DRAFT: needs legal review before publishing. Clauses marked Needs review need a lawyer to confirm them. Delete this box and every Needs review marker before going live.
YOLO EXIM ("we", "us", "our") is an export business based in Pune, Maharashtra, India. We supply Indian spices and textile products to business buyers around the world. This policy explains what personal information we collect when you use www.yoloexim.com (the "website") or contact us, why we collect it, who we share it with, and the choices and rights you have.
The website is intended for businesses and professionals. It is not directed at children, and we do not knowingly collect information from anyone under 18.
1. Who is responsible for your information
YOLO EXIM is responsible for (the "data controller" of) the personal information described in this policy.
- Business name: YOLO EXIM Needs review: add the registered legal name and entity type, e.g. proprietorship, partnership or private limited company
- Address: Pune, Maharashtra, India Needs review: add the full postal address
- Email: contact@yoloexim.com
- Phone / WhatsApp: +91 99870 57057
For any privacy question or request, email contact@yoloexim.com with "Privacy" in the subject line.
2. What we collect
Information you give us
When you request a quote or contact us through the website form:
- full name
- company name
- business email address
- phone or WhatsApp number (optional)
- destination country
- the product, order type and trade terms you are interested in
- anything you write in the message box, such as quantities, specifications and packaging needs
When you email, call or message us on WhatsApp: your name, contact details and anything you choose to tell us, such as your business requirements.
Please do not send us sensitive personal information (for example health, religious or financial account details). We do not need it to prepare a quotation.
Information collected automatically
Analytics (only with your consent). If you accept analytics cookies, Google Analytics 4 collects information about how you use the website: pages visited, time on page, the site that referred you, your device and browser type, and your approximate location (city or country). IP addresses are not stored by Google Analytics 4. We use this only in aggregate, to understand which pages are useful.
Spam protection. When you submit the quote form, Cloudflare Turnstile checks that the submission comes from a person, not an automated program. To do this it processes technical signals from your browser and device, such as your IP address and browser characteristics. It does not set advertising cookies.
Server logs. Our hosting provider automatically records basic technical information for every request to the website, such as IP address, date and time, the page requested and browser type. These logs are used for security and to keep the site running.
3. How we use your information and our legal basis
| Purpose | Information used | Legal basis (EU/UK GDPR) |
|---|---|---|
| Replying to your enquiry and preparing a quotation | Form, email or WhatsApp details | Steps taken at your request before entering into a contract; our legitimate interest in responding to business enquiries |
| Managing an order, shipment and export documentation if you become a customer | Contact and business details | Performance of a contract |
| Following up on a quotation we sent you | Contact details | Legitimate interest in developing business relationships. You can ask us to stop at any time |
| Protecting the website from spam and abuse | Turnstile signals, server logs | Legitimate interest in keeping the website secure |
| Understanding how the website is used | Analytics data | Your consent, which you can withdraw at any time |
| Meeting legal, tax and accounting obligations | Records of transactions and correspondence | Legal obligation |
Under India's Digital Personal Data Protection Act, 2023, we process personal data that you voluntarily provide for the purpose you provided it (such as requesting a quotation) and, where required, with your consent. Needs review: confirm the correct DPDP basis for each purpose once the DPDP Rules are fully in force
We do not sell your personal information, and we do not use it for automated decisions that have legal or similarly significant effects on you. We do not send marketing newsletters. If we ever do, we will ask for your consent first.
4. Who we share it with
We share personal information only with service providers who help us run the website and our business, and only as much as they need:
| Provider | What they do | Where data may be processed |
|---|---|---|
| Hostinger | Hosts the website and its server logs | Needs review: confirm the data-centre region chosen in your Hostinger account |
| Resend | Delivers quote-form submissions to our inbox by email | United States |
| Cloudflare (Turnstile) | Spam and bot protection on the quote form | Global network |
| Google (Google Analytics 4) | Website analytics, only if you consent | United States and other countries |
| WhatsApp (Meta) | Carries your messages if you choose to contact us on WhatsApp | Global. WhatsApp's own privacy policy applies to your use of WhatsApp |
| Our email provider | Stores our business email correspondence | Needs review: name the provider, e.g. Hostinger Email or Google Workspace |
If you place an order, we may also share the details needed to fulfil it with suppliers, freight forwarders, shipping lines, customs brokers, inspection agencies and banks.
We may disclose information if the law requires it, to protect our rights or safety, or as part of a sale or restructuring of our business.
5. International transfers
We are based in India, and our service providers may process information in other countries, including the United States. If you are in the European Economic Area or the United Kingdom, your information will be transferred outside those regions. Where required, we rely on the safeguards our providers offer, such as the European Commission's Standard Contractual Clauses (and the UK Addendum) or the EU–US Data Privacy Framework where a provider is certified. Needs review: confirm the transfer mechanism with each provider and that their data processing agreements are accepted
6. How long we keep it
| Information | How long |
|---|---|
| Enquiries and quotations that do not lead to an order | Up to 24 months after our last contact, then deleted |
| Customer, order and shipping records | As long as the law requires for tax, customs and accounting purposes, typically up to 8 years Needs review: confirm the Indian statutory retention period |
| Analytics data | 14 months (the Google Analytics setting we use) |
| Server logs | As set by our hosting provider, typically up to 30 days Needs review: confirm with Hostinger |
7. Cookies
Essential: the website uses a small number of files that it needs to work. These include a setting that remembers your cookie choice and your light or dark theme, and the Cloudflare Turnstile check on the quote form. These do not need consent.
Analytics: Google Analytics 4 cookies (names beginning _ga) are set only if you click Accept on the cookie banner. They last up to 2 years.
You can change your choice at any time with the Cookie settings link in the website footer, or by clearing cookies in your browser. Rejecting analytics does not affect how the website works.
We do not use advertising or social-media tracking cookies. Social media links in the footer are plain links. The platforms can only collect information if you click through to them.
8. Your rights
Depending on where you live, you may have the right to:
- access the personal information we hold about you and receive a copy
- correct information that is inaccurate or incomplete
- delete your information
- object to, or ask us to restrict, how we use it
- port information you gave us to another organisation, in a common format
- withdraw consent at any time where we rely on consent (such as analytics), without affecting earlier use
- under India's DPDP Act, nominate another person to exercise your rights if you die or become incapacitated, and have your grievance addressed
To use any of these rights, email contact@yoloexim.com. We may need to confirm your identity first. We will reply within one month (30 days), or sooner where the law requires.
Complaints: if you are unhappy with how we handle your information, please contact us first and we will try to resolve it. You can also complain to your local data protection authority. In the EU, that is the supervisory authority in your country; in the UK, the Information Commissioner's Office (ico.org.uk); in India, the Data Protection Board of India once it is operational.
Grievance contact (India): contact@yoloexim.com Needs review: the DPDP Act may require a named grievance officer. Add a name if one is required
9. How we protect your information
The website uses HTTPS encryption. Form submissions go directly to our business inbox and are not stored in a public database. Access to enquiries is limited to the people at YOLO EXIM who need it to respond. We use reputable providers with their own security programmes. No method of transmission or storage is completely secure, but we take reasonable steps to protect your information. If a data breach is likely to affect your rights, we will notify you and the relevant authorities as the law requires.
10. Links to other websites
The website links to other sites, such as WhatsApp and our social media pages. Their privacy policies apply once you leave our website.
11. Changes to this policy
We will update this policy when our practices change. The "Last updated" date at the top shows when it last changed. If a change is significant, we will highlight it on the website.
12. Contact us
YOLO EXIM Pune, Maharashtra, India Email: contact@yoloexim.com Phone / WhatsApp: +91 99870 57057