Privacy policy

This policy explains how SB eCommerce Solutions Private Limited (“SB eCommerce”, “we”, “us”) collects, uses, shares and protects personal data when you visit sbecom.in, write to us, apply for a job, or deal with us as a customer, supplier or business contact. We handle personal data in line with the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and we are preparing for the Digital Personal Data Protection Act, 2023 (“DPDP Act”) as its provisions come into force.

1. Visiting the website

The website does not use cookies, analytics, advertising trackers, social media plug-ins or third-party embeds, and it does not ask you for personal data. Fonts and images are served from our own domain. Our hosting provider automatically records standard technical information — such as IP address, browser type, date and time, and the pages requested — to deliver the website and protect it against abuse. We do not use this information to identify or profile visitors.

If we ever introduce cookies or analytics that are not strictly necessary, we will update this policy and ask for your consent first.

2. Personal data we collect

• When you write to us: your name, email address, any other contact details you give, the content of your message and any attachments.
• When you apply for a job: the information in your application and resume — such as your name, contact details, location, education, work history, skills, expected compensation, notice period and any portfolio or profile links — together with notes from interviews and assessments, and references if you provide them. If you applied through a job portal (for example Naukri, LinkedIn or Internshala), we also receive the details you shared with that portal for the role.
• When you do business with us: names, job titles and business contact details of people at our customers, suppliers and partners, and records of our communications and transactions.

Please do not send us sensitive information we have not asked for — such as Aadhaar numbers, bank details, health information or passwords — with an inquiry or application.

3. How we use it

• to reply to your inquiry and keep a record of our correspondence;
• to assess your application, arrange and conduct interviews, communicate with you about the role and, if you are selected, prepare an offer and onboard you;
• to consider you for other suitable roles, but only if you tell us you would like that;
• to manage our business relationships, place and fulfill orders, and pay and receive payments;
• to keep our systems secure and to prevent fraud, including recruitment fraud;
• to comply with the law, respond to lawful requests from authorities, and establish or defend legal claims.

We process personal data with your consent, or where the law otherwise allows — for example, where you voluntarily send us information for a specific purpose (such as applying for a job), or where processing is needed to comply with the law. We do not sell or rent personal data, and we do not use it for automated decisions that significantly affect you.

4. Job applicants

When you apply, your application is seen only by the people involved in hiring for that role and by the service providers described in section 5. If you are not selected, we keep your application for up to 12 months after we receive it or the role closes, whichever is later, so that we can answer questions about our decision and, if you agreed, contact you about future roles. After that we delete it. You can ask us to delete it sooner at any time. If you join us, your application becomes part of your employment record.

We only consider applications from people aged 18 or over. We will never ask you for money at any stage of recruitment — see our recruitment fraud notice.

5. Who we share it with

• Service providers who process data on our behalf under contract — for email and productivity software, document storage, hosting and HR systems;
• Our affiliated companies, where needed for the purposes above;
• Professional advisers such as auditors and lawyers, under a duty of confidentiality;
• Government, regulatory and law-enforcement authorities, where we are required or permitted by law to do so.

Some of our service providers store data on servers outside India. We transfer personal data outside India only as permitted by Indian law, and we choose providers that apply appropriate security safeguards.

6. How long we keep it

We keep personal data only for as long as we need it for the purpose it was collected, and then delete it — unless the law requires us to keep it for longer (for example, tax, accounting and employment records). Job applications are handled as described in section 4.

7. How we protect it

We use reasonable technical and organizational security measures — including encrypted connections, access controls limited to people who need the data, and secure, reputable service providers — to protect personal data against unauthorized access, loss or misuse. No system is completely secure; if a personal data breach occurs, we will act promptly and notify you and the authorities where the law requires.

8. Your rights

Subject to applicable law — including the DPDP Act as its provisions come into force — you have the right to:

• obtain a summary of the personal data we hold about you and how we have processed it;
• have inaccurate or incomplete personal data corrected, completed or updated;
• have your personal data erased when it is no longer needed, unless we must keep it by law;
• withdraw any consent you have given, as easily as you gave it (this does not affect earlier processing);
• have your grievances about our handling of your data addressed; and
• nominate another person to exercise these rights on your behalf in the event of death or incapacity.

To exercise any of these rights, write to administration@sbecom.in with the subject “Personal data request”. We may need to verify your identity before acting on a request.

9. Grievance Officer

If you have a concern or complaint about how we handle your personal data, please contact our Grievance Officer. We aim to resolve grievances within 30 days.

Designation

Grievance Officer, SB eCommerce Solutions Private Limited

Email

administration@sbecom.in

Location

IMT Faridabad, Haryana 121004, India

If you are not satisfied with our response, you may complain to the Data Protection Board of India once its grievance mechanism applies.

10. If you are in the European Economic Area or the United Kingdom

Where the EU General Data Protection Regulation or the UK GDPR applies to our handling of your personal data, SB eCommerce Solutions Private Limited is the controller and the following also applies.

• Legal bases. We process your data to take steps you ask for before entering into a contract, or to perform one (for example, assessing a job application or handling an order); for our legitimate interests in running and securing our business and replying to correspondence; to comply with legal obligations; or with your consent where we ask for it.
• International transfers. We are based in India, so your data is processed in India and by our service providers, some of which are located in other countries. Where the law requires safeguards for these transfers, we use appropriate mechanisms such as standard contractual clauses.
• Your rights. In addition to the rights in section 8, you can ask us to restrict processing, object to processing based on our legitimate interests, and receive your data in a portable format. You can withdraw consent at any time.
• Complaints. You can complain to the data protection authority in your country, or to the Information Commissioner’s Office in the UK. We would appreciate the chance to address your concern first.

11. Changes to this policy

We may update this policy from time to time. The “last updated” date above shows when it last changed. Where a change materially affects how we use personal data you have already given us, we will tell you.