases, partner verifications, event registrations.

Children: our services are for business users (18+). We do not knowingly collect data from children.

4) How we use information (Purposes)

• Provide & improve GTP: account creation, onboarding, product placement, catalog discovery, e-Bidding, RFQ workflows, ITF booth setup, and support.
• Verification & Compliance: KYC, fraud prevention, sanctions/PEP screening via registered partner agencies; audit and security logs.
• Payments: to process platform fees and event fees through our payment partners; invoicing and reconciliation.
• Matchmaking: to connect exporters, buyers, distributors, and (where relevant) investors under our confidentiality-first partner model.
• Communications: service emails, alerts, onboarding tips, policy updates, and (with consent or as permitted by law) marketing messages.
• Analytics & Ads: measuring site and campaign performance (e.g., GA4, Google Ads), improving content, and attributing conversions.
• Legal & Safety: compliance with applicable laws, responding to lawful requests, enforcing terms, and preventing misuse.

Legal bases include performance of a contract, legitimate interests (e.g., security, product improvement), consent (where required), and legal obligations.

5) Cookies & similar technologies

We use cookies, local storage, and identifiers to operate and improve the site. Categories include:

• Strictly necessary: login/session integrity, CSRF, form security.
• Functional: preferences (language, layout), last-seen tabs.
• Analytics: GA4/attribution (UTM/gclid), aggregated usage.
• Advertising: Google Ads remarketing/conversion tags (where enabled and consented).

You can manage cookies in your browser. If we deploy a consent banner, your choices will be honored (Consent Mode where applicable). “Do Not Track” is not standardized; we respond to applicable legal signals where mandated.

6) Sharing & disclosures

• Territory & Channel Partners / Registered Agencies: for verification, compliance, matchmaking, logistics coordination, and event operations.
• Payment processors: e.g., Cashfree for fee collection; we share order amount, contact, and status as needed.
• Vendors: hosting, security, analytics, email/SMS providers, customer support tools—bound by contracts to protect your data.
• Counterparties: when you choose to engage with a buyer/exporter/investor, we may share relevant profile or listing details to facilitate the transaction, under confidentiality workflows.
• Legal & safety: to comply with laws, enforce terms, or protect rights, property, and safety.

We do not sell personal data.

7) International data transfers

We operate across multiple regions, including BRICS & BRICS+ markets. Your data may be transferred to and processed in countries different from yours. Where required, we use appropriate safeguards (e.g., contractual clauses) and limit access to authorized personnel/partners with a need to know.

8) Data retention

We retain data for as long as needed to provide services, comply with legal obligations, resolve disputes, and enforce agreements. Typical examples: account/transaction records for statutory periods; KYC/AML records per local regulations; marketing preferences until you opt out (suppression lists retained to honor opt-outs).

9) Your rights & choices

Subject to applicable law, you may have rights to access, correct, update, port, or delete your data; restrict or object to certain processing; and withdraw consent (without affecting prior lawful processing). To exercise rights, contact us at support@nilespectra.com. We may verify your identity before fulfilling requests.

• Marketing: you can unsubscribe via email footer or by contacting us.
• Cookies/Ads: manage via browser settings and (where offered) our consent banner.
• Enterprise customers: if your data was provided under an enterprise agreement, please also contact your organization’s administrator.

10) Security

We implement administrative, technical, and physical safeguards proportionate to the nature of data we process (e.g., access controls, encryption in transit, logging). No system is 100% secure; if we identify a breach impacting you, we will notify you and/or authorities as required by law.

11) Third-party sites & integrations

Our site may link to third-party sites or services (e.g., payment pages, logistics, compliance portals). Their privacy practices are governed by their own policies. We recommend reviewing those policies before sharing information.

12) Platform Fee vs. Subscription

Access to the GTP is provided under a platform fee for a selected term (e.g., 1 month or 12 months). It is not a recurring subscription. We may send service reminders related to term expiry or renewal options.

13) Changes to this Policy

We may update this Privacy Policy from time to time. The “Effective date” above reflects the latest version. Material changes will be highlighted on this page or via email where appropriate.

14) Contact & Grievance

Questions, requests, or complaints about privacy? Write to support@nilespectra.com.

If you are located in a region with specific data protection laws (e.g., EU/UK, India), you may have additional rights or escalation avenues with your supervisory authority. We aim to respond within applicable statutory timelines.