Privacy Policy

1. About BRC STAR

BRC STAR PARTNER is a technology and digital solutions company providing services that may include website development, web application development, mobile application development, enterprise software, AI and automation solutions, e-commerce solutions, UI/UX and product design, digital consulting, architecture and related technology services.

For privacy-related matters, BRC STAR PARTNER acts as the organization responsible for the personal information processed through this website, subject to applicable law.

2. Information We May Collect

Depending on how you interact with our website and services, we may collect the following categories of information.

3. How We Use Personal Information

We may use information collected through the website for legitimate business and service-related purposes, including:

• Responding to enquiries and requests
• Understanding your project requirements
• Providing quotations or proposals
• Scheduling consultations or meetings
• Providing requested services
• Communicating about projects, services, or enquiries
• Managing business relationships
• Improving our website and services
• Maintaining website security
• Detecting, preventing, and addressing fraud, abuse, security incidents, or technical problems
• Maintaining business and technical records
• Complying with applicable legal and regulatory requirements
• Protecting our legal rights and interests
• Performing other purposes that are communicated to you at or before the time information is collected

We will seek to process personal information only for lawful and relevant purposes.

4. Legal Basis for Processing

Where applicable, personal information may be processed:

• With your consent;
• To respond to a request or provide a service you have requested;
• To perform or take steps in connection with an agreement or business relationship;
• To comply with applicable legal obligations;
• For legitimate business purposes permitted by applicable law; or
• Where otherwise permitted or required by applicable law.

Where processing is based on consent, you may have the right to withdraw that consent, subject to applicable law and any consequences associated with such withdrawal.

India's Digital Personal Data Protection framework recognizes consent and certain legitimate uses as grounds for processing personal data.

5. Information Sharing and Disclosure

We do not sell your personal information as a business practice.

We may share or provide access to personal information where reasonably necessary with:

6. Third-Party Services and Links

Our website may use third-party technologies, services, platforms, APIs, hosting providers, analytics tools, communication services, or other external services.

Our website may also contain links to third-party websites.

We are not responsible for the privacy practices, security, content, or policies of third-party websites or services that we do not control.

We encourage you to review the privacy policies of relevant third parties before providing them with personal information.

7. Data Security

We take reasonable technical and organizational measures designed to protect personal information against unauthorized access, misuse, alteration, disclosure, loss, or destruction.

Depending on the nature of the information and the applicable service, security measures may include:

• Access controls
• Authentication mechanisms
• Encryption or secure transmission technologies where appropriate
• Server and application security controls
• Monitoring and logging
• Input validation and security practices
• Backup and recovery procedures
• Restricted access to personal information
• Security and operational controls appropriate to the relevant processing activity

However, no internet transmission, website, server, or electronic storage system can be guaranteed to be completely secure.

Accordingly, we cannot guarantee absolute security of information transmitted through the internet.

8. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including:

• Providing requested services;
• Maintaining business and transaction records;
• Resolving disputes;
• Enforcing agreements;
• Maintaining security and fraud-prevention records; or
• Complying with applicable legal, tax, accounting, regulatory, or other obligations.

When personal information is no longer reasonably required, we may delete, anonymize, or otherwise dispose of it in accordance with applicable law and our operational requirements.

9. Your Privacy Rights

Subject to applicable law, you may have rights relating to your personal information, which may include:

• Requesting information about the processing of your personal data;
• Requesting access to relevant personal data;
• Requesting correction of inaccurate or incomplete information;
• Requesting deletion or erasure where legally applicable;
• Withdrawing consent where processing is based on consent;
• Raising a privacy-related grievance or complaint;
• Exercising other rights available under applicable data protection law.

Requests may be subject to reasonable verification to protect against unauthorized access to personal information.

The DPDP Act provides Data Principals with rights concerning access to information about processing, correction/erasure, grievance redressal and other matters, subject to the Act and applicable rules.

10. How to Withdraw Consent

Where we process your personal information based on consent, you may request withdrawal of that consent by contacting us using the details provided in this Privacy Policy.

Withdrawal of consent will not affect processing that was lawfully carried out before the withdrawal.

Depending on the nature of the processing, withdrawing consent may affect our ability to provide certain services or respond to certain requests.

Where required under applicable law, mechanisms for withdrawal will be provided in a manner that is reasonably accessible.

The DPDP Rules, 2025 contemplate accessible mechanisms for withdrawal of consent and exercising data-related rights.

11. Children's Privacy

Our website and services are primarily intended for businesses, professionals, organizations, and other users who are legally capable of entering into relevant arrangements.

We do not knowingly seek to collect personal information from children except where permitted or required by applicable law.

If you believe that a child has provided personal information to us without appropriate authorization, please contact us so that we can review and take appropriate action.

12. International Data Processing

Depending on the technology providers and infrastructure used to operate our website or deliver services, personal information may be processed or stored in locations outside your state or country.

Where applicable, we will take reasonable steps to ensure that such processing is conducted in accordance with applicable law and appropriate contractual, technical, or organizational safeguards.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in:

• Our services;
• Website functionality;
• Technology;
• Data-processing practices;
• Applicable laws or regulations; or
• Business requirements.

When we make changes, we may update the “Last Updated” date displayed at the top of this page.

We encourage you to review this Privacy Policy periodically.

14. Contact and Privacy Enquiries

If you have a question, request, concern, or complaint regarding this Privacy Policy or the processing of your personal information, please contact:

For privacy-related requests, please provide sufficient information for us to understand and verify your request.

We will review and respond to privacy requests in accordance with applicable law.

15. Grievance Redressal

BRC STAR is committed to addressing reasonable privacy-related concerns and complaints.

You may initially contact us using the privacy contact details provided above. We will take reasonable steps to review the matter and provide an appropriate response in accordance with applicable law.

Where applicable, you may have additional rights to approach the relevant statutory or regulatory authority in accordance with Indian data protection law.

16. Governing Framework

This Privacy Policy is intended to operate in accordance with applicable laws and regulations of India, including applicable provisions of the Digital Personal Data Protection Act, 2023, the Digital Personal Data Protection Rules, 2025, and other applicable privacy, information-technology, cybersecurity, and data-protection requirements, as amended or replaced from time to time.

The application of particular laws may depend on the nature of the service, processing activity, user, and applicable jurisdiction.

17. Acceptance

By continuing to use our website, where permitted by applicable law, you acknowledge that you have had an opportunity to review this Privacy Policy.

If you do not agree with the applicable terms of this Privacy Policy, please discontinue use of the website and contact us regarding any information you have previously provided.