Privacy Policy
Last Updated: July 2026
This Privacy Policy (“Policy”) explains how NITISARA Private Limited (“Nitisara,” “we,” “us,” “our”) collects, uses, discloses, and protects information in connection with your use of our website (https://nitisara.org), our Global Value Chain platform and related solutions — including TradoNova, XEmission, and ColdChain IQ — and any other services we provide (collectively, the “Services”).
Note: NITISARA is transitioning from NITISARA OPC Pvt. Ltd. to NITISARA Private Limited in July 2026. This Policy reflects the updated entity name — please confirm the effective date once the conversion is registered with the RoC, so we cite the correct name from the correct date.
By using the Services, you agree to the collection, use, and disclosure of information as described in this Policy. If you do not agree, please do not use the Services.
1. Scope and Applicable Law
This Policy is designed to comply with:
The Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable rules of India, as NITISARA is an Indian company; and
The EU General Data Protection Regulation (GDPR), to the extent we process personal data of individuals located in the European Economic Area (EEA) or UK — for example, where our channel partners, customers, or website visitors are based there.
Where DPDP Act and GDPR requirements differ, we apply the higher standard of protection unless otherwise stated.
2. Information We Collect
Information you provide directly:
Contact and business details submitted via our “Get Started” form, contact form, partnership inquiries, or newsletter subscription (name, email, phone, company, designation)
Information shared when scheduling advisory sessions or partnership calls (via Calendly/Topmate)
Correspondence you send us directly
Information collected automatically:
Device and usage data (IP address, browser type, pages visited, time on page, referring URLs) via cookies and similar technologies — see our Cookie Policy for details
Analytics data on when and where we use tools such as Google Analytics
We do not currently operate e-commerce, user account registration, or payment processing on this website. (Flagging this because the current live policy references purchases, donations, and account logins — none of which appear to apply to your actual site. I’ve removed that language below. Let me know if this is inaccurate.)
3. How We Use Your Information
To respond to inquiries, demo requests, and partnership proposals
To operate and improve the Services and website
To send newsletters or updates you’ve opted into
To conduct analytics on website usage
To comply with legal obligations and enforce our Terms and Conditions
4. Legal Basis for Processing (GDPR)
Where GDPR applies, we rely on: your consent (e.g., newsletter sign-up), our legitimate interests (e.g., responding to business inquiries, improving the Services), and compliance with legal obligations.
5. Consent and Grounds for Processing (DPDP Act)
Where the DPDP Act applies, we process personal data on the basis of your free, specific, informed consent, given via clear affirmative action (e.g., submitting a form), or where processing is for a “legitimate use” recognized under the Act (e.g., you’ve voluntarily provided data for a specified purpose, such as a partnership inquiry).
6. Disclosure of Information
We may share information with:
Service providers who support our operations (e.g., hosting, analytics, email/CRM tools)
Legal authorities, where required by law
A successor entity, in the event of a merger, acquisition, or asset transfer
IITM/incubation stakeholders, only where necessary for institutional reporting obligations tied to our incubation program, and only in aggregate or as legally required
We do not sell personal information.
7. Your Rights
If you are in India (under the DPDP Act), you have the right to: access information about your personal data, request correction or erasure, withdraw consent, nominate another individual to exercise your rights in the event of death/incapacity, and file a grievance with us before approaching the Data Protection Board of India.
If you are in the EEA/UK (under GDPR), you additionally have the right to: data portability, and the right to object to or restrict certain processing.
To exercise any of these rights, contact our Grievance Officer at [Sagar k. C/ contact@nitisara.org — required under DPDP Act].
8. International Data Transfers
Where we transfer personal data outside India or the EEA, we take reasonable steps to ensure it receives an adequate level of protection, consistent with applicable law.
9. Data Retention
We retain personal data only as long as necessary for the purposes described above or as required by law.
10. Security
We implement reasonable technical and organizational measures to protect personal data, though no method of transmission or storage is completely secure.
11. Children’s Privacy
Our Services are intended for business use by individuals 18 years or older and are not directed at children.
12. Third-Party Links
Our website may link to third-party sites (e.g., LinkedIn, Calendly, Topmate). We are not responsible for their privacy practices.
13. Changes to This Policy
We may update this Policy from time to time. Material changes will be notified via the website or, where appropriate, by email.
14. Contact Us
NITISARA Private Limited
Registered Office: New Delhi, India
Email: contact@nitisara.org