Privacy Policy

National Business Development Service Center (NBDSC India), run by Global Aarthik Samajik Sahyog Society as part of the Business Seva initiative, respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains what data we collect, why we collect it, how we use and store it, and how you can exercise your rights.

Scope

This Policy applies to visitors of nbdscindia.gasss.org.in, clients requesting services, business owners submitting information for MSME support, volunteers, donors, and anyone interacting with NBDSC India via forms, email, WhatsApp or other official channels.

Information We Collect

Identity & Contact Information

• Name, business or organisation name, designation (if provided).
• Email address, phone number, postal or office address (optional).

Service & Project Data

When you request services—such as website development, branding, design, or advisory—we collect project briefs, business details, logos, content, uploaded documents and any material necessary to deliver the requested service.

Transaction & Payment Data

• Payment amount, payment method, transaction reference ID.
• We do not store payment card numbers, CVV, UPI PINs or banking passwords.

Technical & Usage Data

• IP address, device type, browser and operating system.
• Referrer URLs, pages visited, time spent and interaction data.
• Cookies and analytics identifiers for site improvement and basic functionality.

How We Use Your Information

• To provide and manage the services you request (development, design, marketing).
• To respond to enquiries, support requests and billing matters.
• To process payments, issue invoices and maintain records for accounting and compliance.
• To improve website functionality, security and user experience through analytics.
• To detect, investigate and prevent fraud or misuse.
• To send service-related updates where you have opted in to communications.

Legal Basis & Retention

We process personal data based on consent, contractual necessity (to perform requested services), legal obligations (for tax, audit, and compliance) and our legitimate interests (service improvement and fraud prevention). We retain information only as long as necessary for these purposes or as required by law; thereafter we delete or anonymise it.

Cookies & Tracking

Our website uses cookies and similar technologies to provide basic site functionality, remember preferences and collect anonymous analytics. You can disable cookies through your browser settings; however some features may be affected.

Data Sharing & Third Parties

We may share data with trusted providers involved in payment processing, hosting, email delivery, analytics, professional advisors and contractors involved in delivering services. All third parties are contractually required to protect your data and use it only for permitted purposes. We may also disclose data when required by law or to protect legal rights.

International Transfers

Some service providers may operate outside India. When personal data is transferred abroad we ensure appropriate safeguards, contractual protections, and compliance with applicable law to maintain adequate protection.

Data Security

We implement reasonable technical and organisational measures—secure hosting, SSL/TLS encryption, access controls and routine backups—to protect data from unauthorised access, disclosure or loss. No system is completely risk-free; please avoid sharing highly sensitive information over unencrypted channels.

Children

Our services are intended for adults and businesses. We do not knowingly collect personal data from children under 13. If we become aware that information about a child has been collected without parental consent, we will promptly delete it.

Your Rights

• Access: Request a copy of personal data we hold about you.
• Correction: Ask us to correct inaccurate or incomplete data.
• Deletion: Request deletion where retention is not required by law.
• Restriction & Portability: Request limits on processing or portability where applicable.
• Objection: Object to certain processing based on legitimate interests.
• Withdraw Consent: Where processing is consent-based, withdraw consent at any time (this will not affect prior lawful processing).

How to Exercise Your Rights

To exercise any of the above rights or for privacy-related queries, please contact us using the details below. We may request information to verify your identity before responding to requests. We aim to respond within a reasonable timeframe in accordance with applicable law.

Changes to This Policy

We may update this Privacy Policy to reflect changes in our services, legal requirements or operational practices. Significant changes will be posted on this page with an updated “Last Updated” date.

Contact