Privacy Policy

This Privacy Policy applies to personal data processed by B.D. Guar Pvt. Ltd. ("B.D. Guar", "we", "us", "our") when you visit bdguar.com and its sub-pages, submit an enquiry or quotation request, subscribe to or read our technical content, correspond with us by email, telephone or WhatsApp, or otherwise engage with us as a customer, distributor, supplier, farmer-partner or job applicant.

B.D. Guar is a business-to-business manufacturer and exporter of Guar Gum powder and derivatives. We do not sell products to consumers through this website, and we do not operate an online store, payment gateway or user account system for the public.

For the purposes of India's Digital Personal Data Protection Act, 2023 ("DPDP Act") we act as a Data Fiduciary. For the purposes of the EU/UK General Data Protection Regulation ("GDPR"), where it applies to our processing of data relating to individuals in the European Economic Area or the United Kingdom, we act as a Data Controller.

• Entity: B.D. Guar Pvt. Ltd.
• Registered works & correspondence address: Plot No. 11/B, G.I.D.C., Kalol, Gujarat 382725, India
• Email: info@bdguar.com
• Telephone / WhatsApp: +91 9879610774

We collect only what we need to respond to business enquiries and operate this website.

3.1 Data you give us directly

• Enquiry and quotation forms: your name, business email address, company name, telephone number, subject line and the content of your message. Name, email and message are mandatory; company, phone and subject are optional.
• Email, telephone and WhatsApp correspondence: the contact details you use and the content of your communication, including any specification sheets, tender documents or shipping details you choose to send.
• Commercial documentation: where you become a customer or supplier, the contact details of your nominated personnel and the information required for order processing, export documentation, customs clearance, certificates of analysis and invoicing.
• Recruitment: if you send a CV or application, the information contained in it.

3.2 Data collected automatically

• Technical and usage data: IP address (truncated where our analytics provider supports it), browser type and version, device type, operating system, screen size, referring URL, pages viewed, time on page and approximate location at city or country level.
• Hosting and security logs: our hosting and content-delivery providers record request logs for availability, abuse prevention and diagnostics.

3.3 Data we do not collect

We do not knowingly collect special-category or sensitive personal data (such as health, biometric, religious or political data) through this website, and we ask that you do not include such information in enquiry forms. We do not collect payment card data on this website — commercial payments are handled through banking channels outside of it.

• To read, route and respond to your enquiry, sample request or quotation request.
• To prepare quotations, proforma invoices, specifications and certificates of analysis.
• To perform and administer supply contracts, including export, shipping, insurance and customs formalities.
• To keep a record of business correspondence for quality-management, traceability and audit purposes required by our ISO 9001:2015, FSSAI, HALAL, KOSHER and FDA-related obligations.
• To send technical or commercial updates to existing business contacts, where permitted and always with an opt-out.
• To measure aggregate website performance and improve our technical content.
• To protect the website against fraud, abuse and security incidents.
• To comply with applicable law and to establish, exercise or defend legal claims.

We do not sell personal data, we do not rent contact lists, and we do not use your enquiry data for automated decision-making or profiling that produces legal or similarly significant effects.

Where the GDPR applies, we rely on the following legal bases:

• Performance of a contract or steps prior to entering into a contract (Art. 6(1)(b)) — responding to quotation requests and fulfilling orders.
• Legitimate interests (Art. 6(1)(f)) — operating and securing our website, B2B relationship management, and limited direct communication with business contacts. We balance these interests against your rights and you may object at any time.
• Consent (Art. 6(1)(a)) — non-essential analytics cookies and any optional marketing communications. Consent may be withdrawn at any time without affecting prior processing.
• Legal obligation (Art. 6(1)(c)) — tax, customs, export-control and food-safety record-keeping.

Under the DPDP Act, we process personal data on the basis of your consent or for the "legitimate uses" recognised by that Act, and we provide notice at the point of collection.

This website uses a small number of cookies and similar technologies. Strictly necessary cookies support page delivery, language and security; they cannot be switched off through the site.

We use Google Analytics 4 to understand aggregate traffic patterns — for example, which technical articles are read most often and which countries our visitors come from. Analytics scripts are loaded only after the initial page render, IP addresses are handled in accordance with Google's IP-anonymisation behaviour for GA4, and we do not enable Google Signals advertising features or cross-site ad personalisation.

You can block or delete cookies in your browser settings, and you can install Google's browser opt-out add-on. Blocking analytics cookies will not affect your ability to browse the site or contact us.

We share personal data only where necessary, and only with the following categories of recipients:

• IT and hosting providers that host this website, its database and its content-delivery network.
• Analytics provider (Google Analytics 4) for aggregate website measurement.
• Communication providers — our email provider and, where you initiate contact through it, WhatsApp (Meta Platforms), whose own privacy terms then apply to that conversation.
• Logistics, freight-forwarding, inspection, insurance and customs-broking partners, where contact details are required to execute a shipment you or your company has ordered.
• Certification bodies and auditors, where records must be produced for ISO, FSSAI, HALAL, KOSHER or customer audits.
• Professional advisers (accountants, lawyers, bankers) under duties of confidentiality.
• Public authorities, where disclosure is required by law or to defend legal claims.

All processors act on our documented instructions under written agreements that require appropriate confidentiality and security measures.

B.D. Guar is established in India and exports to more than 50 countries. Personal data you submit is therefore processed in India, and may also be processed by our service providers in other jurisdictions, including the European Union and the United States.

Where personal data originating in the EEA or UK is transferred outside those territories, we rely on the European Commission's Standard Contractual Clauses (or the UK International Data Transfer Addendum), together with supplementary technical measures such as encryption in transit, as the transfer mechanism. A copy of the relevant safeguards can be requested at info@bdguar.com.

• Website enquiries that do not lead to a business relationship: retained for up to 24 months from the last contact, then deleted.
• Customer, supplier and export records: retained for the duration of the relationship and thereafter for the period required by Indian company, tax, customs and food-safety law — generally 8 years.
• Quality and traceability records linked to a batch or certificate of analysis: retained in line with our ISO 9001:2015 quality-management system.
• Analytics data: retained in aggregate form according to the GA4 retention setting applied to our property.
• Unsuccessful job applications: deleted within 12 months unless you ask us to keep them on file.

The website is served exclusively over HTTPS/TLS. Enquiry submissions are validated and stored in a managed database protected by row-level access controls, so that submissions can be read only by authenticated B.D. Guar personnel holding an administrative role. Access is granted on a need-to-know basis, credentials are individual, and administrative interfaces are not publicly indexed.

No method of transmission or storage is completely secure. If a personal data breach occurs that is likely to result in risk to affected individuals, we will notify the competent authority — including the Data Protection Board of India and, where the GDPR applies, the relevant supervisory authority — and affected individuals, within the timeframes required by law.

Subject to the law that applies to you, you may:

• Request access to the personal data we hold about you and a summary of our processing.
• Request correction of inaccurate or incomplete data, or completion and updating of it.
• Request erasure of your data where it is no longer needed for the purpose collected and no legal retention duty applies.
• Request restriction of processing, or object to processing based on legitimate interests.
• Request portability of data you provided to us, in a structured, machine-readable format.
• Withdraw consent at any time, including for analytics cookies and marketing emails.
• Nominate another individual to exercise your rights on your behalf in the event of death or incapacity (DPDP Act, s.14).
• Complain to the Data Protection Board of India, or to your local EEA/UK supervisory authority.

To exercise any right, email info@bdguar.com with "Privacy Request" in the subject line. We will respond within 30 days. We may ask for reasonable information to verify your identity before we act, and we do not charge a fee for a first request.

This website is directed at businesses and industrial buyers. It is not intended for children, and we do not knowingly collect personal data from anyone under 18 years of age. If you believe a child has provided us with personal data, contact us and we will delete it.

Our pages link to external resources — including regulatory texts, scientific journals, our LinkedIn company page and embedded YouTube or Google Maps content. Those services are operated independently and have their own privacy notices. Loading an embedded map or video may allow the provider to set cookies or record your IP address. We are not responsible for the privacy practices of third-party sites.

We review this Policy at least annually and whenever our processing changes materially. The effective date at the top of this page always reflects the current version. Material changes will be highlighted on this page; continued use of the website after publication constitutes acknowledgement of the updated Policy.

For any question about this Policy, or to exercise your rights, contact our privacy point of contact:

You can also reach us through our contact page.