← bharatfy.in
Privacy Policy
Bharatfy Improvements Private Limited · Version 1.0 · Effective 21 July 2026
This Privacy Policy explains how Bharatfy Improvements Private Limited collects, uses, protects and shares your personal data. It is issued under the Information Technology Act, 2000 & the SPDI Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDP) & the DPDP Rules, 2025. We act as a Data Fiduciary.
1. Data we collect
- Contact & booking data: name, phone, email, business name, address, property details, city.
- Payment data: processed by Razorpay; we do not store card numbers.
- TalentCode biometric data: fingerprint scans/impressions are Sensitive Personal Data or Information (SPDI Rule 3). We collect them only with explicit consent, use them solely to generate your TalentCode report, store them as secured templates (not raw images where avoidable), and delete/retire them once the purpose is served.
- Usage data: minimal technical logs for security and service delivery.
2. Purpose & lawful basis
We process data to deliver the service you request, issue invoices, provide support, meet legal/tax obligations, and (with separate consent) send you relevant updates. Our lawful basis is your consent (DPDP s.6), which is free, specific, informed and unambiguous, and any legitimate use permitted by law.
3. Children's data (important for TalentCode)
TalentCode serves minors. Before processing any data of a person under 18, we obtain verifiable consent of a parent or legal guardian (DPDP s.9 + DPDP Rules 2025 Rule 10). We do not undertake tracking or behavioural monitoring of children, do not serve targeted advertising to children, and do not process children's data in any manner likely to cause a detrimental effect on their well-being.
4. How we protect data
We follow reasonable security practices and procedures (SPDI Rule 8; IT Act s.43A), including access controls, encryption in transit, and least-privilege handling of sensitive data.
5. Sharing & third parties
We share data only as needed with: Razorpay (payments), Google (Bharatfy360 Business Profile publishing), Meta/WhatsApp (communications you opt into), and cloud/hosting providers. We do not sell your personal data.
6. Cross-border transfer
Some processors may store data outside India. We transfer personal data abroad only as permitted under DPDP s.16, and not to any territory restricted by the Government of India.
7. Your rights
Under the DPDP Act you may: (a) access a summary of your data (s.11); (b) seek correction, completion, updating or erasure (s.12); (c) grievance redressal (s.13); and (d) nominate another person to exercise your rights in the event of death or incapacity (s.14). To exercise any right, contact the officer below.
8. Data retention & erasure
We keep personal data only as long as necessary for the stated purpose or as required by law, and erase it when the purpose is served or consent is withdrawn (DPDP Rules 2025 Rule 8). Tax/GST records are retained for the statutory period.
9. Withdrawing consent
You may withdraw consent at any time — as easily as it was given — by contacting us; withdrawal does not affect prior lawful processing. See the Consent Policy.
10. Data breach
In the event of a personal-data breach, we will notify affected data principals and the Data Protection Board of India as required (DPDP Rules 2025 Rule 7).
Grievance & Data Protection Officer
For any complaint, data-protection request, or question about these policies, contact our Grievance & Data Protection Officer,
Siddhartha Rray, Bharatfy Improvements Private Limited, Greater Noida (West), Uttar Pradesh, India. Email:
bharatfy@gmail.com · WhatsApp:
+91 88825 92317.
We acknowledge every grievance within
48 hours and endeavour to resolve it within
one (1) month (Consumer Protection (E-Commerce) Rules, 2020). Grievances and requests under the Digital Personal Data Protection Act, 2023 are responded to within
90 days. If unsatisfied, a data principal may complain to the Data Protection Board of India.