1. Overview

We respect your privacy and are committed to protecting your personal data in accordance with the Digital Personal Data Protection Act, 2023 (the "DPDP Act"), the Information Technology Act, 2000 and the rules made thereunder (including the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, to the extent applicable), and other applicable Indian laws. In this Policy, "personal data" means any data about an individual who is identifiable by or in relation to such data.

• SIFA Geolabs is the Data Fiduciary for the personal data processed through the Platform.
• By using the Platform, you consent to the collection, processing and storage of your personal data as described in this Policy.
• This Policy applies to all users, including visitors, customers, business owners and anyone who contacts us.

2. What We Collect

We collect only the personal data reasonably necessary to operate the Platform and provide our services:

3. How We Use Your Data

We process personal data for lawful purposes, primarily to perform the services you request and to comply with legal obligations:

• To verify your identity by OTP and operate your account.
• To publish, manage and improve listings, and to connect you with Partners for bookings and enquiries.
• To process bookings and payments, and to issue invoices and refunds.
• To communicate with you about your bookings, listings, account and service updates.
• To maintain safety, prevent fraud and abuse, and enforce our Terms of Service.
• To analyse and improve the Platform, subject to applicable law.
• To send service updates and, where you have opted in, promotional communications. You may opt out of promotional messages at any time from your account or by writing to us.
• To comply with legal, regulatory and judicial requirements.

4. Your Rights as a Data Principal

Under the DPDP Act, you have the following rights in respect of your personal data. To exercise any of these rights, write to support@bayofbapatla.com or use the contact channels in our Grievance Redressal Policy.

• Right to access — to obtain a summary of your personal data and the processing activities involving it.
• Right to correction — to correct or update inaccurate or incomplete personal data.
• Right to erasure — to request deletion of your personal data, subject to legal retention requirements.
• Right of grievance redressal — to raise a grievance, which we will address within the timeframes prescribed under the DPDP Act and its rules.
• Right to nominate — to nominate a person to exercise your rights in the event of your death or incapacity, as provided under the DPDP Act.

5. Sharing & Disclosure

We do not sell, rent or trade your personal data. We share it only as necessary to operate the Platform and as required by law:

• With Partners: when you make a booking or enquiry, the relevant business owner receives the details needed to serve you (such as your name, phone number, booking details and message).
• With service providers: cloud infrastructure (Amazon Web Services), payment aggregators, SMS/OTP providers, analytics and support tools — all bound by confidentiality and data-security obligations.
• With authorities: where disclosure is required by law, court order or governmental/regulatory request, or to protect the rights, safety and property of the Operator, its users or the public.
• On corporate events: in connection with a merger, acquisition or reorganisation, with appropriate confidentiality safeguards.
• Third-party websites: links on the Platform lead to sites with their own privacy practices; we are not responsible for their content or data handling.

6. Storage & Security

We implement reasonable security safeguards, including encryption in transit (TLS) and at rest where applicable, access controls and restricted staff access, to protect personal data against unauthorised access, loss, misuse or alteration. Data is stored primarily on Amazon Web Services infrastructure. While we strive to protect your personal data, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

• Business proof documents and photos are stored in a private cloud storage bucket and served to authorised persons only, including via short-lived signed URLs.
• Payment card and bank details are handled exclusively by our PCI-DSS-compliant payment aggregator.
• In the event of a personal data breach that is likely to result in a risk to your rights, we will notify you and the Data Protection Board of India as required under the DPDP Act, 2023, and take reasonable steps to contain and mitigate the breach.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Policy, to operate your account and listings, and to comply with legal, accounting and regulatory obligations (for example, records relevant to taxation and consumer disputes). When personal data is no longer needed, we take reasonable steps to delete or anonymise it. You may request erasure as described in Section 4 above, subject to applicable law.

8. Cross-Border Transfer

Your personal data is processed and stored within India to the extent practicable. Where data is transferred outside India, we ensure such transfer is made in accordance with the DPDP Act and any rules or orders of the Central Government relating to cross-border transfer of personal data.

9. Children's Data

The Platform is intended for persons aged 18 and above and is not directed to children. Where we process the personal data of a child (as defined under the DPDP Act), we do so only with the verifiable consent of the parent or lawful guardian, as required by law. If you believe a child has provided personal data without such consent, please contact us at support@bayofbapatla.com and we will take steps to delete it.

10. Cookies & Local Storage

We use cookies and browser local storage for essential functions, such as maintaining your login session, remembering your cart and saving listings. We may also use analytics to understand how the Platform is used. You can adjust your browser settings to decline cookies, although some Platform features may not function properly without them.

11. Grievance Redressal

If you have any questions, concerns or complaints about this Policy or the processing of your personal data, please contact our B MOHIDDIN at support@bayofbapatla.com or by post to the registered office. We will acknowledge your request and respond within the timeframes prescribed under the DPDP Act and its rules (currently, grievances are to be acknowledged and addressed as soon as reasonably possible, and within the statutory periods as notified).

• You may also approach the Data Protection Board of India or other appropriate authorities if you are not satisfied with our response.

12. Changes to this Policy

We may update this Policy from time to time to reflect changes in our practices or legal requirements. The current version will always be available on this page with a revised 'last updated' date. Material changes will be communicated through the Platform where practicable.

13. Contact

For any privacy-related query, contact us at support@bayofbapatla.com or support@bayofbapatla.com, or by post to: Bapatla, Andhra Pradesh 522311, India.