Privacy Policy

1. Who We Are

AB Chem India ("AB Chem", "we", "us", "our") is a partnership firm operating the website www.abchem.co.in with its principal place of business at Balanagar, Hyderabad, Telangana, India. This Privacy Policy explains how we collect, use, disclose and safeguard personal information when you visit the Website, create an account or place an order. We are the "Data Fiduciary" under the Digital Personal Data Protection Act, 2023 ("DPDP Act") for the personal data described below.

2. Information We Collect

(a) Information you provide directly:

• Identification & contact data — name, organisation, designation, email address, phone number, GSTIN, shipping and billing address.
• Account credentials — username, password (stored hashed), security questions and two-factor authentication secrets.
• Order & enquiry data — products quoted/ordered, intended end-use declarations, custom-synthesis briefs, uploaded attachments.
• Payment data — when a payment gateway is enabled, transaction reference, payment method and bank-confirmation status. We do not store full card numbers, CVV or net-banking credentials on our servers; these are handled by PCI-DSS-compliant payment processors.
• Communications — emails, contact-form submissions, chat or call records.

(b) Information collected automatically:

• Device & usage data — IP address, browser and OS version, referrer, pages viewed, search terms, time spent, click-stream.
• Cookies and similar technologies — see section 7 below.
• Log files maintained for security, fraud prevention and statutory record-keeping.

3. How We Use Your Information

• To process quotations, orders, invoices, payments, shipments and after-sales support;
• To verify buyer identity and intended end-use, as required by chemical and pharmaceutical-supply regulations;
• To maintain your account, respond to enquiries and provide customer service;
• To send transactional emails (order confirmations, dispatch notifications, document delivery);
• To send marketing or product-update communications, where you have opted in (you may unsubscribe at any time);
• To operate, secure and improve the Website — including debugging, fraud prevention, and analytics;
• To comply with applicable law, court orders, tax filings and statutory record-retention obligations.

4. Legal Basis for Processing

We process your personal data on the lawful basis of: (i) your consent, given when you submit a form, create an account or accept cookies; (ii) performance of a contract to which you are a party; (iii) compliance with a legal obligation; and (iv) our legitimate business interests in operating, securing and improving our services, where these are not overridden by your rights.

5. How We Share Your Information

We do not sell your personal data. We share it only with:

• Logistics partners (e.g. DHL, FedEx, BlueDart, India Post and freight forwarders) — for delivery and customs clearance;
• Payment processors — for processing online payments;
• Hosting, email and analytics providers — under contractual confidentiality obligations;
• Professional advisors — auditors, lawyers and tax consultants, on a need-to-know basis;
• Government authorities — when required by law, court order or to protect our rights.

6. International Transfers

If you place an international order, your address and shipment details will be transferred to carriers, customs brokers and the destination country's authorities to enable delivery. Where data is transferred outside India, we apply contractual safeguards consistent with the DPDP Act and Government of India notifications.

7. Cookies & Tracking

The Website uses strictly-necessary cookies (session, cart, CSRF token, theme preference) and may use analytics cookies to understand aggregated usage patterns. You can disable cookies in your browser, but some features — such as the shopping cart, login session and structure-search — may not function. We do not use cross-site advertising trackers.

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Policy and to comply with our legal, accounting and regulatory obligations. Order, invoice and tax records are typically retained for at least eight years as required by Indian tax and company law. Marketing-list data is retained until you withdraw consent. Server logs are retained for up to twelve months for security purposes.

9. Security

We implement reasonable security practices and procedures in line with Rule 8 of the IT (Reasonable Security Practices) Rules, 2011 and ISO/IEC 27001 controls — including HTTPS/TLS encryption, hashed-and-salted password storage, role-based access control, server-side input validation, CSRF protection, secure-cookie flags, off-site backups, and two-factor authentication for administrative accounts. However, no transmission over the internet can be guaranteed to be 100% secure, and you provide personal data at your own risk.

10. Your Rights

Subject to the DPDP Act and other applicable laws, you have the right to:

• Access a summary of the personal data we process about you;
• Request correction or updating of inaccurate or incomplete data;
• Request erasure of personal data that is no longer necessary;
• Withdraw consent for processing or marketing at any time;
• Nominate another individual to exercise your rights in case of death or incapacity;
• Lodge a grievance with our Grievance Officer (see section 12) and, if unsatisfied, with the Data Protection Board of India.

11. Children's Privacy

The Website is not intended for and is not directed at children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, please contact us so we can delete it.

12. Grievance Officer

In accordance with the Information Technology Act, 2000 and Rule 5(9) of the IT (Reasonable Security Practices) Rules, 2011, the contact details of our Grievance Officer are:

Grievance Officer
AB Chem India
Balanagar, Hyderabad, Telangana, India
Email: connect@abchem.co.in
Response time: within thirty (30) days of receipt.

13. Changes to this Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised "Last updated" date. Material changes will be communicated by email or a prominent notice on the Website.