Privacy Policy & Data Protection Notice

TrimbakStore (Sudeep Bagaria (Individual)) is the Data Fiduciary for the personal data described in this notice (Sections 5(1) and 6, DPDP Act).

Entity

Sudeep Bagaria (Individual)

Address

Meghmalhar Apartments, Ganesh Nagar Road, Nashik - 422007

Privacy contact

privacy@trimbakstore.com

Grievance Officer

See Grievance Redressal

TrimbakStore is currently a demonstration platform. The public pages collect no personal data: the enquiry, contact and trip-planning forms on the public site do not submit, transmit or store anything. The provider directory shows fictional demonstration businesses.

This notice nevertheless describes how personal data would be processed once the platform goes live — and how the demonstration tools process data today:

• The Business Intake flow captures a business's details, images and proof of payment, together with the identity of the person submitting.
• The Admin console lets operators create and manage provider records and internal status markers.
• Contact-interest counters are kept per provider; they do not identify individual visitors.

We collect only what is needed for the purposes in Section 4:

• Identity and contact details— name, business name, telephone, WhatsApp number, website, service area and address submitted through Business Intake.
• Business information— descriptions, facts, category and images provided for a provider listing.
• Proof-of-payment imagery— screenshots or photos uploaded as proof of a payment; used for verification only and never shown on public pages.
• Contact-interest counts— aggregate counters that tell a provider how often visitors opened contact options; these do not reveal who clicked.

We do not collect sensitive (special-category) personal data, and we do not knowingly collect data of a child.

Before we process personal data on the basis of consent, we show you a clear notice — this page — describing the data, the purposes and how to exercise your rights (Section 5, DPDP Act). Consent is specific, informed, unconditional and unambiguous, given by a clear affirmative act (Section 6).

Withdrawing consent is as easy as granting it (Section 6(6), DPDP Act). You can withdraw at any time from Grievance Redressal, by emailing privacy@trimbakstore.com, or by withdrawing it in the Business Intake flow. Processing already done with your consent remains lawful; we stop further processing on withdrawal.

From November 2026 (implementation phase for consent management under the DPDP Rules, 2025), where consent is required, we will offer consent through a Consent Manager registered with the Data Protection Board of India, so you can view and withdraw consents in one place.

You have the following rights, which you can exercise free of charge from our Data Principal rights request form:

• Access — to obtain a summary of your personal data and how it is processed (Section 11).
• Correction and erasure — to correct, complete or erase your personal data (Section 12).
• Grievance redressal — to have grievances addressed through our Grievance Officer (Section 13).
• Nomination — to nominate a person to exercise your rights on your death or incapacity (Section 14).
• Withdrawal of consent — at any time, as easily as it was given (Section 6(6)).

We will acknowledge requests promptly and resolve them within 90 days (as capped by the DPDP Rules, 2025), informing you if any extension or verification is needed.

We apply reasonable security safeguards to prevent misuse, destruction, loss, alteration or unauthorised access (Section 8, DPDP Act; Rule 6, DPDP Rules 2025): encryption in transit, role-based access control, masking where feasible, access logging and system backups.

Demonstration caveat: the current demo keeps its overlay in the browser's local storage only. Before go-live, all data moves to a server database protected by the safeguards above, and proof-of-payment imagery is moved to private, access-controlled storage that is never exposed on public pages.

Personal data is erased as soon as the purpose for which it was processed is completed — we do not keep data longer than needed (Rule 10, DPDP Rules 2025). In particular:

• Business Intake data is kept until the application is decided and then reduced to what the provider record requires.
• Proof-of-payment imagery is used for verification and is deleted once the payment obligation is resolved and receipt records are complete.
• Consent records are kept for as long as processing relies on them, so that we can demonstrate that valid consent was obtained (burden of proof: Section 6(10)).

Our services are not targeted at children. We do not track or behaviourally target children, and targeted advertising of any kind is not offered (Section 9, DPDP Act). If we become aware that we hold the personal data of a child in a way that was processed without verifiable parental consent, we will erase it and notify the parent as required.

We do not currently transfer personal data outside India. Should we ever do so, we will only transfer to a country or territory notified as permissible under Section 16 of the DPDP Act, and the updated notice will identify the recipient countries.

If you believe your data protection rights have been affected, please first contact our Grievance Officer:

Officer

Sudeep Bagaria

Email

privacy@trimbakstore.com

Phone

+91 99300 36747

Address

Meghmalhar Apartments, Ganesh Nagar Road, Nashik - 422007

Your grievance is acknowledged within 48 hours with a reference number and resolved within 90 days (Rule 7, DPDP Rules 2025). If you are not satisfied with our response, you may file a complaint with the Data Protection Board of India. See Grievance Redressal for the full process.

We may update this notice as the platform develops and as the DPDP Rules are phased in. Material changes are highlighted on this page, and the version and in-effect date at the top always show the latest revision. Continuing to use the platform after a change means you accept the updated notice.