Privacy Policy

This Privacy Policy explains how Geodhara Private Limited, trading as Geodhara International (“Geodhara”, “we”, “us”, or “our”), handles personal data collected through the website geodhara-international.com (the “Website”) and through enquiries and business correspondence arising from it.

We are an India-based exporter of agricultural commodities selling to businesses. We are the data fiduciary under India’s Digital Personal Data Protection Act, 2023 (the “DPDP Act”) and, where the General Data Protection Regulation (EU) 2016/679 (“GDPR”) applies to our processing, the data controller. Read this Policy together with our Terms & Conditions.

1. Who We Are

Geodhara Private Limited is a company registered in India (CIN: U46209TS2025PTC202101), with its registered office at Burhanpuram, Khammam, Telangana, India – 507001. Geodhara International is a trading name of Geodhara Private Limited. Our contact details are in Section 19.

2. Scope of This Policy

This Policy covers personal data we handle as a data fiduciary or controller, namely data about website visitors, people who submit enquiries, and the individual contacts of our business customers and suppliers.

This Policy does not cover: (a) websites and services operated by third parties that we link to, each of which has its own privacy policy; or (b) personal data that a customer supplies to us within their own shipping or compliance documentation, where we act on their instructions.

3. Information We Collect

Information you give us. When you submit the enquiry form on this Website, we collect your first name, last name, email address, country, phone number, company name, and the content of your message. If you contact us by email, telephone, or WhatsApp, we collect the information contained in that correspondence.

Information we collect automatically. When you visit the Website we receive technical data including your IP address, approximate location at country or city level, browser and device type, pages viewed, referring website, and the dates and times of your visits. This is collected through the analytics and security providers named in Section 6, and is subject to your cookie choice.

Business relationship data. If your enquiry becomes an order, we hold the records needed to perform and document that trade, such as quotations, contracts, invoices, shipping and export documentation, and correspondence.

What we do not collect. This Website does not take payments and does not ask for card, bank, or government identification numbers. Our enquiry form uses a hidden anti-spam field that submits no personal data. We do not seek special category or sensitive personal data, and we ask you not to send it to us in your enquiry.

4. How We Use Your Information and Our Legal Bases

We use personal data only for the purposes below. Where GDPR applies, the legal basis is shown in brackets. Where the DPDP Act applies, we rely on your consent, or on a legitimate use permitted by that Act, for the same purposes.

• To answer your enquiry, prepare quotations, and send product, quality, or export documentation you request [steps taken at your request before entering into a contract; or, where you enquire on behalf of a company rather than in your own name, our legitimate interest in responding to business enquiries].
• To perform, invoice, ship, and document an agreed order [performance of a contract].
• To keep accounting, tax, customs, and export records [compliance with a legal obligation under Indian law].
• To operate, secure, and troubleshoot the Website and to prevent spam, fraud, and misuse [our legitimate interest in keeping the Website secure and available].
• To measure how the Website is used, in aggregate, so we can improve its content and performance [your consent, given through the cookie banner].
• To send business updates where you have asked to receive them [your consent, which you may withdraw at any time].
• To establish, exercise, or defend legal claims, and to comply with lawful requests from public authorities [our legitimate interest in protecting our rights; compliance with a legal obligation].

Where we rely on a legitimate interest, we have considered whether that interest is overridden by your interests and rights. You may object to such processing as described in Section 11.

We do not sell, rent, or trade personal data, and we do not share it with third parties for their own marketing.

5. Cookies and Similar Technologies

Cookies are small files stored on your device. We group them into three categories:

• Strictly necessary - always active. These remember your cookie choice and support site security. They are exempt from consent because they are essential to deliver the service you asked for, not because we assert a legitimate interest; where the resulting data is personal data, we then process it on the basis of our legitimate interest in operating and securing the Website.
• Statistics - off by default. Google Analytics, used to measure traffic and usage patterns.
• Marketing - off by default. Advertising consent signals. We currently set no marketing cookies.

Non-essential cookies are switched off until you opt in. On your first visit a banner lets you accept all, accept only strictly necessary, or open “Your Cookie Preferences” and choose per category. If you accept only necessary cookies, or dismiss the banner without choosing, Google Analytics runs in a cookieless mode in which no analytics cookies are placed and only anonymous, aggregated signals are sent. If you withdraw consent later, analytics cookies already set are deleted. You can also block or delete cookies in your browser settings; this may affect some features but will not stop you submitting an enquiry.

Withdrawing consent is as easy as giving it, and does not affect the lawfulness of processing carried out beforehand:

Manage cookie preferences

6. How We Share Your Information

We share personal data only as set out below. Each provider processes data under its own terms and privacy policy, and processes it for us under a written agreement where required.

• Web3Forms - receives your enquiry form fields solely to deliver them to our email inbox.
• Google Analytics - provides aggregated statistics on how the Website is used. Active only with your consent.
• Google Maps - embedded on our Contact page. Loading it may allow Google to set cookies under its own policy.
• Cloudflare - provides content delivery, security, and performance monitoring.
• WhatsApp - if you use our WhatsApp button you leave this Website and your chat is governed by WhatsApp’s own terms and privacy policy.
• Professional advisers, banks, insurers, freight forwarders, and customs agents - where needed to perform, finance, insure, or clear an agreed shipment.
• Public authorities - where disclosure is required by law, regulation, or a valid order, or to establish or defend legal claims.
• A successor - if our business is reorganised, merged, or transferred, personal data may pass to the successor entity subject to this Policy.

7. International Data Transfers

We are based in India and several of our providers process data outside India, including in the United States and the European Economic Area. Exporting to buyers abroad also means transferring the contact details of the people involved in a shipment.

Where personal data protected by GDPR is transferred outside the European Economic Area or the United Kingdom, we rely on an applicable safeguard, which is normally the European Commission’s Standard Contractual Clauses, or the UK International Data Transfer Addendum, together with any additional measures the transfer requires. Where the DPDP Act applies, we transfer personal data outside India in accordance with that Act and any restrictions the Central Government notifies. You may request details of the safeguard used for a specific transfer by writing to us.

8. How Long We Keep Your Information

We keep personal data only as long as needed for the purpose it was collected for, and then delete it or anonymise it. In practice:

• Enquiries that do not lead to an order - kept while we deal with the enquiry and for a reasonable follow-up period afterwards, then deleted.
• Customer, order, and shipping records - kept for the period required by Indian accounting, tax, customs, and companies legislation, calculated from the end of the relevant financial year.
• Website analytics - kept for the retention period configured in Google Analytics.
• Records needed for a legal claim - kept until the claim and any appeal period ends.

Where a longer period is required by law, that longer period applies. You may ask us to delete your data earlier, as described in Section 11.

9. Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, loss, or misuse. These include encryption of the Website in transit using HTTPS, access controls and authentication on the accounts that hold enquiry data, restricting access to staff who need it, and selecting providers that offer appropriate security.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please do not send us confidential commercial terms, credentials, or identification documents through the enquiry form.

10. Personal Data Breaches

If a personal data breach occurs, we will investigate it and notify the relevant supervisory authority and, where required, the individuals affected, within the time limits set by applicable law. Under the DPDP Act this includes notifying the Data Protection Board of India; under GDPR it means notifying the competent supervisory authority without undue delay and, where feasible, within 72 hours of becoming aware of the breach.

11. Your Rights

Subject to the law that applies to you, you have the following rights over your personal data:

• Access - obtain confirmation of whether we process your data, a copy of it, a summary of how it is processed, and the identities of the parties we have shared it with.
• Correction - have inaccurate or incomplete data corrected or completed.
• Erasure - have data deleted where it is no longer needed or where you withdraw the consent it relied on, unless we must keep it by law.
• Withdraw consent - at any time, without affecting processing already carried out.
• Grievance redressal - raise a complaint with us and receive a response, as set out in Section 16.
• Nominate - under the DPDP Act, nominate another individual to exercise your rights if you die or become incapacitated.

Where GDPR applies, you additionally have the right to restrict processing, to object to processing based on legitimate interests or to direct marketing, and to data portability, meaning receipt of the data you gave us in a structured, commonly used, machine-readable format and its transmission to another controller where technically feasible.

12. How to Exercise Your Rights

Email [email protected] stating the right you wish to exercise. We may ask for information to verify your identity, which we use only for that purpose. Exercising these rights is free of charge; we may charge a reasonable fee or decline to act only where a request is manifestly unfounded or excessive, and we will tell you if that applies.

We will respond within 30 days of receiving a verified request. If a request is complex, we may extend that period as permitted by applicable law and will tell you before the original deadline.

13. Marketing Communications

We send business updates only to people who have asked for them or who are existing business contacts, and always with an easy way to stop. To opt out, use the unsubscribe instruction in the message or email [email protected]. Opting out of marketing does not stop the operational messages needed to handle an enquiry or an order.

14. Automated Decision-Making

We do not make decisions producing legal or similarly significant effects about you by automated means alone, and we do not carry out profiling of that kind.

15. Children’s Privacy

This Website is intended for business use by adults. It is not directed at children, and we do not knowingly collect the personal data of anyone under 18. If you believe a child has provided us with personal data, contact us and we will delete it.

16. Grievance Redressal and Complaints

If you are unhappy with how we have handled your personal data, write to us using the details below. This is a monitored business contact that reaches the people responsible for answering questions about how we process personal data and for resolving privacy grievances, as required by Section 13 of the DPDP Act.

Privacy Grievances, Geodhara Private Limited
Burhanpuram, Khammam, Telangana, India – 507001
Email: [email protected]
Phone: +91 8466082110

Marking your message “Privacy grievance” helps us route it quickly. We will acknowledge your complaint and respond within 30 days. If you remain dissatisfied, you may complain to the Data Protection Board of India. If you are in the European Economic Area or the United Kingdom, you may instead complain to your local data protection supervisory authority. You may also seek a remedy from a court.

17. Governing Law

This Policy and any dispute about our handling of your personal data are governed by the laws of India, and the courts at Khammam, Telangana, India have exclusive jurisdiction. Nothing in this Section removes any right you have to bring a claim, or complain to a supervisory authority, in your country of residence where the law entitles you to do so.

18. Changes to This Policy

We may update this Policy to reflect changes in our practices or in the law. The “Last updated” date at the top of this page shows when it was last revised. If a change materially affects your rights, we will give prominent notice on the Website and, where the law requires it, ask for your consent again.

19. How to Contact Us

For any question about this Policy or about how your personal data is handled:

Geodhara Private Limited (trading as Geodhara International)
Burhanpuram, Khammam, Telangana, India – 507001
Email: [email protected]
Phone: +91 8466082110
CIN: U46209TS2025PTC202101