India Data Protection Notice (DPDP)

This notice explains how FBC TRADES (a proprietorship of Vikram Singh, operating the website FBC Trade Holdings) handles digital personal data in accordance with applicable Indian law, including the Digital Personal Data Protection Act, 2023 and applicable rules.

Data Fiduciary

For purposes of Indian data protection law, FBC acts as a Data Fiduciary in relation to personal data for which it determines the purpose and means of processing.

Consent and Notice

Where consent is required, we seek it through clear, plain notices explaining what personal data is processed, the purposes, how to withdraw consent, how to exercise rights, and how to raise a grievance. Consent notices are provided in English and Hindi where appropriate.

Purpose Limitation

We process digital personal data only for lawful purposes connected to:

• responding to enquiries;
• assessing sourcing and transaction feasibility;
• entering into and performing contracts;
• documentation, logistics, and payment coordination;
• legal and compliance recordkeeping;
• fraud prevention, sanctions checks, and security; and
• communications for which consent or another lawful ground exists.

We do not process personal data for purposes incompatible with those for which it was originally collected.

Data Fiduciary Obligations

We undertake to:

• process data lawfully and for specified purposes;
• implement reasonable security safeguards;
• ensure our processors act under appropriate instructions and controls;
• correct or erase data where required and where retention is not otherwise necessary;
• notify the Data Protection Board of India and affected individuals in the event of a personal data breach;
• establish grievance redress mechanisms; and
• publish contact details for privacy-related communications.

Rights of Data Principals

• access a summary of the personal data we process and related processing activities;
• request correction, completion, updating, or erasure;
• seek grievance redressal;
• nominate another person to exercise rights in the event of death or incapacity; and
• withdraw consent where processing is based on consent.

Cross-Border Processing

Personal data may be processed outside India, subject to Indian legal requirements and any transfer restrictions notified by the Government of India.

Retention and Deletion

Retained only as long as necessary for the stated purpose, compliance, dispute management, fraud prevention, and recordkeeping; deleted or anonymised when the purpose is complete and retention is no longer required.

Children's Data

Intended for business use, not for children; we do not knowingly process children's data; if discovered without verifiable parental consent, we delete it promptly.

Grievance Officer Contact

Escalation

If a grievance is not resolved through our internal process, you may pursue remedies under applicable Indian law, including approaching the competent authority or Data Protection Board of India, where applicable.