Privacy Policy

Document ID: BNLV-PP-001 · Version 1.0 · Effective Date: May 2026 · BNLV Group

Summary: BNLV Group collects only the data needed to respond to your enquiries and deliver our services. We do not sell your data. We comply with GDPR and the India Digital Personal Data Protection Act 2023.

1. Who We Are

BNLV Group ("we", "us", "our") is a enterprise conglomerate comprising Business Management Solutions, Nidhivan Consulting, LIMSY Legal Intelligence, and Vihang Creations, headquartered in Raipur, Chhattisgarh, India.

For data protection enquiries, contact: privacy@bnlvgroup.com

2. Data We Collect

We collect the following categories of personal data:

Contact information: Name, email address, phone number, company name
Enquiry data: Service interest, message content, division selected
Technical data: IP address, browser type, pages visited, session duration (anonymised in analytics)
Marketing data: UTM parameters, referral source, campaign identifiers
Consent records: Timestamp and version of privacy policy accepted

3. How We Use Your Data

To respond to your enquiry and deliver requested services
To send automated acknowledgement emails following form submission
To route your enquiry to the correct specialist team
To maintain our CRM and manage the sales pipeline
To improve our website and services through anonymised analytics
To send marketing communications where you have given explicit consent

4. Legal Basis for Processing

We process your personal data under the following legal bases:

Contract performance: Processing necessary to respond to your enquiry
Legitimate interests: CRM management, fraud prevention, website improvement
Consent: Marketing communications, non-essential cookies
Legal obligation: Compliance with applicable laws and regulations

5. Data Sharing and Third Parties

We share your data only with the following categories of processors, all of whom have executed Data Processing Agreements (DPAs) with us:

CRM provider (HubSpot / Zoho): Lead pipeline management
Email service provider (SendGrid / Amazon SES): Transactional email delivery
Analytics provider (Google Analytics 4): Anonymised traffic analysis
Hosting providers (Vercel, AWS): Website and application infrastructure
CAPTCHA provider (Google reCAPTCHA): Bot prevention (risk score only, no PII)

We do not sell your personal data to any third party under any circumstances.

6. Data Retention

Enquiry records: Retained for 3 years from last interaction, or as required by applicable law
Client contract records: Retained for 7 years following contract completion
Marketing consent records: Retained until withdrawal of consent + 1 year
Analytics data: Anonymised; retained for 26 months (Google Analytics default)
Server logs: 90 days rolling retention

7. Your Rights

Under GDPR and the India DPDP Act 2023, you have the following rights:

Right of access: Request a copy of your personal data
Right to rectification: Correct inaccurate or incomplete data
Right to erasure: Request deletion of your personal data
Right to portability: Receive your data in a structured, machine-readable format
Right to object: Object to processing based on legitimate interests or for direct marketing
Right to restriction: Request restriction of processing in certain circumstances

To exercise any right, email privacy@bnlvgroup.com. We will respond within 30 days.

8. Cookies

We use the following categories of cookies:

Essential cookies: Required for website functionality. No consent required.
Analytics cookies: Google Analytics 4 (anonymised). Requires consent.
Marketing cookies: UTM tracking, retargeting. Requires consent.

You can manage your cookie preferences at any time via our cookie consent banner or by emailing us.

9. Security

We implement enterprise-grade security measures including: HTTPS/TLS 1.3 on all pages, AES-256 encryption at rest, Web Application Firewall (Cloudflare WAF), weekly automated vulnerability scans, quarterly penetration testing by CREST-accredited vendors, and MFA enforced for all administrative access.

10. International Transfers

Your data may be transferred to and processed in countries outside India, including the United States and European Union. Where transfers occur, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) and adequacy decisions where applicable.

11. Children's Privacy

Our services are not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email to registered users and via a prominent notice on our website. The version history is maintained in our document control system.

13. Contact & Complaints

For any privacy-related query or to make a complaint: privacy@bnlvgroup.com · BNLV Group, Raipur, Chhattisgarh, India.

If you are not satisfied with our response, you have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction.